Xuankun Xinan

Security Services · Custom Digital Solutions

Comprehensive security services and custom digital solutions

Security is at the core of our work. We also provide software development, product customization and AI agent development, supporting you from assessment and remediation through ongoing operations and custom development

Service Catalog

Xuankun Xinan In-House Services

From penetration testing to compliance and ongoing operations, and from targeted assessments to comprehensive security programs, our services also cover software development, product customization and AI agents. Combine services to suit your needs

Penetration Testing

Assess your security defenses from an attacker’s perspective and uncover exploitable weaknesses

  • Penetration testing for web applications, mobile apps, mini-programs and APIs
  • Internal network lateral movement, domain controller security and privilege escalation testing
  • IoT, industrial control and cloud-native security testing
  • Exploitable vulnerabilities, complete attack paths and remediation priorities

Security Risk Assessment

Systematically inventory assets, threats and vulnerabilities, quantify risk and provide a remediation roadmap

  • Asset inventory and attack surface identification
  • Threat modeling and vulnerability validation
  • Vulnerability scanning combined with manual review
  • Risk scoring and remediation recommendations

Code Security Audit

Examine application code and software dependencies to address security issues at their source

  • Source code audit for Java, Python, Go, Node.js and other mainstream languages
  • Checks for OWASP Top 10 risks, business logic flaws and access control weaknesses
  • Open-source component analysis (SCA) and license risk identification
  • Secure coding standards and developer training

Incident Response

Respond quickly to incidents: contain the impact, investigate, collect evidence and strengthen defenses

  • 24/7 incident response channel
  • Intrusion tracing, log forensics and attack timeline reconstruction
  • Malware analysis and removal, backdoor inspection
  • Incident review report and hardening plan

Managed Security Services (MSS / SOC)

Continuous monitoring, triage and response, giving enterprises professional security operations at a manageable cost

  • Security device log ingestion and unified analysis
  • Alert noise reduction, threat triage and response through to resolution
  • Threat hunting and anomaly detection
  • Monthly operations reports and strategy optimization

Data Security & Privacy Protection

Build classification, access control and compliant use across the data lifecycle

  • Data asset inventory, categorization and sensitivity classification
  • Data flow, sharing and cross-border risk analysis
  • Privacy impact assessment (PIA)
  • Data security policies and processes

MLPS Assessment & Compliance Consulting

Help enterprises meet regulatory requirements such as MLPS and critical infrastructure protection while reducing compliance risk

  • Full-process guidance for MLPS 2.0 grading, filing and assessment
  • Compliance gap analysis and remediation design
  • Policies, technical measures and assessment material organization
  • Assessment body coordination and re-test support

Red Team / Blue Team Exercises

Simulate real attacks under controlled conditions to test and improve overall defense

  • Simulated red team attacks across phishing, web, internal network and social engineering scenarios
  • Blue team exercises covering detection, analysis, triage and response
  • Attack chain reconstruction and defense gap identification
  • Exercise review, improvement plan and follow-up exercises

Security Training & Awareness

Raise team security literacy so security awareness becomes a default habit across the organization

  • Tiered training for management, development and operations teams
  • Phishing simulation and behavior data analysis
  • Training in offensive and defensive security techniques, with practical CTF exercises
  • Security awareness courses and assessment system

Software & Custom Product Development

For security and general business scenarios, provide product planning, software development and customization, turning technical experience into deployable digital tools and platforms

  • General software development — websites, management systems, mini-programs and apps
  • Security tools such as scanners, monitoring platforms and situational awareness
  • Vulnerability validation tools, automation frameworks, SIEM/SOAR plugins
  • Product extensions, API integration, industry-specific customization and private deployment

Hardware & Software Sales and Custom Hardware

Provide mature security hardware/software and licenses, and support custom development of general and specialized hardware to close capability gaps quickly

  • Supply of firewalls, WAF, IDS/IPS, VPN and other network security devices
  • Software licenses — endpoint security, email security, DLP and vulnerability scanning
  • Custom IoT devices, edge computing boxes, industrial gateways and security hardware
  • Device selection, supply chain coordination, after-sales support and private deployment

AI / Agent Development & Customization

Integrate AI into your business with agent development, model deployment and ongoing improvements for security operations and business automation

  • AI agents for knowledge base Q&A, customer support and office automation
  • Security AI assistants — operations agents, alert triage and threat intelligence analysis
  • Private LLM deployment, retrieval-augmented generation (RAG), fine-tuning and knowledge base management
  • AI application risk assessment, prompt protection and content compliance checks

Joint Services

Xuankun Xinan and Chaitin Joint Services

As a Chaitin partner, Xuankun Xinan brings together both companies’ expertise to match security services to your business needs. Contact us to confirm the scope and delivery arrangements for the services below.

