CyStack

CyStack is an independent testing company founded in 2017, headquartered in Hanoi, Vietnam, with 11-50 people. It offers Security testing, Performance testing, Blockchain testing, Red teaming. It publishes no rate card. Minimum project $10,000. Data checked on September 3, 2026.

Profile checkedSeptember 3, 202612 sourcescystack.net

Best suited for

Nearshore for the USA
CyStack delivers from Vietnam, Canada.
At least one delivery location in Canada, Mexico, Central America or South America.

Facts

Comparable facts about CyStack. Every field is shown, including the ones the company has not published.
Headquarters	Hanoi, Vietnam
Delivery locations	Vietnam, Canada
Team size	11-50 people
Founded	2017
Ownership	Independent
Services	Security testing, Performance testing, Blockchain testing, Red teaming
Industries	Banking, Fintech, Ecommerce, Healthcare, Education, Real estate, Travel
Frameworks	Not published
Engagement models	Not published
Client stages	Not published
Certificates	No certificate confirmed by a register entry
Signs a BAA / GDPR DPA	Not confirmed / Not confirmed
Published rates	Not published
Minimum project	$10,000clutch.co
Onboarding	Not published
Crowd tester pool	1,400whitehub.net
Device lab	Not published

Certificates the company claims

ISO/IEC 27001claimedcompany pageISO 9001claimedcompany pageCRESTclaimedcompany page

These certificates are not confirmed by a registry entry, a certificate document or an auditor report. Each one is what the company says about itself on the page linked beside it, read on the date shown there. They are listed apart from confirmed certificates and are not counted anywhere the catalog counts certificates: not in the rankings tables, not in the applicability tags, not in comparisons.

Reviews on external platforms

Clutch5.0 out of 5, 1 reviewtaken on September 3, 2026

This catalog collects no reviews of its own. Review counts and scores are aggregates from external platforms, shown with the date they were read.

Named clients

Epwise AGcystack.net
Trusting Socialcystack.net
Vntripcystack.net
Vayanacystack.net
Petit Gateaucystack.net

Rankings this company appears in

Industry: Fintech position 20 of 25
Industry: Banking position 52 of 74
Industry: Healthcare position 52 of 78
Industry: Ecommerce position 49 of 73
Industry: Education position 31 of 45
Industry: Travel position 18 of 22
Industry: Real estate position 9 of 12
Type of testing: Performance testing position 43 of 60
Type of testing: Security testing position 36 of 47
Type of testing: Blockchain testing position 12 of 15
Type of testing: Red teaming position 18 of 24
Delivery location: Canada position 6 of 12
Delivery location: Vietnam position 2 of 8
Delivery proximity: nearshore for a buyer in the USA position 13 of 24

