Thailand imports 70–80% of its cybersecurity tooling. That's the ratio I'm trying to move — I run zcr and teach security at three universities here.
—
zcr is the day job: zcrSOAR, zcrCTEM, zcrLog, zcrGov — AI-native SOAR, attack-surface management, and SIEM-grade log intelligence built for Thai enterprises and hospitals, instead of the usual imported stack.
The research side started in blockchain and digital identity (still on Scholar, 177 citations, mostly pre-2022) and moved into SOC automation with LLMs — SALAD-SOC, ExplainSOC, HMARL-SOC, ThaiScamBench, and a telemetry-reduction benchmark tied to an IEEE Access 2026 paper. Somewhere around 17 papers in that thread now.
A few things are actually open-source if you want to poke at them: ndr (has a live demo), MontaraWAF, and SOC-SOP — 170+ bilingual SOC runbooks, the most-starred thing I've published.
Teaching: KOSEN-KMITL, Mae Fah Luang, KMUTNB. Also building AIR-Sec, an assessment model meant to survive students having AI help — running as an actual preregistered study across three courses right now, not just an idea.
Thailand's wider digital deficit is bigger than cybersecurity alone — pushing ~400 billion baht/year, -2.6% of GDP, worst in ASEAN (Pawoot Pongvitayapanu has been pushing on this as subcommittee chair). Cybersecurity's just the slice I can actually do something about.