Komstadt Managed Services

Managed IT & cybersecurity for Hong Kong businesses.

One partner for your entire workplace — IT, security, and the meeting rooms you run your business on. Held to the standard the SFC demands of financial firms, and priced for a firm your size.

IT & Cyber AssessmentSample
Backups tested & restorable
MFA — partial coverage
End-of-life systems found
SFC readiness6/10
Get your free findings report →
Workplace technology since 2004  ·  Singapore · Hong Kong · Japan · China · Taiwan · Malaysia
20+
Years in Hong Kong, since 2004
6
Markets across Asia-Pacific
30min
P1 response target, in writing
30days
To a documented, secure baseline
11
SFC control areas we map to
Who we help
SFC-licensed & financial firmsLaw & professional firms SMEs & growing businessesMNC regional offices
Why now

The SFC has made cybersecurity a standing obligation — not a one-off.

Its thematic review found half of licensed firms running end-of-life systems. Circular 25EC7 (in effect since February 2025) asks firms to run a comprehensive technical review — including penetration testing — at least annually, and a further June 2026 circular addresses AI-enabled threats. Together they expect controls across patching, access, monitoring, third-party risk and incident response. Most small firms have no IT department to meet this — and another tool won't fix it. Not regulated? The same discipline protects any business — you just don't have a regulator asking for it yet.

See how we map to the SFC's expectations →

What we do

One partner for everything in your office with a plug.

A converged offer few firms in Hong Kong can match — your IT, your security, and the workplace technology you actually meet in, under one SLA and one invoice, and fluent in what the SFC expects.

Explore all services in detail →

Service plans

Three plans. Pick where you are today.

Every plan is one monthly agreement with a clear SLA. Pricing is scoped to your headcount and environment — tell us your size and we'll send a written proposal within two business days.

Essential

For smaller teams who need the basics done right.
  • Helpdesk (business hours)
  • Asset inventory & documentation
  • Managed patching & updates
  • MFA / identity hardening
  • Managed antivirus / EDR
  • Microsoft 365 administration
  • Email security (SPF/DKIM/DMARC)
  • Microsoft 365 backup
Request a quote
MOST POPULAR

Professional

Proactive management for any growing firm.
  • Everything in Essential, plus:
  • Managed EDR + endpoint backup
  • Security-awareness training
  • Phishing simulations
  • Network & firewall management
  • Monthly reporting
  • IT strategy reviews (2× / year)
Request a quote
FOR REGULATED FIRMS

Compliance+

Audit- and ODD-ready IT for SFC-licensed firms.
  • Everything in Professional, plus:
  • Vendor due-diligence pack & SLAs
  • Incident-response plan + drill
  • SFC control mapping
  • Investor ODD-readiness support
  • Tested backup + DR plan
  • Quarterly strategy / compliance review
Request a quote
Managed IT professionals monitoring and supporting a business technology environment
Why Komstadt

The specialist's rigour, with a local, right-sized team.

We're not learning managed services on your time. Twenty years of workplace technology in Hong Kong, a rare converged IT-plus-workplace offer that's fluent in SFC compliance, and pricing built for a small firm — not enterprise rates.

Why firms choose us →
Two ways to start

Start where you're comfortable.

Most firms begin with the free assessment. If you want a deeper, independent audit, we offer that too.

Free · no obligation

IT & Cyber Assessment

HK$0
~90 minutes · on-site

A remote scan and a short on-site visit across the 10 SFC areas, with a written RAG-rated findings report you keep.

Book the free assessment
Paid · deeper

SFC Readiness Audit

from HK$6,800
one-time · fixed scope

A full vendor-neutral audit across eight control domains — user access, endpoints, patching, backup, software and mobile — with a risk-ranked report, a remediation roadmap and a leadership debrief.

Request the audit

Not sure where you stand?

Take the 2-minute SFC cyber self-check — then let us verify it for you, free. One visit, a written findings report you can file for your next inspection or investor ODD. No obligation.

Take the self-check Book your free assessment