At a glance
| Booth | Q5336 |
| Country | TW |
| Website | www.chtsecurity.com |
Company profile
CHT Security Co., Ltd. is part of the Chunghwa Telecom Group, which is Taiwan's first telecom operator and one of its trusted information and communications technology companies. Since 2003, CHT Security Co., Ltd. has accumulated practical information-defense experience and provides cybersecurity solutions to more than 300,000 households, 20,000 small and medium-sized enterprises, and 200 large enterprises and government organizations. As a managed security service provider, the company focuses on cybersecurity technologies grounded in network and communications expertise to defend networks, gateways and endpoints. Recognition includes a BSI IT service-management pilot award and Frost & Sullivan's 2021 Taiwan Managed Security Service Company award. Its security systems are certified to ISO 27001 and ISO 20000, while its digital-forensics and cybersecurity-testing laboratory is accredited to ISO 17025. The company is the only provider to have received all-A ratings for consecutive years in Taiwan's government Security Service Provider Evaluation. Its security experts handle 1.4 million cyberattacks and 5,000 DDoS attacks each month to protect enterprise and government information and operational-technology systems. Network-security services include intrusion prevention, DDoS protection, cloud WAF, advanced network defense, network-threat gatekeeping and file-security services. Professional services include red-team services, penetration testing, security health checks, social-engineering assessments, SOC monitoring and incident response, and digital forensics; consulting covers ISMS, PIMS and PKI. Security products include SecuTex network protection with PCAP sniffing and network-anomaly detection, an ISAC information-sharing and analysis platform, a vulnerability-management platform, and an SOC management platform with ticketing and threat-intelligence systems. Identity-related offerings include secure elements and the CypherCom end-to-end encrypted communication system, while project development includes overall network and cybersecurity planning and construction.
Exhibits
The penetration-testing service simulates real attackers and acts as a Red Team to challenge protection mechanisms and identify exploitable vulnerabilities and attack paths. Testing covers on-premises, cloud and hybrid-cloud environments so organizations can identify security blind spots across different deployment models. The service uses systematic tools and processes together with security experts who have years of practical experience, security technologies and security tools to conduct in-depth testing. Remote penetration testing applies infiltration techniques, attack techniques, vulnerability exploitations and website-vulnerability methods against target hosts. After testing, clients receive an assessment report documenting the test process and details together with improvement recommendations and professional consultation. Benefits include professional result analysis to identify system vulnerabilities, patching-schedule recommendations to prioritize fixes and professional consultation to improve remediation effectiveness. The penetration-testing team holds certifications including OSCP, OSED, CISSP, CREST, GWAPT, ECSA, GPEN and CEH. Its penetration-testing clients span financial services, government agencies and academic institutions, military organizations, high-tech industries, healthcare and manufacturing. The service combines a knowledge base, commercial software and self-developed tools to provide security assessments and improvement recommendations tailored to individual client needs. During assessments, test personnel follow confidentiality requirements for customer data, and the team describes continuous strengthening of system and information protection under ISO 27001. The team also lists the capability to discover 0-day vulnerabilities and notes ISO 27001, ISO 27701 and ISO 20000 certifications. CHT Security Co., Ltd. was named a 2024 Top Penetration Testing Service Provider in APAC by Cyber Security Review. Related testing services include Red Teaming, Vulnerability Assessment, Social Engineering Assessment, Mobile App Security Assessment, Source Code Security Analysis, Cyber Security Evaluation, IoT Testing and OT Security.
Capabilities and products
- intrusion prevention services
- DDoS protection services
- cloud WAF services
- advanced network defense systems
- network threat gatekeeping services
- file security services
- red teaming services
- penetration testing
- vulnerability assessment
- cybersecurity health checks
- social engineering assessment
- mobile app security assessment
- source code security analysis
- IoT security testing
- OT security services
- SOC monitoring and incident response
- digital forensics
- ISMS/PIMS/PKI consulting services
- PCAP sniffing and network-anomaly detection protection
- ISAC information-sharing and analysis platform
- vulnerability management platform
- SOC management platform
- secure elements
- end-to-end encrypted communication systems
- end-to-end network and cybersecurity planning and implementation