Company in brief
Sytance Technologies Limited (序衡科技有限公司) develops and operates Sytance. The company combines a product cybersecurity and compliance platform with specialist advisory, engineering, assessment, and documentation services.
Company introduction
Sytance Technologies Limited (序衡科技有限公司) is a technology company focused on product cybersecurity. The company develops and operates Sytance, a software-as-a-service platform for product cybersecurity and compliance work, and delivers related professional services.
We help product engineering, cybersecurity, quality and regulatory compliance teams work from the same product information, record the reasons for security decisions, and update evidence when products or requirements change.
Sytance is the product and brand used for the platform. Sytance Technologies Limited is the company that develops, operates, and supports it.
Why we exist
Security work continues throughout a connected product's development and maintenance. Teams use its architecture, data flows and software components to identify threats and risks, define security requirements and controls, and collect verification evidence. Vulnerability handling and security decisions continue after release.
This information is often spread across documents, spreadsheets, ticketing systems and specialist tools, making it hard to find the evidence behind a decision. We help teams organise it for day-to-day work, review and maintenance while keeping professional judgement and decision-making responsibilities with people.
Platform and professional services
Sytance manages product information, architecture and data flows, threats and risks, security requirements and controls, verification evidence, SBOMs, vulnerabilities and technical documents in one workspace. It keeps the relationships between these records traceable.
AI uses supplied product information and workspace records to prepare structured proposals or drafts. Users review them before applying them. The responsible professionals still make approvals, accept risks, confirm technical conclusions and approve external submissions.
Alongside the platform, we provide specialist advice, independent review and project delivery services for product development, security assessments and releases.
Our team
Our team covers product security engineering, cybersecurity risk and compliance, security testing, software engineering and technical documentation. We focus on sound technical conclusions, sufficient evidence and information that engineering, quality, compliance and management reviewers can use in their work.
We work with customer product owners, architects, developers, security specialists, quality and regulatory teams, assessors and management. We explain the assumptions and evidence behind an analysis, identify who is responsible for decisions, and turn review findings into practical work.
Each project defines its technical and business goals, analysis assumptions, review arrangements, and the people responsible for actions and decisions. Our advice is based on the customer's product and operating environment.
Professional capabilities
- Product security strategy and compliance planning, including work aligned to the EU Cyber Resilience Act, IEC 62443, medical-device cybersecurity expectations, and secure product development practices.
- Product information review, architecture and data-flow analysis, threat modelling, attack-path analysis, cybersecurity risk assessment, and security requirements definition.
- Security architecture and control design, with traceability between identified risks, implemented controls and verification evidence.
- Penetration testing, technical security assessment, vulnerability validation, and remediation support.
- SBOM management, open-source and supplier risk analysis, vulnerability monitoring, coordinated disclosure, and post-market or post-release vulnerability handling.
- Secure development lifecycle design, governance, review criteria, evidence models, technical documentation, and assessment preparation.
- Role-based training, workshops and working sessions that help customers apply these methods in their own engineering and management processes.
How we work
- Understand the product's intended use, architecture, data, interfaces, operating environment, users and lifecycle before selecting security controls or preparing documents.
- Record the reasons for security decisions and their approvals. Reviewers should be able to see what was considered, how conclusions were reached, who approved them and what needs review after a product change.
- Use automation and AI to reduce repetitive analysis and document drafting. Important decisions still require human review.
- Choose the methods and depth of work to suit the product's risk, maturity, applicable regulatory requirements and project goals.
- Prepare documents and records so they remain usable and easy to update after assessment or release. They should support maintenance, vulnerability handling, change-impact analysis and later security reviews.
Who we support
We support organisations that develop, manufacture, supply, operate, integrate, or maintain connected and software-enabled products. Typical work involves product manufacturers, software providers, engineering teams, and service organisations that need to establish or improve product-security evidence and decision-making.
The platform and services support new product development, existing product portfolios, compliance programmes and specific security assessments. They also help teams manage product information, analysis records and evidence previously kept in separate documents.