Deployment and On-site Emergency Response

Original-vendor deployment and on-site emergency response for projects with purchased products or services jointly supported by Xuankun Xinan and Chaitin. Typical scenarios include:

  • Large integration projects or orders covering multiple product types
  • Complex network environments or product deployments
  • Projects requiring urgent on-site emergency response

Ecosystem Service Center Delivery Services

Security product delivery for customers who have purchased products or services jointly supported by Xuankun Xinan and Chaitin.

  • The center combines Chaitin technical staff, nationwide technical service providers, and regional partner engineers, primarily handling delivery, inspections, and on-site services for non-directly contracted projects.
  • Applicable products include firewalls, log auditing, operations auditing, Quanxi, Diting, Muyun, Leichi, and Dongjian.
  • Measured per device and tailored to customer needs: initial discussions, deployment planning, resource preparation, deployment, product training, documentation handover, information recording, and project acceptance.
  • Includes 2 on-site visits in the first year when either condition is met:
    1. Product hardware failure prevents access to both the system and its web interface, and restarting does not restore access.
    2. The product makes customer operations inoperable or interrupts them, and remote support, telephone assistance, photos, or similar methods cannot resolve the issue.

Ecosystem Service Center Value-added Services

Product inspections and on-site support for customers who have purchased products or services jointly supported by Xuankun Xinan and Chaitin.

  • Limited to Leichi, Diting, Dongjian, Muyun, Quanxi, firewalls, log auditing, and operations auditing products with active maintenance coverage.
  • Product inspections (1 per year): remote or on-site operating status checks and data collection, security alert analysis, usage assistance, and feedback collection. A System Inspection Report detailing system status and optimization needs is issued within 3 working days after inspection.
  • Inspection orders: one package for up to 5 devices, with additional orders in increments of 5 devices. Multi-region deployments require orders based on the number of regions involved.
  • On-site support (per person-day): experienced technical support engineers attend within the agreed time for device configuration and optimization, redeployment, troubleshooting and diagnosis, periodic on-site inspections, security log analysis, product consultation and training, and short-term product support.

Multi-Level Protection Scheme (MLPS) Assessment

Jointly supported by Xuankun Xinan and Chaitin, this independent professional assessment covers one information system to ensure compliance with national security protection level requirements.

  • Levels 2 and 3 are available throughout Anhui Province and in Shanghai, Nanjing, Suzhou, Wuxi, Changzhou, and Zhenjiang.
  • Process: classification consulting, project preparation and on-site surveys, preliminary assessment, classification and filing, gap analysis, security remediation, and MLPS assessment.
  • Aims to pass the public security authorities' graded protection inspection. Includes an Information System Graded Protection Assessment Report and assistance with classification, filing, and obtaining the official filing certificate.
  • For enterprises and institutions engaged in production activities in China, across government, finance, healthcare, education, telecommunications, energy, business, internet, and other sectors. Covers networks, information systems, information, cloud platforms, IoT, industrial control, big data, and mobile internet.

AI Agent Development Bootcamp

Jointly supported by Xuankun Xinan and Chaitin, Xuezhiying serves enterprise teams and is run by the Chaitin AI Training Academy. One seat per participant.

  • 5 full-time, in-person days combining instructor-led exercises, team practice, ongoing guidance, and assessment of outcomes.
  • The curriculum covers AI agent fundamentals, prompting, MCP, skills and AI-assisted coding.
  • Apply tasks from participants' roles: design, develop, run, and improve Agents with instructor guidance, documenting operating procedures, SOPs, or interim outcomes to support business use and internal adoption.

Joint Services

Xuankun Xinan and Kaspersky Joint Services

If joint services with Kaspersky are launched, this section will outline their scope, use cases and delivery options to help customers find services suited to their security needs.

No joint services have been launched with Kaspersky yet.

Service Process

Structured delivery and tracked remediation

Each engagement follows a clear process with controlled execution, actionable results and traceable remediation

01

Requirements

Understand business scenarios, security posture and core needs; define scope and objectives

02

Planning

Customize test plan, timeline and staffing based on asset scale and risk profile

03

Execution

Certified engineers conduct penetration tests, audits, assessments or exercises following agreed procedures

04

Reporting

Actionable technical reports with risk descriptions, remediation recommendations and priorities

05

Re-testing

Help verify fixes after remediation and track outstanding security risks