About Pure Security
The specialist who scopes your engagement is the one who delivers it.
Built on direct delivery, not handovers #
Pure Security is built so that the person who scopes your engagement is the person who delivers it. You get direct access to CISO-level judgement and practical security engineering, with no handover between the person who understands your environment and the person doing the work.
That work is backed by 20+ years of security leadership: former CISO of an APAC payment processor serving 100+ financial institutions across 12 jurisdictions, head of information security for a Thai banking group’s data and AI ventures, enterprise GRC lead for a global technology platform, and 24x7 security operations lead for Australia’s air traffic critical infrastructure.
Earlier career foundations were built at the Australian Signals Directorate, authoring national defensive policy including the Information Security Manual and leading defensive operations against nation-state threats, followed by site reliability engineering for high-assurance government and enterprise platforms.
Where we work #
- Thailand: our home market, supporting regulated sectors under Bank of Thailand (BOT) and Thai SEC expectations
- Wider APAC: cross-border programmes for groups operating in multiple countries. We have designed and implemented cybersecurity programmes aligned with more than 10 unique jurisdictions and control frameworks in the region, and we understand the distinct regulatory and operational expectations of each. Engagements are delivered across regulatory compliance, technical security engineering, and strategic governance.
- Pre-cleared Visas: We can join your team tomorrow. We hold pre-cleared business visas to access most APAC nations, including Australia, Brunei Darussalam, China, Hong Kong SAR, Indonesia, Japan, Korea, Malaysia, New Zealand, Papua New Guinea, the Philippines, Singapore, Chinese Taipei, Thailand, and Vietnam:
Clear, actionable outcomes #
Every finding we raise carries an owner, a remediation path and a cost estimate. Reports state what was tested, what was not tested, and what the gaps mean in business terms, including the findings that are inconvenient for us.
Transparent, fair pricing #
Rates are shared before the proposal and scope is fixed in writing, so the commercial picture is clear before any work begins.
We also say no when we are not the right party for a piece of work. If an engagement would compromise our independence, for example, independently auditing a control we designed or operate, we will tell you and where possible, recommend another trusted vendor.