SecureMetric Technology, which trades as Securemetric, supplies the digital identity and cryptography that governments and enterprises in Southeast Asia rely on. It helps them prove who their users are, protect the keys and certificates behind their services, and prepare for the move to post-quantum cryptography.
Its buyers are typically government agencies, banks and large enterprises that run national or regional digital services and need both the technology and the local team to deploy and operate it.
At A Glance
| Vendor | Securemetric Berhad |
|---|---|
| Category | PKI, HSM and authentication |
| Identities covered | Employees, partners and customers; keys, certificates and cryptographic assets |
| Deployment | On-premises, cloud and hybrid |
| Market classification | Identity Verification |
What SecureMetric Technology Does
Government services, banks and large enterprises need to prove who a user is, sign and encrypt data, and keep track of thousands of keys and certificates, and they now face a migration to post-quantum algorithms on top. Securemetric approaches this as a regional integrator as well as a product company: it combines its own identity and cryptography products with partner technology, and wraps them in implementation, advisory and assessment services, so a customer can get from design to day-to-day operation with one supplier. Its post-quantum work starts from the same principle, by first finding every key, certificate and algorithm in use.
Products
Digital Identity And Authentication
Organisations that issue digital identities at national or enterprise scale can buy turnkey PKI from Securemetric, which covers the work from design and deployment through to day-to-day operation, including advice for WebTrust certification. For everyday sign-in, its access management adds passkeys for passwordless login, web SSO, MFA and FIDO authentication, plus user lifecycle management, access policies, activity tracking and audit-ready reports. The vFido mobile app acts as the authenticator.
Crypto Key Management And Certificate Lifecycle Management
Expired certificates cause outages and unmanaged keys cause breaches. These products give one console for the key lifecycle, with policy enforcement, and automate certificate issuance, renewal and revocation, alerting teams before a certificate expires.
Hardware Security Modules
General-purpose HSMs handle signing, encryption and key storage in tamper-resistant hardware. Payment HSMs add financial applets for payment processing, card issuance and PIN management, aimed at banks and payment providers. The modules carry FIPS and/or Common Criteria certification.
Crypto Discovery And PQC
Before moving to post-quantum cryptography, a team has to know what it is running. The Cryptographic Discovery Platform finds keys, tokens, certificates, algorithms, protocols and cryptographic libraries and keeps them in a Cryptographic Bill of Materials (CBOM) that updates itself. It flags risks with guided remediation, produces a post-quantum migration roadmap and includes a PQC Scanner.
Mobile Trust And App Protection
For banks and agencies shipping mobile apps, Securemetric resells Zimperium Mobile Threat Defense and the Mobile Application Protection Suite (zScan, zKeyBox, zShield, zDefend), and runs its own mobile app security assessments.
Data Security And Governance
Database encryption, data leak prevention, cloud data security, privacy protection and data anonymisation protect sensitive records. A homomorphic cryptography platform lets organisations exchange data while it stays encrypted.
How It Works
| Component | What it does |
|---|---|
| Deployment | Key and certificate management runs on-premises, in the cloud or in a hybrid of the two. The crypto discovery platform runs on-premises or in a private cloud and can use the customer’s existing agents or Securemetric’s own, alongside internal scanners. |
| Discovery to management | Discovery feeds the CBOM, and the key and certificate managers then enforce policy on what was found. |
| Hardware root | HSMs keep the most sensitive keys in hardware and perform signing and encryption inside it. |
| Mobile | Zimperium’s detection model runs on the device itself, so it works offline and sensitive data stays on the phone. |
Identities And Systems Covered
| Human users | Employees, partners and customers through IAM, MFA, FIDO and passkeys |
|---|---|
| Digital certificates | PKI-issued identities and certificate lifecycles |
| Cryptographic keys | Keys, tokens, algorithms and libraries recorded in the CBOM, keys held in HSMs and keys protected by zKeyBox white-box cryptography |
| Mobile devices and apps | Corporate and personal devices and mobile applications |
Company Background
| Founded | 2007 |
|---|---|
| Headquarters | Kuala Lumpur, Malaysia |
| Offices | Local teams in Indonesia, Singapore, Vietnam and the Philippines |
| Listing | Listed on the ACE Market of Bursa Malaysia in 2018 (ticker SMETRIC), with a reported US$4 million raised at IPO |
| Leadership | Edward Law Seeh Key, CEO and Executive Director |
| Partners | Products from Keyfactor, Utimaco, Zimperium, Fortanix, Feitian and Cryptomathic are sold and deployed alongside its own |
| Government work | Involved in 8 of 11 reported ASEAN mission-critical government initiatives |
Note: This overview is compiled from SecureMetric Technology’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.