Sources

CyStack: homepageChecked on September 3, 2026
CyStack Reviews, Pricing, Services & Verified Ratings: ClutchChecked on September 3, 2026. Self-reported employee band 10-49 employees (21-30 at headquarters), minimum project size $10,000+, 1 verified review at 5.0 average rating, founded 2017, HQ Hanoi, Vietnam. No hourly rate band shown for this profile.
CyStack: AboutChecked on September 3, 2026. States 2017 founding, history from a small research team to 600+ customers. Lists Hall of Fame recognitions from Microsoft, Google, IBM, NASA, HP, Uber, Telegram, Porsche, Booking.com, Starbucks, AT&T and Daimler: these are acknowledgements for vulnerabilities CyStack researchers reported to those companies' own bug bounty programs, not CyStack clients, and are excluded from namedClients on that basis. Page links ISO/IEC 27001:2022 and ISO 9001:2015 to specific IAF CertSearch certificate pages (iafcertsearch.org/certification/qTm2LqNtmRfkC6RIQvFvSJ0i and .../Jpfz2Xe3847JELEKCSzp7DGt) and claims a CREST Pentest accreditation.
CyStack: ContactChecked on September 3, 2026. Legal entity name given as 'Vietnam CyStack Joint Stock Company'. Lists two offices: Hanoi, Vietnam (Tan Hong Ha Complex, 317 Truong Chinh Street, +84 247 109 9656) and Toronto, Canada (2376 Dundas St W, Ontario M6P 0C1, +1 437 361 5461).
CyStack: ServicesChecked on September 3, 2026. Groups services under Security Testing & Assessment, Operations Security, Data Security and Blockchain Security. Also names products Locker, WhiteHub, SafeChain and CyStack Endpoint in the footer/product section, separate from the service list.
CyStack: Penetration TestingChecked on September 3, 2026. Describes a 5-step pentest methodology referencing MITRE ATT&CK, OWASP Top 10, CWE and CIS Benchmarks as testing methodology, and mentions SOC 2, PCI DSS, HIPAA and GDPR only as compliance frameworks client systems are tested against: not a claim that CyStack itself holds these certifications. No pricing, industries or named clients on this page.
WhiteHub: bug bounty platform (product of CyStack)Checked on September 3, 2026. States '1400+ security researchers participated', '100 programs created', '500+ vulnerabilities' found, '5B+ rewarded'. Footer identifies it as 'A product of CyStack.,JSC' sharing CyStack's Hanoi address and phone number. Names industry verticals served: Finance, E-Commerce, Healthcare, Education, Technology.
CyStack: CustomersChecked on September 3, 2026. Named case studies: Epwise AG (Swiss software, real estate, vulnerability management/GDPR), Trusting Social (banking & finance, pentest for EVO payment system), Vntrip (travel, bug bounty via WhiteHub), Vayana (blockchain supply-chain finance, smart contract audit), Petit Gateau (IT services). No quantified before/after security metrics found in the fetched summaries.
CyStack: PricingChecked on September 3, 2026. Flat-fee packages, not hourly/grade-based rates: Data Protection Package '$3.99 USD/device/month', described as 'Popular for SMEs'; Application Security Package 'From 2,000 USD/entry'; Total Security Package priced 'Contact Us'. No onboarding timeframe given.
Vietnam business registry entry for CÔNG TY CỔ PHẦN CYSTACK VIỆT NAM: masothue.comChecked on September 3, 2026. Tax code 0107999063, international name 'VIET NAM CYSTACK JOINT STOCK COMPANY', short name 'CYSTACK., JSC', registration date 2017-09-22, status 'Đang hoạt động' (currently operating), type 'Công ty cổ phần ngoài NN' (non-state joint stock company), legal representative Nguyễn Hữu Trung, registered address Tầng 8, Tòa nhà Hancorp Plaza, Tháp Tây, 72 Trần Đăng Ninh, Hà Nội (differs from the office address on s4, city unchanged).
CyStack Security company page: LinkedInChecked on September 3, 2026. Confirmed as the Hanoi-based CyStack (a separate, unrelated Palestinian company also uses the name 'Cystack' on LinkedIn under a different slug and is not this company). Shows 11-50 employee size band, Hanoi headquarters, founded 2017, industry Computer and Network Security.
CREST Marketplace supplier search for 'CyStack'Checked on September 3, 2026. CyStack does not appear among CREST Marketplace's listed/searchable accredited suppliers, despite the CREST accreditation claim on s1/s3. Used to establish the absence of independent CREST verification, not as a source for any published fact.

Every field on this profile records which of these sources it came from. The profile was last rebuilt from them on September 3, 2026. A field no source confirms is left empty rather than estimated.

Published by QA Rating

Every fact about a company comes from a listed source. A field without a source stays empty. A certificate counts as confirmed only when a registry, certificate or auditor report backs it; a certificate the company only claims about itself is published separately, under that label. Vendors can request a correction at hello@qa-rating.com. A correction is applied when it comes with a public source. Last checked on September 3, 2026.

Badge for your site

If you work at CyStack, you can put a badge linking to this profile on your own site. It is free, it is not tied to any tier, and the badges page explains what each badge claims and when it should come down.

CyStack

<a href="https://qa-rating.com/companies/cystack/">
  <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="CyStack listed in QA Rating">
    <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
    <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">CyStack</text>
    <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Listed in QA Rating</text>
  </svg>
</a>

<a href="https://qa-rating.com/companies/cystack/">
  <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="CyStack: profile checked 2026 in QA Rating">
    <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
    <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">CyStack</text>
    <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Profile checked 2026</text>
  </svg>
</a>

<a href="https://qa-rating.com/companies/cystack/">
  <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="CyStack grouped under Nearshore for the USA in QA Rating, 2026">
    <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
    <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">CyStack</text>
    <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Nearshore for the USA, 2026</text>
  </svg>
</a>