Bugsbd Ltd.

Dhaka-based Bugsbd Ltd. works only in information and cyber security. The company pairs consulting and testing with the provision and operation of protective tools for enterprise clients. The company presents its work as securing business values against threats in an insecure world.

Testing networks and applications for weaknesses

Vulnerability assessment and penetration testing are central to the service. Vulnerability assessment recognises, analyses and ranks weaknesses in computer systems, while a penetration test is an authorised, simulated attack on a system that shows how an intruder might get in. The firm tests networks, web and mobile applications, and it includes source code review in its scope. The aim is to examine a client's security with real-time simulated attacks and to show which weaknesses matter most.

Monitoring events and privileged access

The firm's security information and event management service collects and analyses security events across a client's systems, with a security operations centre handling detection. Incident response and breach response are included, so that a client can act when something goes wrong. Privileged access management controls and audits accounts with higher-level permissions,

Protecting endpoints, email and data

Endpoint security protects laptops and remote devices, while email security filters spam and phishing and provides encryption. On the network and data side, the firm covers zero trust design, file integrity monitoring, data loss prevention, DDoS defence, and the protection of DNS and API traffic, alongside advanced firewalls. It also offers products with an AI-driven protection layer, a secure web gateway, advanced threat protection and network threat protection.

Audit and compliance for regulated sectors

IT audit and compliance reviews check a client's security posture and whether it fits the relevant regulations. The firm names financial services, government, cloud providers, healthcare and industrial control systems among the sectors it covers. It also offers support programmes for the products it deploys,