LRM

What LRM does

LRM Corporation (LRM株式会社) is a privately held Japanese information security consulting and SaaS firm founded in December 2006 and headquartered in Kobe, with additional offices in Tokyo (opened 2012) and Nagoya (opened April 2026). The company operates a dual-product model: (1) Seculio, a proprietary cloud-based security education platform offering e-learning, phishing-email simulation, supply-chain security questionnaires, BCP/safety-confirmation, and compliance management, which is reported to support 2,500+ organizations across Japan; and (2) professional consulting services for third-party certification acquisition and maintenance, covering ISMS/ISO27001, P-mark (Privacy Mark), ISO27017, ISO27018, ISO27701, ISO22301/BCMS, ISMAP, and the new AIMS/ISO 42001 AI Management System. An ancillary subscription retainer — the Information Security Club (¥4,000-¥125,000/month) — converts one-time certification projects into recurring post-certification support for ISMS and P-mark clients.

The firm's go-to-market is content-and-event-led: it publishes a security magazine, distributes 100+ gated white papers, runs dozens of free monthly webinars (often co-hosted with tier-1 partners such as Trend Micro, MBSD, IIJ, TÜV Rheinland, and Mori Hamada & Matsumoto), and leverages an Amazon #1 bestselling book (May 2026) for executive-level thought leadership. The target buyer base spans Japanese startups preparing for IPO, mid-market firms pursuing certifications for enterprise sales enablement, and large enterprises needing ongoing ISMS/P-mark operations. Customers include named logos such as Nulab, kubell (Chatwork), Works Applications, Works Human Intelligence, Gluegent, Secoss, Digital Line, and Save Medical, distributed across IT/SaaS, healthcare, logistics, and translation services verticals. LRM itself holds ISO27001 (Kobe and Tokyo offices), ISO27017 and ISO27701 certifications (Seculio), and the IPA Security Action designation, using these credentials as both internal discipline and external trust signals. The company is bootstrapped, founder-led (CEO Tetsuya Yukimatsu since 2006), with a leadership team of three — Yukimatsu (CEO), Tsuboi Akito (Director/CISO), and Fujii Tomoyuki (Executive Officer/CCO) — and a headcount in the 51-100 range.

Name

LRM

Legal name

LRM株式会社

Website

https://lrm.jp

Company type

Private

Founded year

2006

Operating status

Operating

Headcount range

51–100 employees

Short description

LRM is a Japanese information security consulting and SaaS firm (founded 2006, Kobe) that delivers ISMS, P-mark, ISO, and AIMS certification consulting alongside its proprietary Seculio cloud security-education platform, serving 2,500+ organizations across Japan.

Ownership category

akta.pro rank

Product category

Information Security Consulting & Compliance Services

NAICS

Computer Systems Design and Related Services (5415), Computer Systems Design and Related Services (54151), Other Computer Related Services (541519)

SIC

Services-Engineering, Accounting, Research, Management (8700), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

IT Risk Management (ITRM) (HDADAIAD)

akta.pro secondary industries

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Data Access Governance & Entitlement Management (DSPM / CIEM-for-Data) (HDADAFAG)

Keywords

• Information security consulting
• ISMS certification services
• Security education platform
• Privacy mark consulting
• Cloud security compliance

Headquarters

HQ city

Kobe

HQ country

Japan

HQ region

Asia

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure, Others

Revenue model

1. Security Education Cloud (Seculio) - SaaS Subscription: Cloud-based security education platform offered on a subscription basis. Features include e-learning, phishing simulation training, supply chain security management, safety confirmation, and法令 management. Marketed as supporting over 2,500 organizations.
2. Security Consulting Services: Consulting for ISMS/ISO27001, P-mark, ISO27017, ISO27018, ISO27701, ISMAP, AIMS/AI governance, BCP/BCMS, and security training. Includes both project-based consulting engagements and ongoing retainer arrangements (e.g., Security Club membership).
3. Information Security Club (情報セキュリティ俱楽部) - Retainer/Support Plans: Subscription-based ongoing support for ISMS/P-mark certified organizations. Plans range from basic advisory (¥4,000/month) to full security BPO (¥125,000/month). Includes consulting support, seminar access, policy templates, and regulatory tracking.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels9 records

Core offering

LRM provides information security consulting and certification support for Japanese organizations, covering ISMS/ISO27001, Privacy Mark, ISO27017, ISO27018, ISO27701, ISO22301/BCMS, ISMAP, and AIMS/ISO 42001 (AI governance). It pairs these professional services with a proprietary cloud-based security education SaaS platform called Seculio, which delivers e-learning, phishing email simulation, supply chain security questionnaires, BCP/safety confirmation, and法令 management. A subscription-based support program (Information Security Club) and ancillary products such as MailZipper (email attachment encryption) and SecuLog First (PC log management) round out the offering.

