Viettel Cyber Security
State-owned Vietnamese cybersecurity arm running SOC/MDR for government, banks, and defense.
On the record
Checkpoint: Progress update on 'Go Global' expansion into Japan, Philippines, Hong Kong
The call
VCS holds its ground at home on state trust and access, with its only open question being whether it can win abroad where that protection disappears.
Viettel Cyber Security protects Vietnamese government and defense computer networks. At home, it has an advantage because the government trusts it and won't let foreign companies compete for sensitive work, but two domestic rivals, FPT IS and CMC Cyber Security, have the exact same advantage. Outside Vietnam, VCS loses this protection and has to compete against bigger, better-funded companies like CrowdStrike that use advanced AI to spot threats faster and cheaper. The one thing that could change everything is whether VCS can actually win business in Japan, the Philippines, or Hong Kong without its government shield, which almost nobody thinks will happen.
Why
01
AI pressure: AI-native MDR vendors (CrowdStrike, Fortinet, SOC AI). AI-driven tier-1 triage tools are commoditizing commercial SOC work, but they cannot touch Vietnam's sovereign or defense accounts. Could AI do the core job? Only partly.
02
Bigger players: FPT IS and CMC Cyber Security. Both domestic peers hold the same state trust and government access, and compete live for the same ministry and bank contracts. Could a giant copy it? Probably.
03
What protects it. Vietnamese state ownership and rules that bar foreign vendors from government and defense cybersecurity contracts.
What would change this call
FPT IS or CMC publicly announced as winner of a Vietnamese government or bank security contract previously held by VCS. Would show sovereign-trust moat is not exclusive to VCS among domestic rivals.
VCS 'Go Global' signs or loses named clients in Japan, Philippines, or Hong Kong within the next year. Tests whether VCS can compete abroad without its sovereign protection.
Viettel Group's annual disclosure (typically January) on VCS mandate, headcount, or budget changes. Would show whether parent company is expanding or shrinking VCS's role.
VCS 'Go Global' signs or loses named clients in Japan, Philippines, or Hong Kong within the next year. Tests whether VCS can compete abroad without its sovereign protection.
Viettel Group's annual disclosure (typically January) on VCS mandate, headcount, or budget changes. Would show whether parent company is expanding or shrinking VCS's role.
Key numbers
- Viettel Group 2024 profit ~$2.01B, +10.3% YoY
- vSOC product revenue ~$1.6M in 2023, +30% in 2024
- VCS claims 25,000+ attacks stopped per year, 100+ clients
Named risks
- Go Global expansion into Japan, Philippines, Hong Kong loses sovereign trust protection abroad.
- AI-native MDR vendors like SOC AI commoditize tier-1 SOC triage functions.
- Domestic peers FPT IS and CMC hold identical sovereign access with no unique VCS moat.
- Standalone financials undisclosed, making revenue and headcount figures inconsistent across sources.
- Strategic mandate subject to opaque Viettel Group and Ministry of National Defence policy shifts.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| FPT IS Security | contesting | Shares equal sovereign government access as VCS in Vietnam's fragmented market, per Mordor Intelligence 2026-01-26 |
| CMC Cyber Security | contesting | Named alongside VCS as leading domestic full-stack provider by Frost & Sullivan 2025 recognition |
| SOC AI (AI-native MDR) | losing to | Positioned directly against VCS SOC on AI-driven automated response as of 2026-07-13 |
| Microsoft, AWS, Cisco, Fortinet | gaining on | Barred from sensitive government accounts by data-localization rules but active in commodity Vietnam market segments |
Questions people ask
- Is Viettel Cyber Security profitable?
- VCS does not publicly disclose standalone financials. Its parent Viettel Group posted consolidated 2024 revenue of about VND190 trillion (~$7.47B) and record pre-tax profit of ~$2.01B, up 10.3% year over year, as reported January 3, 2025, but this is group-wide, not VCS-specific.
