Scantist Information

A Singapore-based cybersecurity company founded in 2016, spining off from Nanyang Technological University’s Cyber Security Lab. The company specialises in application security, software supply chain risk management and AI-driven offensive security. Scantist helps enterprises, government agencies and technology providers identify, manage and reduce security risks across the software development lifecycle. AppDefender is software composition analysis and application security platform. It enables organisations to identify open-source vulnerabilities, licence compliance risks and software supply chain exposures across source code, binaries and third-party components. Key capabilities include Software Bill of Materials generation and management, vulnerability and licence analysis, VEX support, dependency monitoring, policy enforcement, remediation recommendations and CI/CD integration. AppDefender provides development, security and compliance teams with centralised visibility and governance over their software assets. PAIStrike is Scantist’s enterprise-grade autonomous penetration testing platform. It uses multiple specialised AI agents to perform reconnaissance, analyse application workflows, develop testing strategies, validate vulnerabilities and generate evidence-based reports. Unlike traditional vulnerability scanners that rely mainly on predefined signatures and scripts, PAIStrike is designed to reason, adapt and conduct multi-step testing against modern web applications and APIs. PAIStrike supports both autonomous and human-guided testing, including authenticated grey-box assessments, retesting and continuous security validation. It helps organisations identify exploitable weaknesses earlier, reduce reliance on repetitive manual testing and strengthen resilience against increasingly automated and AI-driven cyberattacks. The platform can be deployed through SaaS, private cloud, on-premises/air-gapped environments to meet enterprise and government security needs