Security for Your Sector

Every sector has its own systems, its own regulators and its own ways of being attacked. A bank worries about payment fraud and what OJK will ask. A power company worries about keeping supply running. We shape each test around the systems and rules that apply to you, and our testers hold CREST certifications.

Snipeyes is an ISO/IEC 27001:2022 certified cybersecurity firm headquartered in Jakarta. We work in English and Indonesian, for clients in Indonesia and abroad.

Banking & Financial Services

Core banking, SWIFT, mobile banking and payment APIs, tested from outside and inside your network. Covers PCI DSS 4.0, SWIFT CSP and SOC 2.

PCI DSS 4.0SWIFT CSP

FinTech & Digital Payments

Wallets, payment APIs and customer onboarding (KYC), tested for logic flaws and access bugs. Helps you pass bank partners' due diligence and PCI DSS or SOC 2 audits.

BOLASOC 2

Government & Public Sector

E-government services and citizen data, with a security sign-off before new systems go live. Aligned with NIST CSF, ISO 27001 and OWASP ASVS.

NIST CSF

Telecommunications

Billing and operations systems (OSS/BSS), the 5G core and subscriber data, tested without disrupting your customers.

5G Core

Energy & Natural Resources

The wall between office and plant networks, industrial control systems and remote operations. Testing is planned around keeping production running.

OT-aware

Technology, SaaS & Data Center

Shared cloud platforms and development pipelines. We check that one customer cannot reach another's data, with evidence for SOC 2 and ISO 27001.

SOC 2

Healthcare & Life Sciences

Hospital systems, medical records, imaging and connected devices, tested without interrupting patient care. Covers HIPAA where it applies.

HIPAA

Insurance

Policy platforms, claims portals and the personal and health data behind them. Evidence for HIPAA, PCI DSS and SOC 2 reviews.

HIPAA

Retail & E-commerce

Online stores, marketplaces, point-of-sale and loyalty APIs. We look for card-skimming risks such as Magecart and test against PCI DSS 4.0 and OWASP ASVS.

PCI DSS 4.0

Manufacturing & Industry 4.0

Factory networks, SCADA and PLC controllers and production software (MES). Tested to IEC 62443 with methods that keep the line safe.

IEC 62443

Transportation & Logistics

Transport and warehouse systems, fleet tracking, port and airport control systems, and APIs. We test how well you would stand up to ransomware without stopping operations.

TMS/WMS

Automotive & Smart Mobility

Connected vehicles, over-the-air updates, vehicle-to-everything (V2X) links and EV charging. Aligned with UNECE WP.29 and ISO 21434.

ISO 21434

Education & EdTech

Learning and student information systems, campus networks and research clouds. Protects student data and research while keeping access open for teaching.

PII

Critical Infrastructure & Utilities

Power, water, SCADA and smart-city systems. Tested against IEC 62443 and NERC CIP, using methods chosen to avoid outages.

NERC CIP