Indonesia’s digital economy will reach $360 billion by 2030. It already faces 3,300 cyberattacks per week. The cyber defenses are not keeping pace with the growth.
In 2030, Indonesia is projected to host ASEAN’s largest digital economy at $360 billion, up from $130 billion in 2025. It will be one of the fastest-growing digital markets in the world: hundreds of millions of internet users, a booming e-commerce sector, a rapidly digitalizing government, and an explosion of fintech adoption.
And right now, in 2026, Indonesia is already the most attacked nation in the ASEAN region. An average of 3,300 cyberattacks per week, measured across the February to August 2024 period. Nation-state actors. Ransomware groups. BEC fraud operations. Data theft campaigns. All targeting Indonesia because it is valuable, growing, and, in many respects, still building the cyber defenses its ambitions require.
The gap between Indonesia’s digital growth trajectory and its cybersecurity readiness is not just a technology problem. It is a business risk that every enterprise operating in the country needs to take seriously, now, before the next wave of attacks finds the vulnerabilities that current defenses are not monitoring.
Why Is Indonesia the Most Attacked Nation in ASEAN?
Indonesia’s vulnerability is structural, not accidental. Several converging factors make it a disproportionately attractive target:
Scale Without Equivalent Security Investment
The Indonesian digital economy’s scale is enormous: 277 million people, widespread mobile-first internet adoption, and one of the highest smartphone penetration rates in the Asia-Pacific. This scale creates a massive attack surface. But the security investment has not scaled proportionally. Many organizations, particularly small and mid-sized enterprises, operate with minimal dedicated cybersecurity capability.
Regulatory Gap During a Period of Rapid Growth
Indonesia and the Philippines are the only ASEAN nations without a dedicated cybersecurity law. Indonesia relies on broader information technology regulations to address cyber incidents. This creates a compliance environment where security standards are inconsistent across sectors, breach reporting obligations are unclear, and minimum security baselines are unevenly enforced.
The RUU Keamanan Siber dan Ketahanan Siber is in progress, and BSSN is being elevated to ministerial equivalent status. But until these frameworks are fully enacted and enforced, organizations face a regulatory environment that does not compel cybersecurity investment at the pace the threat landscape demands.
Nation-State Interest in ASEAN Infrastructure
Salt Typhoon compromised 600+ organizations across 80 countries specifically targeting telecommunications infrastructure. ASEAN’s rapidly expanding 5G networks and digital government platforms are directly in the crosshair of nation-state espionage operations. Indonesia’s growing role in ASEAN’s digital economy makes its infrastructure strategically valuable as an intelligence target.
What Happens When Digital Growth Outpaces Cyber Defense
- Fintech platforms with millions of users operate on infrastructure with limited security monitoring
- Government digital services hold sensitive citizen data protected by inconsistent security standards
- Supply chain attacks targeting Indonesian vendors cascade into multinational organizations through partner integrations
- Ransomware groups increasingly target Indonesian organizations, knowing response capability is often limited
- 3,300 attacks per week means approximately 470 attacks every single day, against organizations of all sizes
Indonesia in the ASEAN Cybersecurity Landscape
ASEAN’s cybersecurity landscape is characterized by significant variation in maturity across member states:
- Singapore: Highest cybersecurity maturity in ASEAN, comprehensive legal framework, mandatory breach reporting
- Malaysia, Thailand, Vietnam: Progressing regulatory frameworks with increasing enforcement
- Indonesia, Philippines: Highest attack volumes, developing regulatory frameworks, significant investment gaps
ASEAN’s overall cybersecurity posture is constrained by a lack of homegrown cybersecurity capabilities and a unified regional framework. The ASEAN Cybersecurity Cooperation Strategy (CCS) 2021-2025 aimed to address this through policy harmonization, but national implementation has been uneven.
Peris.ai is uniquely positioned in this landscape: headquartered in Singapore with offices in Jakarta (Tokopedia Care Tower), Peris.ai provides regional coverage for ASEAN organizations navigating this complex and rapidly evolving threat environment.
The Old Way vs. The New Way: Cybersecurity for Indonesia’s Digital Economy
| Legacy Security Posture | Modern Cybersecurity Posture |
| Reactive security after incidents occur | Continuous monitoring and proactive threat hunting |
| Compliance-driven minimum security standards | Risk-driven security investment calibrated to actual attack surface |
| Single-vendor perimeter tools | Unified XDR, EDR, and NVM coverage across the full environment |
| No incident response automation | BrahmaFusion automated containment and IRP case management |
| No threat intelligence on regional threats | INDRA CTI with ASEAN-relevant threat actor attribution |
How Does Peris.ai Support Indonesian Enterprises?
As an agentic AI cybersecurity company with a registered presence in Indonesia and operational knowledge of the BSSN regulatory environment, Peris.ai is positioned to help Indonesian and ASEAN enterprises build the security capabilities their digital growth requires.