- Who owns Viettel Cyber Security?
- VCS is a wholly-owned subsidiary of Viettel Group, a 100% state-owned enterprise administered by Vietnam's Ministry of National Defence. There is no public stock listing and no external VC or PE funding disclosed, so ownership has remained fully captive to the state since VCS was legally established in 2014.
- Could AI replace Viettel Cyber Security's SOC services?
- AI-native MDR tools like SOC AI already market directly against VCS's SOC on automated triage as of July 2026, threatening tier-1 alert analysis. But VCS's SOC retains 150 stated specialists, 332 partners, 150 incident playbooks, and certifications (PCI DSS, ISO 27001, CREST, SOC 2) that pure-AI tools cannot replicate.
- Who is Viettel Cyber Security's biggest competitor?
- Domestically, FPT IS Security and CMC Cyber Security are VCS's closest peers, sharing similar sovereign trust and government access; per Mordor Intelligence (2026-01-26), the top five Vietnamese cybersecurity suppliers together hold under 35% market share, indicating a fragmented, contested field.
- What is Viettel Cyber Security's 'Go Global' plan?
- VCS is expanding internationally into Japan, the Philippines, and Hong Kong, including a partnership with Japan's Syngula and a 2023 penetration-testing engagement with Hong Kong fintech Privé Technologies. Outside Vietnam it loses sovereign protection and competes as a foreign entrant, per Mordor Intelligence (2026-01-26).
- How big is Viettel Cyber Security?
- Estimates vary: VCS's own 2018 page cited ~300 employees; ZoomInfo (2026-07-06) estimates 201 to 500 employees and ~$21M annual revenue (unconfirmed aggregator estimate); Frost & Sullivan's 2025 write-up states VCS grew to over 500 professionals following an April 2025 mandate expansion.
Timeline
- 2026-05-13VCS researcher attempts OpenAI Codex exploit at Pwn2Own Berlin, unsuccessful; earns $20K on Claude Code, $30K on Cursor
- 2026-03VCSLab discloses continuing CVEs including Synology DSM RCE, QNAP NAS RCE, MS Dynamics 365 RCE
- 2026-01-26Mordor Intelligence reports April 2025 VCS reorganization expanded mandate to ~500 specialists targeting overseas markets
- 2025-11-26VCS receives Frost & Sullivan's 2025 Vietnamese Cybersecurity Services Market Leadership Recognition
- 2025-01-03Viettel Group reports record 2024 consolidated profit of ~$2.01B, revenue ~$7.47B, up 10.3% YoY
- 2024Viettel vSOC revenue grows ~30%, handles ~46,000 security alerts and 120 major incidents
- 2023-08VCS receives CREST accreditation for Penetration Testing and SOC services
- 2023-07-17VCS announces 'Go Global by 2025' push, discloses Privé Technologies case study
- 2018-12-18VCS business registration certificate amended, HQ confirmed at Keangnam Landmark 72, Hanoi
- 2014VCS legally established as standalone company after starting as internal Viettel unit in 2011
Head to head
Revision history
26 July 2026
First assessed. Defensible for now. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Viettel Cyber Security (2018-12-17)
- Viettel (Wikipedia)
- Vietnam telecom giant Viettel logs record profit of $2 bln in 2024 (2025-01-03)
- Viettel Cyber Security - Overview (2026-07-06)
- Viettel Cyber Security gets closer to reaching the 'Go Global' by 2025 (2023-07-17)
- Cybersecurity Excellence Awards (2025-03-11)
- Viettel IDC Next-Gen Cyber Defense Solutions (2026-02-20)
- Frost & Sullivan Viettel Cyber Security Award Write-Up
- Size, Share & Industry Analysis (2026-01-26)
- Viettel Cyber Security Award Writeup
- Viettel Cyber Security Receives Frost & Sullivan's 2025... (2025-11-26)
- Vulnerability & Cybersecurity Research