Founder-Led Cybersecurity.
ALFA Network LK is a cybersecurity business in the Ja-Ela area, just north of Colombo. It is run by its founder, Dishan Sanjaya. Dishan Sanjaya leads every engagement himself and brings in trusted specialists when a job needs extra hands or a particular skill.
Penetration Testing / Red Teaming / Managed Security / AI Security / Training / Testing Hardware
One Founder,
Trusted Specialists
ALFA Network LK was founded by Dishan Sanjaya, and he still runs it day to day. When you get in touch, you talk to him. He scopes the work, leads the testing and signs off the report, so one person is responsible for your job from start to finish.
Some jobs need more than one person, or a skill that is better brought in, such as a larger red team exercise or a specialist area of testing. For those, Dishan Sanjaya brings in trusted specialists for that job. They work under the same NDA and rules of engagement, and Dishan Sanjaya stays your point of contact throughout.
The point of a test is to show you what an attacker could actually see and do, and what it would mean for your business. Findings are checked by hand, and the report is written so that both your IT team and your management can use it.
Our Mission & Vision
Our Mission
To give organisations in Sri Lanka an honest picture of their security: what an attacker could reach, how much it matters and what to fix first. Then to help them fix it, whether that means a retest, ongoing managed security or training for their staff.
“If a problem can be found with a test, it is better that we find it than someone else.”
Our Vision
To be the security business that companies in Sri Lanka recommend to each other, because the testing was careful, the report was useful and the person who took on the job was the person who did it.
“Good security testing should not only be for companies with big budgets.”
Our Core Values
A few plain rules that apply to every job, whatever its size.
Permission in Writing
Nothing gets tested without an agreed scope, rules of engagement and written authorisation from whoever owns the systems. What we find stays between us and the people you name.
Test Like an Attacker
Tests follow the methods real attackers use against businesses like yours, so the results show what could actually happen, not just what a scanner flags.
Checked by Hand
No automated scan passed off as a penetration test. Every finding is confirmed by hand before it goes in the report, and every recommendation is something you can act on.
Scoped to You
Each job is planned around your systems, your industry and what you are actually worried about. A small web app and a company network do not need the same test.
Keep Learning
Attack techniques change and so do the tools. Keeping up is part of the job, and when something is worth sharing, it goes on the blog.
Local and Reachable
Based in the Ja-Ela area, with most customers in and around Colombo. A good part of the work can be done remotely, and we can meet in person when a job needs it.
What We Do
The main kinds of work ALFA takes on. The services page has the full list.
Penetration Testing & Red Teaming
Networks, web applications and internal systems, tested with permission. Red team exercises when you want to see how far a realistic attacker could get, and whether anyone notices.
Managed Security
For companies that do not have their own security staff: monitoring and response set up for your environment, with what is covered agreed up front.
AI Security
Security reviews of AI systems such as chatbots and assistants connected to company data: what they can be tricked into doing, and what they can leak.
Compliance & Risk Advisory
Findings mapped to the frameworks you report against, such as ISO 27001, PCI DSS, SOC 2, GDPR and Sri Lanka’s PDPA, with plain advice on what to fix first.
Training
From short awareness sessions for office staff to hands-on sessions for IT teams.
Security-Testing Hardware
Tools such as Flipper Zero, HackRF One and the Wi-Fi Pineapple, for teams that want to do some of their own testing.
Every ALFA Network LK engagement runs under agreed rules of engagement and a signed non-disclosure agreement, and nothing is tested without written authorisation from the owner of the systems. Specialists brought in for a job work under the same terms. ALFA Network LK is a registered business and holds TRCSL Vendor Licence 0706/26/R.
Ready to Work With ALFA?
The quickest way is the contact form. Tell us a bit about what you need, even if it is vague; working out what should actually be tested is part of the job. Dishan Sanjaya will reply himself and put together a scope that fits your systems and your budget.
NDA first • Scoped to your systems • Reply from the founder