Skip to content

Ensign InfoSecurity

Singapore-headquartered pure-play cybersecurity services firm running 24/7 managed security, SOC-as-a-service, advisory and OT security across Asia Pacific.

Visit Website ↗ + Add to Compare Claim This Company
60/100Incremental Innovator

Overview

Ensign InfoSecurity was formed in September 2018 as a joint venture between StarHub and Leone Investments, an indirect wholly owned subsidiary of Temasek Holdings. The new entity combined StarHub’s Cyber Security Centre of Excellence, its subsidiary Accel Systems & Technologies, and Temasek-owned Quann, starting with roughly 500 analysts, consultants and researchers. The company is headquartered in Singapore and reports a workforce of close to 1,000 cybersecurity professionals serving public- and private-sector clients across Asia Pacific.

Managed security is the core of the business: Ensign delivers SOC-as-a-service, managed detection, threat hunting and incident response, vulnerability-management-as-a-service and managed deception, alongside advisory, assurance and systems-integration work. In-house products and platforms include Ensign OT Security Analytics, a cyber range service and ARIA, an AI-reinforced assessment offering. At GovWare 2025 it unveiled an Agentic SOC it says was designed and built entirely in-house.

MSSP Alert’s Top 250 list has placed Ensign in the global top 10 each year from 2022 to 2025 (7th in 2025), the highest-ranked Asia Pacific provider. In April 2026 StarHub terminated an assigned-rights arrangement over a 16.81% stake for S$115 million, reducing its effective stake to 38.92%; analysts at DBS noted the deal implied a valuation of about S$720 million for the whole company.

Innovation Matrix Assessment

Innovation Velocity 6/10

Steady cadence of in-house builds (Agentic SOC launched at GovWare 2025, ARIA AI-risk assessment, OT security analytics, cyber range), but these extend a services model rather than redefine it.

Operational Value 7/10

Broad end-to-end coverage (SOC-as-a-service, MDR, VMaaS, IR, OT, advisory) lets resource-constrained security teams outsource most of the detection and response function to one regional provider.

Market Momentum 7/10

Independently ranked in MSSP Alert's global top 10 four years running; close to 1,000 staff; Temasek and StarHub backing with a 2026 stake transaction implying roughly S$720M valuation. Footprint is concentrated in Asia Pacific.

Category Disruption 4/10

A large, well-run MSSP; the Agentic SOC is a notable bet but agentic triage is being pursued across the MDR market, so the model remains conventional.

Real-World Efficacy 5/10

Rankings and awards indicate scale, not measured detection efficacy; public case studies are anonymised and no independent detection tests were found.

Enduring Relevance 7/10

Demand for regional, sovereign-aligned managed security in Asia Pacific is durable, and state-linked ownership supports longevity.

Why CISOs Should Care

A scaled Asia Pacific MSSP with local threat intelligence, OT expertise and government-grade credentials, suitable for organisations needing in-region SOC coverage and data handling.

What Makes It Different

Pure-play scale in Asia Pacific built from merged national assets, plus in-house tooling (Agentic SOC, OT analytics, cyber range) rather than relying solely on resold platforms.

The Matrix Verdict

60/100 — INCREMENTAL INNOVATOR

Ensign scores 36/60 (60%), placing it in the Incremental Innovator tier. It is one of the largest and most consistently ranked MSSPs in Asia Pacific, but its innovation is evolutionary within a conventional managed-services model and efficacy evidence is largely self-reported.

Editorial Note: Claims vs. Verified Findings

Independently verifiable: 2018 JV formation and asset composition (StarHub release), 2026 StarHub stake transaction and implied valuation (SGX filing, The Edge Singapore), MSSP Alert Top 250 placements (third-party list, though based partly on provider-submitted data). Vendor claims: 'largest pure-play' positioning, 'first in Asia' Agentic SOC, staff count of close to 1,000, and anonymised case-study outcomes. No independent detection-efficacy testing was found.

Sources