Founded 2024Malaysian deep-tech startup · Antler-backed

AI governance for
organizations that take
risk seriously.

We're building Asia's trusted AI risk management platform — ensuring every organization can ship AI safely, with the evidence to prove it.

01 / Mission

Make AI behave like
every other regulated workload.

Every mature organization applies rigorous controls to data, identity, and infrastructure. AI gets none of them — until now. Obiguard brings the same inspection, evidence, and framework-mapping that security teams apply everywhere else, to every model call your org makes.
01

The Problem

Traditional security falls short against AI-powered threats and autonomous agents. Organizations ship LLMs without visibility into what they say, what data they expose, or whether they follow policy.

02

Our Solution

Obiguard sits in front of every model call — inspecting prompts and completions, enforcing policy as code, and writing an append-only audit record that auditors and regulators can rely on.

03

The Vision

A world where AI governance is as mature as cloud security — predictive, automated, and evidence-driven. Where shipping a new AI workload doesn't require a manual audit cycle.

02 / Timeline

From concept to
production governance.

The milestones that got us here, from incorporation to a product organizations use to govern AI in production.
DEC 2024

Obiguard Sdn Bhd incorporated

Founded in Malaysia by two security veterans with 40+ combined years across telco, fintech, and identity — on the conviction that AI risk management should be a real product, not a spreadsheet.

JAN 2025

Pre-seed backing from Antler

Backed by Antler, one of the world’s most active early-stage investors, validating demand for a dedicated AI governance layer.

JUN 2025

Funding announced

Antler backing covered by e27 and BackScoop as Obiguard went public with its mission to detect AI compliance issues before they happen.

JUL 2026

News & research hub

Launched /news, our regular briefing on AI security incidents, regulation, and what they mean for governance teams.

SEP 2026

Obiguard Scout

Penjaga was renamed Scout, our scanner that gives organizations a first read on their AI risk posture, tied into the wider governance platform.

03 / Team

Built by people who've
lived the problem.

Two founders: one from deep telco governance, one from fintech application security. United by the conviction that AI risk management deserves a real product.
Ts. Eddy Leong
Ts. Eddy Leong
Co-Founder & CEO
Senior Security Governance Consultant
Experience
26+ years

Eddy Leong is an accomplished professional with 26 years of experience in IT, including 18 years in the telecommunications industry. He specializes in operation support systems, governance, and digital transformation, consistently delivering innovative solutions and driving impactful change. As Co-Founder and CEO, Eddy brings visionary leadership and deep expertise in AI governance.

Certifications
ISC2 Certified CyberSecurityISO 27001 Lead Auditor
Specialties
ComplianceISO 27001 certificationTelecommunicationsAI governanceRisk assessmentNetwork security
Key achievements
  • Malaysia NAIO workgroup member
  • Speaker at Malaysia MDEC (5G with AI Security) & TMForum
  • Certified trainer in AI security & governance
James Ma
James Ma
Co-Founder & CTO
Software Applications Security Consultant
Experience
15+ years

James Ma is a technology leader with over 15 years in defensive coding, cybersecurity, and fintech. His career spans banking, payments, credit card processing, and startups, where he has led global teams to deliver secure, scalable platforms. He was part of the core engineering teams that launched Fundsupermart, Shopee, and Trust Bank Singapore.

Specialties
Solutions ArchitectOWASPApplication SecurityPaymentsAI TransformationData Governance
Key achievements
  • 5 patents granted across blockchain & payments
  • Author of 2 books on applied AI/ML in finance; 1 on secure coding
  • Global mentor with CodeDay Labs
We're hiring engineers, researchers, and operators who care about AI security.See open roles →
04 / Roadmap

Where we're
taking the platform.

Our direction, not a delivery commitment. Priorities shift with what customers and regulators need, and we plan alongside design partners.
NOW

Shipping

  • Prompt and completion inspection across 40+ model providers
  • Versioned policy sets with model allow-lists and guardrails
  • Tool-call inspection
  • Audit record with CSV and JSON export
  • Framework mapping to NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, AISCF and MGF
NEXT

In progress

  • Deeper agent and tool-call governance
  • Expanded evaluations and ethics and bias testing
  • Broader detector coverage for emerging attack vectors
  • Tamper-evident hashing of the audit record
  • More integrations with SIEM and GRC tooling
LATER

Exploring

  • Predictive risk scoring from governance telemetry
  • Automated evidence packs for regulator submissions
  • Wider regional framework coverage across Asia
  • Self-serve onboarding for smaller teams
05 / Values

Principles that shape
how we build.

These aren't aspirational. They're constraints we apply to every product decision, every hire, and every customer commitment.
01 — PRINCIPLE

Security first

We prioritize the security and privacy of our customers above all else. Transparency and robust protection are non-negotiable, not features.

02 — PRINCIPLE

Evidence over assertion

Saying you govern AI is not the same as proving it. Every claim we help customers make to auditors and regulators is backed by a timestamped, append-only record.

03 — PRINCIPLE

Complementary, not competitive

We sit in front of your existing stack — gateways, SIEMs, GRC platforms — and make them better. We never fight your existing investments.

04 — PRINCIPLE

Operator-first design

Security and platform teams have enough dashboards. We design for the on-call engineer at 2am and the auditor with a 90-day window, not a demo audience.

05 — PRINCIPLE

Continuous, not periodic

Quarterly review cycles don't match how fast AI workloads change. Governance has to be a real-time stream, not a snapshot.

06 — PRINCIPLE

Open by default

Policy as code, OPA-compatible, open detector APIs. Customers own their governance posture. We make it easier to express and enforce it, not lock it in.

40+
Combined years experience

Across telco, fintech, identity, and ML platform engineering.

5
Compliance frameworks

NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, Malaysia’s AISCF, and Singapore’s MGF for GenAI.

Minutes
To connect

Point your SDK at the gateway and add your Obiguard API key.

1K+
Antler portfolio companies

We benefit from Antler's global network of founders and operators.

06 / Get started

Ready to govern your
AI stack for real?

Talk to a founder directly. We scope every pilot together and most customers are live in two weeks.

Book a demo →Meet the team