Product overview

LRM offers a dual-product portfolio combining a cloud-based security education platform (Seculio) with professional information security consulting services. Seculio provides e-learning, phishing simulation training, and compliance training to over 2,500 organizations across Japan. The consulting division supports certification acquisition and ongoing operations for ISMS/ISO27001, Privacy Mark, ISO27017, ISO27018, ISO27701, ISO22301, and ISMAP. An ancillary subscription service (Information Security Club) provides ongoing support to certified organizations.

Differentiator

Problem solved

Functional benefit

Brands

• セキュリオ (Seculio): Cloud-based security education platform providing e-learning, phishing simulation training, and security awareness programs for organizations. Over 2,500 organizations supported across Japan.
• 情報セキュリティ俱楽部 (Information Security Club)
• SecuLog First (セキュログファースト)
• MailZipper (メールZipper)

Products and services

• Seculio (セキュリオ) - Security Education Cloud Cloud-based security education SaaS platform that delivers e-learning, phishing email simulation training, supply chain security questionnaires, safety confirmation/BCP, and法令 management to improve employee security awareness and support ISMS/P-mark certification operations.
• LRM Consulting - Information Security Certification Consulting Project-based and ongoing consulting for acquiring and maintaining third-party certifications including ISMS/ISO27001, Privacy Mark, ISO27017, ISO27018, ISO27701, ISO22301/BCMS, ISMAP, and AIMS/ISO 42001 (AI governance). Services include scoping, documentation, internal audit support, and certification audit preparation.
• Information Security Club (情報セキュリティ倶楽部) - Subscription Support Service Subscription-based retainer providing ongoing operational support for organizations that already hold ISMS or P-mark certification, including security FAQ, incident consultation, seminars, training materials, policy templates, and regulatory tracking. Plans range from basic advisory (¥4,000/month) to full security BPO (¥125,000/month).
• MailZipper (メールZipper) - Email Attachment Encryption Service Cloud service that automatically encrypts email attachments, prevents mis-sent emails, and provides administrative log management for outbound corporate email.

Quantifiable outcome

• Supporting 2,500+ organizations across Japan with security education and consulting
• +2 more outcomes

Named customers12 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

14 partnerships are on record, tiered core and minor.