Full platform coverage for Indonesian enterprise environments:
- XDR: Unified detection across endpoint, network, and identity layers, providing the comprehensive threat visibility that traditional perimeter security cannot deliver
- EDR: Endpoint protection covering the diverse device environments common in Indonesian enterprise and SME contexts
- NVM: Network Visibility Monitor providing packet-level inspection to detect nation-state lateral movement and data exfiltration patterns
- INDRA CTI: Real-time threat intelligence with threat actor attribution covering ASEAN-relevant campaigns including Salt Typhoon, Handala, and ransomware groups actively targeting Indonesian organizations
- BrahmaFusion: Agentic AI and hyperautomation platform enabling lean security teams to operate at enterprise scale
The regional presence advantage:
Peris.ai’s Jakarta office means in-country expertise for Indonesian organizations navigating the specific regulatory requirements of BSSN compliance, UU PDP implementation, and the forthcoming cybersecurity law. This is not remote support from Singapore. It is local understanding of the threat landscape, the regulatory environment, and the operational realities of Indonesian enterprise security.
A leading telco using Peris.ai’s platform reduced incident response time from 30 minutes to 3.3 minutes, directly relevant to an environment where 3,300 weekly attacks mean the response clock is always running.
Real-World Scenario: Protecting an Indonesian Fintech During Rapid Growth
An Indonesian fintech platform has grown from 500,000 to 4 million users in 18 months. Its security infrastructure has not scaled proportionally. The platform processes $2 billion annually in transactions and holds personal and financial data for 4 million customers.
Without comprehensive security: The platform is targeted by a ransomware group that identifies its rapid growth and limited security monitoring as an opportunity. Initial access is gained through a credential stuffing attack on a poorly monitored administrative interface. The attack is not detected for 11 days.
With Peris.ai full platform deployment:
- INDRA CTI surfaces credential stuffing activity targeting the fintech’s domain from a known threat actor infrastructure within hours of initial attack attempts.
- EDR detects anomalous authentication patterns on the administrative interface and triggers an alert.
- BrahmaFusion automatically locks the compromised administrative account and initiates an investigation playbook.
- The security team receives a complete incident report. The attack is contained before lateral movement begins.
Four million customer records protected. Business continuity maintained.
Benefits of the Peris.ai Platform for Indonesian Enterprise Security
| Benefit | Outcome |
| Local Jakarta presence and BSSN registration | Regulatory expertise and in-country support |
| INDRA CTI with ASEAN threat actor coverage | Indonesia-relevant threat intelligence in real time |
| Full XDR, EDR, NVM platform coverage | No blind spots in the Indonesian enterprise attack surface |
| BrahmaFusion agentic AI automation | Lean security teams operating at enterprise scale |
| 53% breach impact reduction | Documented outcome protecting high-growth digital environments |
Conclusion
Indonesia’s path to a $360 billion digital economy is one of the most compelling growth stories in the Asia-Pacific. But every additional billion dollars in digital economic value increases the attractiveness of Indonesia as a cyber target. The organizations that will succeed in this environment are those that build their security posture ahead of their growth curve, not after the breach that makes it a priority.
Peris.ai, with offices in Singapore and Jakarta, is built for exactly this challenge. Real-time threat intelligence, agentic AI response, and regional expertise in the ASEAN threat landscape.
Learn how Peris.ai supports Indonesian enterprise security at peris.ai. Your digital ambition deserves protection that matches its scale.
Frequently Asked Questions
Why is Indonesia the most attacked nation in ASEAN?
Indonesia combines several factors that make it a disproportionately attractive cyber target: ASEAN’s largest population (277 million), one of the region’s fastest-growing digital economies, relatively high-value targets across fintech and e-commerce, and a regulatory environment still developing the enforcement mechanisms to compel consistent security investment across sectors.
How does Indonesia’s lack of a dedicated cybersecurity law affect enterprise security?
Without a dedicated cybersecurity law, Indonesia lacks unified minimum security standards, clear breach reporting obligations, and consistent enforcement across sectors. This creates a compliance environment where security investment is driven by each organization’s own risk assessment rather than regulatory requirement, resulting in significant variation in security maturity across the Indonesian enterprise landscape.
What is Peris.ai’s presence in Indonesia?
Peris.ai has an office at the Tokopedia Care Tower in Jakarta and is registered with BSSN, Indonesia’s national cybersecurity agency. This gives Peris.ai both the regulatory standing and the in-country expertise to support Indonesian enterprises navigating the specific requirements of the BSSN framework, UU PDP compliance, and the forthcoming cybersecurity law.
What should Indonesian enterprises prioritize for cybersecurity investment in 2026?
Given the 3,300 weekly attacks and the imminent strengthening of BSSN’s enforcement powers, Indonesian enterprises should prioritize: unified threat detection coverage (XDR/EDR/NVM), automated incident response capability (IRP/SOAR), real-time threat intelligence relevant to ASEAN threat actors (INDRA CTI), and documentation of security controls for regulatory compliance. Peris.ai’s full platform addresses all four of these priorities.
Leave a Reply