Cyber Security
Cyber Security Companies in Nepal: 10 Key Bodies and What They Do
Nepal’s cyber security sector is young and unevenly documented. This overview lists organisations that are publicly active in the field - including official bodies that receive reports and complaints - and explains how to judge the services on offer.
How to read this list
The entries below are not a ranking and are not an endorsement. They cover three different categories of organisation: government and regulatory bodies, industry associations, and private companies. Which one is relevant to you depends on whether you have been a victim of cyber crime, want to secure a business, or are looking for training.
Services and offices change quickly in this sector. Before engaging any provider, confirm the current scope of work, the qualifications of the staff, and whether references can be provided.
- Nepal Police Cyber Bureau - the official channel for reporting cyber crime in Nepal. It handles complaints about online fraud, hacking, identity theft, harassment and illegal content, and it is where individuals and businesses should go first when an offence has occurred.
- Nepal Telecommunications Authority (NTA) - the telecoms regulator, which also deals with licensing, network policy and coordination on network security issues affecting telecom operators and internet service providers.
- Computer Association of Nepal (CAN) - the main IT industry body, active in advocacy, skill development and awareness events, and a useful entry point for understanding the domestic technology sector.
- Eminence Ways - a Nepali technology company widely cited for information security services, including security assessment, monitoring and consulting, with an office in Kathmandu.
- LogPoint - a European security analytics vendor that runs engineering and development operations in Kathmandu, contributing to the local talent pool in security product development.
- Verisk Nepal - the Kathmandu operation of a global data analytics group, with information security and compliance functions that support enterprise clients abroad.
- Cotiviti Nepal - a healthcare data and analytics operation in Kathmandu with substantial information security and data privacy responsibilities.
- F1Soft Group - a Nepali fintech group whose payment and banking products require continuous security monitoring and fraud controls, and which contributes to the domestic security profession.
- Nepal Telecom - the state-owned operator, responsible for securing large network and subscriber infrastructure and for coordinating on national network incidents.
- Sector IT service providers - a growing group of Kathmandu-based software and managed-services firms that add security assessment, endpoint protection and incident response to their service catalogues, alongside regional and international vendors.
What the practical demand looks like
Demand comes from three directions. Financial institutions and payment providers need monitoring, fraud detection and compliance. Government agencies and public infrastructure providers need network protection and incident response. Small businesses need basic hardening: secure websites, protected email, backups and staff awareness.
Choosing a provider: a checklist
Because the sector has few formal certifications, due diligence matters. Ask for evidence rather than assurances.
- Named staff and their certifications or documented experience in the specific service you need.
- A written scope of work with deliverables, timelines and what is explicitly excluded.
- References from comparable Nepali organisations, and permission to contact them.
- A clear process for handling an incident, including who you call and how quickly.
- A data handling agreement - who can access your systems and how logs are stored.
- A realistic quote. Deeply discounted offers for comprehensive assessments usually mean a template report with no testing behind it.
Staying safe as an individual
Most incidents that reach Nepali families are simple: fraudulent calls claiming to be from a bank, phishing links on messaging apps, fake job offers asking for a deposit, and hijacked social accounts used to borrow money.
Three habits prevent most of these: never share an OTP or password with anyone who contacts you, always open a bank or government website by typing the address rather than following a link, and treat any message that creates urgency or asks for secrecy as suspicious.
If you are a victim of an online offence, keep evidence - screenshots, transaction references, chat logs - and report it to the Nepal Police Cyber Bureau rather than to a private “recovery” service, which is a common secondary scam.
Frequently asked questions
How do I report cyber crime in Nepal?
Report it to the Nepal Police Cyber Bureau, which is the official channel for online fraud, hacking, identity theft and harassment complaints. Keep screenshots, transaction references and chat logs as evidence.
Do Nepali companies offer information security services?
Yes. Nepali technology companies provide security assessment, monitoring and consulting, and several international vendors run engineering or security operations in Kathmandu. Ask for named staff, references and a written scope of work.
What is the most common cyber crime in Nepal?
Financial and social media related offences dominate: fraudulent calls and messages, phishing links, fake job or prize offers, and compromised social accounts used to request money from contacts.
This article is general information about Nepal. Requirements, dates and prices change - always confirm the current position with the relevant official source.