Find the breach points.
Patch them together.
A private, non-destructive red team reconnaissance & vulnerability discovery initiative for Southeast Asian companies. We test your perimeter like real adversaries, deliver encrypted findings, and collaborate side-by-side to patch vulnerabilities for free.
Ancient Vigilance For The Modern Digital Realm
In ancient ASEAN seafaring and village traditions, settlements survived by forming fortified sanctuaries. Neighboring watchmen regularly tested each other’s palisades and sea watchtowers for structural weaknesses—not to conquer, but to immediately join hands and reinforce the cracks before hostile raiders or typhoons struck.
Project ACSS (ASEAN Cyber Safe Space) revives this ancestral pact: We provide elite adversarial pressure testing so our regional tech community stays impenetrable.
Adversary Emulation (Red Teaming)
We analyze exposed assets the way persistent threat actors do—hunting subdomain takeovers, misconfigured cloud buckets, outdated dependencies, leaked secrets, and authentication bypasses.
Collaborative Patching (Purple Team)
Finding bugs is only half the work. We furnish your engineers with exact remediation steps, code patches, and configuration fixes, then re-test to verify full closure.
Zero Public Disclosure
Your security posture remains completely secret. Findings are transmitted exclusively via PGP-encrypted channels or private direct delivery to your authorized technical contacts.
Free Community Sovereign Defense
Offered as a community grant initiative for ASEAN startups, SMEs, open-source maintainers, and regional businesses looking to strengthen their security posture.
Operational Workflow
From Scope Submission to Verified Patch
A transparent, safe 4-step process designed to minimize friction and prevent production impact.
Submit Authorized Scope
Define the domain, IP ranges, or applications you own and specify particular areas of concern.
Passive & Active Recon
Our red team runs perimeter scans, certificate analysis, exposure discovery, and threat-intel correlation.
Private Vulnerability Brief
You receive a prioritized report containing CVSS severity scores, proof of concept, and tailored remediation guidelines.
Collaborative Patch Verification
Once your team implements the recommended fix, we re-test the attack vector to guarantee the vulnerability is resolved.
Register Your Scope for ACSS Assessment
All submissions are strictly confidential. Our team will review the scope and contact your designated technical email.
Frequently Asked Questions
Everything you need to know regarding safety, privacy, and methodology.
Why is Project ACSS offered for free?
As part of Tara’s commitment to regional cyber resilience, Project ACSS exists to support ASEAN startups, small enterprises, and digital organizations that may not have dedicated red teams or large offensive security budgets.
Will these scans cause service outages or performance degradation?
No. ACSS operates under strict non-destructive Rules of Engagement (RoE). We use controlled reconnaissance and payload verification that strictly avoids Denial-of-Service (DoS), data destruction, or disruption to live user traffic.
Who has access to the discovered vulnerability data?
Only the assigned ACSS security engineers and your verified contact person. Findings are never shared publicly, leaked to third parties, or weaponized.