Building Cyber Resilience in Malaysia: Threat Intelligence, VMware Migration & Cloud WAF

Primary Guard · June 18, 2026 · 5 min read

Malaysian enterprises face rising cyber threats, VMware cost shocks, and expanding cloud risks. See how Cyber Threat Intelligence, hypervisor modernisation, and Cloudflare WAF work together for stronger, sovereign security.

Last updated: 2 November 2026

Malaysian security teams face three pressures at once. They receive more alerts than they can read. Their VMware licences are changing. Their web applications are exposed to the internet. Threat intelligence, VMware exit migration and a cloud web application firewall (WAF) answer these pressures. This article explains each one and how they fit together.

Threat intelligence: turn data into decisions

A list of malicious IP addresses is data. Intelligence tells you which threats matter to you. NIST defines threat intelligence as threat information that has been aggregated, transformed, analysed, interpreted or enriched. Our guide to actionable threat intelligence goes deeper.

ENISA, the EU cybersecurity agency, describes three levels. Strategic intelligence supports high-level decisions. Tactical intelligence covers the techniques attackers use. Operational intelligence covers early signals of attacks and often includes technical indicators. It also describes a six-stage cycle that runs from direction to feedback.

CYFIRMA calls its platform External Threat Landscape Management (ETLM). It says the platform combines threat intelligence with attack surface discovery, vulnerability intelligence, brand intelligence and digital risk protection. Primary Guard delivers CYFIRMA ETLM as a service. See our threat intelligence service in Malaysia.

VMware exit migration: change platforms without breaking production

Broadcom completed its acquisition of VMware on 22 November 2023. VMware then ended the sale of perpetual licences and Support and Subscription as standalone offers. What remains is sold as subscription software. VMware says existing customers do not need to act straight away, and should align with the new portfolio at renewal.

Proxmox VE is one alternative. Proxmox describes it as an open-source platform that combines the KVM hypervisor with Linux containers. It includes software-defined storage and networking, and high availability for clusters. Primary Guard also covers Sangfor HCI, H3C CAS and Maipu HCI on its virtualization page.

A safe migration follows four steps. Read our VMware exit migration plan for the details.

Step 1: Inventory every workload, including its dependencies.

Step 2: Choose the target platform for each workload.

Step 3: Move in phases, with a runbook and a rollback plan.

Step 4: Set up monitoring, backup and training on the new platform.

Cloud WAF: protect web apps and APIs at the edge

A WAF filters requests to your website or app before they reach your server. Cloudflare says it helps against attacks such as SQL injection and cross-site scripting, but not every type of attack. Our guide explains what a cloud WAF is.

Cloudflare says its Managed Ruleset covers known attack techniques and zero-day vulnerabilities, and is updated frequently. It is on Pro, Business and Enterprise plans. Cloudflare also lists Kuala Lumpur and Singapore among its data centre locations.

Akamai says App & API Protector combines its WAF with layer 7 DDoS defence, API discovery and bot controls. Bunny.net says Bunny Shield offers zero-day defence and OWASP Top 10 protection, from a free Basic tier to Enterprise.

Primary Guard is a partner of Cloudflare, Akamai and bunny.net. See our Cloud WAF service, Cloud WAF in Malaysia and bunny.net partner page.

How the three work together

Intelligence tells you which attacks to expect. A migration is a good moment to ask which applications should sit behind a WAF. WAF logs and your own telemetry then show which attacks actually reach you.

Treat this as a planning approach. CYFIRMA's list of technology partners does not include Cloudflare, so do not assume an automatic link between the two. Decide who reads the intelligence, who owns the WAF rules and who signs off each migration step.

How Primary Guard helps

Primary Guard delivers CYFIRMA threat intelligence, VMware migrations and Cloud WAF services on Cloudflare, Akamai and bunny.net. You can start with whichever gap is biggest. See our VMware exit migration page and the free migration assessment.

Not sure which of the three to tackle first? Contact us to start the conversation.

Frequently asked questions

Do I need to do all three at once?

No. Start with your biggest gap. If you have a VMware renewal coming, plan the migration first. If your web applications face the internet unprotected, start with a WAF.

Do I have to leave VMware right away?

Not necessarily. VMware says customers who are not up for renewal need no immediate action. The decision point is your renewal, so start your workload inventory well before then.

Can a WAF stop zero-day attacks?

It can help. Cloudflare says its Managed Ruleset covers zero-day vulnerabilities. Cloudflare also says a WAF cannot defend against every attack, so keep patching and monitoring.

Key takeaway

Threat intelligence, a planned VMware exit and a cloud WAF each close a different gap. Start with the biggest one, give every step an owner, and build from there.

Sources

This article is based on vendor and public documentation checked on 2 November 2026. Figures marked as Primary Guard figures are company figures. Features and plans can change, so confirm details with the vendor. It is general information, not advice.