CYBERSECURITY SERVICES REGULATION OFFICE (CSRO)Required to operate
Penetration Testing Service Licence
- Validity
- Each licence is valid for a period of 5 years from the date of licence issuance (for applications approved from 16 March 2026 onwards)
- Processing time
- 8 weeks upon submission of the complete application including all supporting documents
- Issuing authority
- CYBERSECURITY SERVICES REGULATION OFFICE (CSRO)
Need help applying for this licence?
We handle the full application — document prep, agency liaison, follow-up — alongside your incorporation.
Who needs the Penetration Testing Service Licence
This licence applies to Singapore businesses registered under the following SSIC industry codes:
- Required to operate62013 — Development of software for cybersecurity
- Required to operate62022 — Information technology cybersecurity consultancy
Includes: 62022 Information technology cybersecurity consultancy
Required documents and prerequisites
Items the applicant typically needs ready before submitting:
- Photocopy of Identification document
- Photocopy of both sides of NRIC/Work Pass, or photocopy of Passport showing the personal particulars and official descriptions (for overseas applicants only)
- Certificate of Clearance (For overseas applicants only)
- Certificate of Clearance or documentation from the relevant authorities in the home country certifying that the officer does not have any record of criminal conviction in the home country.
- The Certificate of Clearance or documentation shall not be obtained earlier than three months before it is submitted to CSRO.
- Business Profile or equivalent document (For business entity only)
- Latest ACRA Business Profile or equivalent.
Get a quote — incorporation + this licence
We package this with your company setup so you launch with the licence already approved.