Anyone who has run security at a large Singapore organisation knows the routine. A vendor turns up with a slide deck, a slick demo and a quarterly target, and the talk is about the product long before anyone has asked what is actually keeping the security team up at night.
Raz Kotler has sat on the receiving end of that meeting more often than he would like. Now he is building a company that promises to do it the other way round.
Scouter, which launched in Singapore today, calls itself a “services-first” cybersecurity business. It pairs a short, curated list of security technologies with local engineers who help organisations choose, test, deploy and look after them.
Also Read: Singapore’s cybersecurity paradox: Leading in digital, lagging in defense
“Having spent years on the CISO side, including at PayPal, I know how frustrating it can be when someone tries to sell you a solution before understanding your problem,” Kotler said.
Most security chiefs will recognise the complaint. The harder question is whether Scouter can avoid becoming the thing it criticises.
From the buyer’s chair to the seller’s
Kotler is no newcomer to the region’s security circuit. Before Scouter, he had held several security leadership roles: Global Oversight CISO at PayPal, CISO at XM Cyber, head of security operations and engineering at an Israeli bank, and VP CISO at Deep Instinct.
Scouter is not a lone startup, either. It is the third Singapore business in a group that already includes Dart and Aleph, formerly known as Red Alpha. Together, the group claims nine years of work with Singapore enterprises, more than 30 government and enterprise customers, and more than 500 cybersecurity professionals placed through Aleph.
That history matters. Selling security to Singapore’s public sector and regulated industries is a relationship business, with long procurement cycles and very little patience for unfamiliar names. Scouter is new, but it is not starting from scratch.
What Scouter actually sells
The technology list is short: Wiz, Island, Oligo and Mate. The biggest name is Wiz, the cloud security platform that Google bought for US$32 billion in a deal that closed on March 11, 2026. Island makes an enterprise browser that puts security controls inside the browser itself. Oligo focuses on protecting applications while they run.
Around these products sit four service lines: Managed Detection & Response (MDR), which means outsourced round-the-clock monitoring and incident handling; Forward-Deployed Cyber Engineer; Architecture, Validation & Implementation; and Enablement & Lifecycle Support.
The forward-deployed engineer is the most interesting of the four. Palantir made the model famous: an engineer works inside the customer’s environment instead of handing over a product and leaving. In security, where tools often sit half-configured on a shelf, that could make a real difference.
Also Read: The demand for SMB cybersecurity is inevitable, the supply was never built correctly
The core pitch is validation before implementation. Scouter says it will show that a tool works in a client’s own environment before the client commits to it, and then support it after deployment.
The timing helps. Attackers are getting cheaper and faster, with AI agents now able to break into companies for pocket change. Regulators are also paying closer attention: the Monetary Authority of Singapore and the Association of Banks in Singapore recently formed a taskforce on AI-driven cyber risk. Buyers have less money and less time for tools that disappoint.
The independence question
There is a tension here that the launch announcement does not address. Scouter presents itself as starting from the customer’s problem. But it also has a curated portfolio of four vendors, and that is still a catalogue. An adviser that also earns money reselling the products it recommends has a conflict of interest, however good its intentions.
The release also leaves out several things a buyer would want to know: how Scouter makes money, what it charges, who its first customers are, how many people it employs today, and whether it has outside funding. It is fair to ask what Scouter will tell a client whose best answer is not on its list, or whose best answer is to buy nothing new at all.
A crowded middle market
Scouter is entering a busy part of Singapore’s security market. At the top end are the heavyweights: Ensign InfoSecurity, ST Engineering’s cyber arm and Singtel-owned NCS. These firms bundle advisory, managed services and integration for government and large enterprises. Global managed security providers and value-added resellers compete for the same budgets. Regional distributors supply much of the hardware and software. The vendors themselves increasingly sell professional services directly, and Wiz now sits inside a Google Cloud that also owns incident-response specialist Mandiant.
Scouter’s advantage is meant to be focus: a buyer’s-eye view from a former CISO, a deliberately small portfolio, and engineers embedded with the client rather than a sales team. Whether that is a lasting position or just a niche will depend on how many of the group’s 30-plus existing customers decide to sign up.
The talent bet
The part of the launch with the most potential is also the least detailed. Scouter says it is building Singapore’s AI security capability by training its current staff, which is already underway, and by hiring more engineers. It has not given any numbers for either.
The need is real. In 2025, Red Alpha itself pointed to an estimated shortfall of nearly 4,000 cybersecurity professionals in Singapore. AI security is a newer field still, and few people in the region have hands-on experience securing models, agents and the data pipelines that feed them. Singapore has written strong rules, but reports suggest it struggles to enforce them, and that the skills gap remains the bottleneck.
Aleph’s background in training people for security jobs gives Scouter some credibility on this front. A promise to build local skills is easy to make, though. The real test will be how many engineers Scouter hires, how they are trained, and whether clients’ own teams end up able to run the technology without Scouter.
Also Read: AI is already inside the enterprise. Has security kept up in Asia?
Kotler has identified a frustration that nearly every CISO in the region shares. If Scouter’s engineers are willing to tell a client “you don’t need this,” it may stand out in a market built on selling. If they are not, it will be one more reseller.
The post Scouter enters Singapore’s crowded cyber market with a “listen first” promise appeared first on e27.