• Optima Solutions (オプティマ・ソリューションズ株式会社)coreStrategic or Co-development Partner · 4 October 2013Business partnership agreement signed October 4, 2013 between LRM and Optima Solutions for broad consulting cooperation. Includes mutual use of consulting document templates, exchange of consulting know-how, mutual entrustment of consulting work, and joint project execution. LRM specializes in ISMS (Osaka/Kobe base), while Optima specializes in P-mark (Tokyo base), creating complementary capabilities. Both are information security and personal information protection certification consulting specialists.
• Joasis Inc. (ジョーシス株式会社)minorGTM or Marketing PartnerCo-hosting free online seminar 'Exploring Governance Strategies for Shadow AI in the Workplace' on June 23, 2026. LRM provides the security education and governance expertise while Joasis contributes enterprise identity governance/GaMa capabilities.
• Pentasecurity Inc. (ペンタセキュリティ株式会社)minorGTM or Marketing PartnerCo-hosting seminar 'Creating an Organizational Culture That Prevents Internal Fraud' on June 18, 2026. Pentasecurity contributes data security technology and expertise, while LRM provides security education and culture formation services.
• TÜV Rheinland Japan (テュフ ラインランド ジャパン株式会社)minorGTM or Marketing PartnerCo-hosting seminar on AI Management System (AIMS) and ISO/IEC 42001 on June 16, 2026. TÜV Rheinland provides ISO/IEC 42001 certification expertise and customer case studies, while LRM provides consulting perspective and AIMS construction methodology.
• NSD Co., Ltd. (株式会社NSD)minorGTM or Marketing PartnerRegular co-hosting of security seminars including on security education ROI, phishing trends, and the Ministry of Economy security evaluation system. NSD contributes IT solution and privileged ID management expertise alongside LRM's education and consulting capabilities.
• Internet Initiative Japan (株式会社インターネットイニシアティブ)minorGTM or Marketing PartnerCo-hosting multiple webinars on endpoint security, browser defense, and attack surface visualization. IIJ contributes network and security service expertise while LRM provides human-factor security education perspective.
• Mitsui Bussan Secure Directions (三井物産セキュアディレクション株式会社)minorGTM or Marketing PartnerCo-presenting on IPA Security Top 10 Threats 2026. MBSD contributes deep cybersecurity consulting and incident response expertise while LRM adds security education and training angles.
• Trend Micro (トレンドマイクロ株式会社)minorGTM or Marketing PartnerCo-presenting on generative AI cybersecurity risks, with Trend Micro providing AI threat landscape intelligence and LRM providing organizational AI governance and security education perspective.
• Money Forward i (マネーフォワードｉ株式会社)minorGTM or Marketing PartnerCo-hosting seminars on help desk optimization and AI usage in organizations. Money Forward i contributes IT admin/identity management expertise (Admina platform) while LRM provides security culture and training perspective.
• Azusa (株式会社アズジェント)minorGTM or Marketing PartnerCo-presenting on endpoint security and ASM (Attack Surface Management). Azusa contributes product expertise for security solutions while LRM adds human-factor education perspective.
• Forezelt (株式会社フォアーゼット)minorGTM or Marketing PartnerCo-presenting on supply chain attack defense and latest incident trends. Forezelt contributes white hat hacker/red team perspective and incident response expertise.
• Assured (株式会社アシュアード)minorGTM or Marketing PartnerCo-presenting on third-party risk management in supply chain attacks. Assured contributes security consulting expertise and CISSP/CCSP credentials.
• Mori Hamada Matsumoto (森・濱田松本法律事務所)minorGTM or Marketing PartnerCo-presenting on internal fraud prevention from a legal perspective at the insider fraud seminar. MHM contributes cybersecurity law, data protection law, and former NISC government expertise.
• DX Comprehensive EXPO / JAPAN FUTURE GATEminorGTM or Marketing PartnerExhibition participation at DX総合EXPO 'JAPAN FUTURE GATE' to showcase LRM's consulting and Seculio services to a targeted DX and enterprise audience.

Scale indicators5 records

Recent moves8 records

Expansion highlights6 records

Direct peers

• Proofpoint Security Awareness: Enterprise security awareness and phishing simulation training. Direct competitor to Seculio in the security education SaaS category, with broader global reach but less Japanese-language and Japanese-regulation-specific content.
• LAC Co., Ltd. Japan-listed cybersecurity firm providing consulting, MSSP, and security solutions to Japanese enterprises. Comparable to LRM across consulting services and recurring security operations, with a longer track record in the Japanese market.
• HENNGE: Japan-listed SaaS company specializing in cloud security and identity/access management (HDE One). Comparable as a Japan-focused cloud security SaaS provider serving enterprise compliance and security needs, with recurring subscription revenue.
• KnowBe4: Global leader in security awareness training and phishing simulation. Directly comparable to LRM's Seculio platform for employee security education, though KnowBe4 operates globally while LRM focuses on Japan with localized Japanese compliance content.
• NRI Secure Technologies: Leading Japanese cybersecurity consulting and managed security services firm (subsidiary of Nomura Research Institute). Closely comparable to LRM's consulting arm for ISMS/ISO27001 and broader security services, though much larger in scale.
• Optima Solutions: Japanese information security and P-mark certification consulting specialist. Has a formal partnership agreement with LRM since 2013 and is a direct comparable as a competing Japanese consulting firm in privacy/security certification services.

Broad incumbents

• Deloitte Tohmatsu Risk Advisory (Cyber): Big Four advisory practice in Japan providing cybersecurity, risk, and compliance consulting including ISMS/ISO27001 services. Comparable as a competitor for enterprise security certification consulting, with broader portfolio and global brand.
• Internet Initiative Japan (IIJ): Major Japanese IT and network security services provider. Overlaps with LRM through security consulting and managed services; IIJ partners with LRM on webinars but also competes for Japanese enterprise security budgets at scale.
• Trend Micro: Global Japanese-headquartered cybersecurity vendor with broad enterprise security portfolio including email, endpoint, and AI threat products. Co-presents with LRM on AI security topics and overlaps in phishing/email security awareness education adjacent to Seculio.
• TÜV Rheinland Japan: Global certification body with Japanese operations providing ISO27001, ISO27701, and ISO42001 (AIMS) certification audits. A co-hosting partner with LRM on AIMS seminars; also competes as the auditor rather than consultant side of the certification stack.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/LRMcorp_PR
• Facebookfacebook.com/LRM.Corporation

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds2 records

Investors6 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about LRM