What Cloudbase does

Cloudbase株式会社 (Cloudbase Inc.) is a Tokyo-based cloud security company founded in November 2019 by CEO Iwasa Koya (岩佐 晃也). The company operates a cloud security posture management (CSPM) platform that scans major public cloud environments — AWS, Microsoft Azure, Google Cloud, and Oracle Cloud — to detect configuration errors and vulnerabilities, then automatically prioritizes findings and delivers remediation guidance in Japanese. The core platform addresses a specific Japanese enterprise pain point: lengthy manual security review processes (reported at 6+ months for individual workloads) that bottleneck cloud migration and digital transformation initiatives. Cloudbase's product differentiation centers on Japanese-language remediation output and coverage of domestic cloud infrastructure, including a basic agreement with Sakura Internet to integrate with Sakura Cloud in support of Japanese digital sovereignty positioning.

In March 2026, Cloudbase expanded into adjacent AI security with Cloudbase AI, a browser-extension product that monitors employee usage of generative AI services (ChatGPT, Microsoft Copilot, Claude, and Gemini), detects personal and confidential information in LLM prompts, and provides organizational visibility into AI utilization patterns. The company sells primarily through direct enterprise field sales targeting large Japanese enterprises (named customers include Suzuki and TOPPAN), supplemented by inside sales for mid-market accounts. Cloudbase AI is additionally distributed through SB C&S's nationwide network of approximately 15,000 sales partners via a May 2026 distributor agreement. Pricing is quote-based and annual, with revenue generated through subscription contracts. The company holds ISO/IEC 27001:2022 certification and received the Excellence Award at the 20th Nippon New Business Creation Awards in November 2025. Cloudbase has raised approximately $8.7M across seed (August 2022) and Series A (February 2024 with DNX Ventures and JAFCO, supplemented by Flight Deck Capital in August 2024) rounds, and operates with 11-50 employees.

Name

Cloudbase

Legal name

Cloudbase株式会社

Website

https://cloudbase.co.jp

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

Cloudbase is a Tokyo-based cloud security company that provides multi-cloud vulnerability scanning and Japanese-language remediation guidance for large Japanese enterprises, and offers Cloudbase AI for enterprise generative AI governance and data leakage prevention.

Ownership category

akta.pro rank

Product category

Cloud Security Software

NAICS

Software Publishers (5132), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Cloud Data Security (DSPM, Cloud DLP) (HDADADAJ)

akta.pro secondary industries

Cloud Security Managed Services (CSPM/CWPP/CNAPP) (BPAEADAF), Cloud Security & Compliance Services (BPAEACAG), Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK)

Keywords

• Cloud security platform
• Multi-cloud vulnerability management
• Generative AI security
• Cloud configuration monitoring
• LLM data protection

Headquarters

HQ city

Tokyo

HQ country

Japan

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Cloudbase Platform Subscription: Subscription-based cloud security platform providing continuous monitoring and risk management across multi-cloud environments
2. Cloudbase AI Subscription: AI security service subscription for enterprise generative AI governance and data leakage prevention

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels4 records

Core offering

Cloudbase develops and sells a cloud security platform that comprehensively detects misconfigurations and vulnerabilities across major public clouds (AWS, Azure, Google Cloud, Oracle Cloud, and Sakura Cloud) and provides automated risk prioritization with Japanese-language remediation guidance. The company also offers Cloudbase AI, an AI security service that monitors enterprise generative AI usage, detects and blocks personal or confidential information in LLM prompts, and provides governance across ChatGPT, Copilot, Claude, and Gemini.

Product overview

Cloudbase offers a dual-product portfolio: (1) Cloudbase, the core cloud security platform that scans AWS, Azure, Google Cloud, and Oracle Cloud environments to detect configuration errors and vulnerabilities with automated prioritization and Japanese-language remediation guidance; and (2) Cloudbase AI, an AI security add-on launched in March 2026 that provides browser-based monitoring and data loss prevention for enterprise LLM usage including ChatGPT, Copilot, Claude, and Gemini. The products share a unified architecture with Cloudbase handling traditional cloud infrastructure security while Cloudbase AI extends coverage to AI/LLM governance and enterprise AI adoption security.

Differentiator

Problem solved

Functional benefit

Brands

• Cloudbase AI: AI security service that helps enterprises safely use generative AI by detecting, masking, or blocking personal and confidential information in LLM prompts, and monitoring LLM usage across the organization.

Products and services

• Cloudbase Cloud security platform that comprehensively detects configuration errors and vulnerabilities across AWS, Azure, Google Cloud, and Oracle Cloud (and Sakura Cloud via partnership), with automated risk prioritization and easy-to-follow remediation guidance in Japanese for enterprise security and IT teams.
• Cloudbase AI AI security service that visualizes enterprise generative AI usage and prevents information leakage to LLMs. Provides a browser extension that detects and blocks personal or confidential information in prompts, monitors multi-LLM usage across ChatGPT, Copilot, Claude, and Gemini, and enables organization-wide AI governance for enterprises adopting generative AI.

Quantifiable outcome

• Security review time reduced from weeks to minutes/hours
• +1 more outcomes

Named customers2 records

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature3 records

Partnerships

Two partnerships are on record, tiered core.

• SB C&ScoreChannel Partner/ Reseller/ Distributor · 27 May 2026Cloudbase and SB C&S entered into a distributor agreement for Cloudbase AI, enabling SB C&S to distribute the AI security service through their nationwide network of approximately 15,000 sales partners to enterprises advancing generative AI adoption.
• さくらインターネット (Sakura Internet)coreStrategic or Co-development Partner · 27 April 2026Cloudbase and Sakura Internet signed a basic agreement to integrate Cloudbase security platform with Sakura Cloud, aiming to expand domestic cloud and security ecosystem, promote Japanese digital sovereignty, and provide secure domestic cloud usage environment.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Palo Alto Networks Prisma Cloud: Prisma Cloud is Palo Alto Networks' comprehensive CNAPP offering spanning CSPM, CWPP, CIEM, and DSPM across all major clouds. As a broad incumbent with significantly greater scale and an enterprise installed base, it competes with Cloudbase but offers a much wider portfolio beyond Cloudbase's Japanese-focused niche.
• Microsoft Defender for Cloud: Microsoft Defender for Cloud (formerly Azure Security Center) provides native CNAPP capabilities across Azure, AWS, GCP, and OCI, often bundled with Azure subscriptions. It is the most significant free/built-in incumbent competing with Cloudbase's multi-cloud scanning offering and represents the primary "good enough" alternative for Japanese enterprises.
• Trend Micro Cloud One: Trend Micro, headquartered in Japan-adjacent Tokyo, offers Cloud One, a security platform for workloads, containers, and cloud posture across AWS, Azure, and GCP. As a Japanese-headquartered incumbent with deep Japan market presence, it is a relevant broad competitor to Cloudbase, particularly for the platform's multi-cloud scanning capabilities.

Direct peers

• Aqua Security: Aqua Security provides cloud workload protection, container security, and CSPM capabilities across AWS, Azure, GCP, and other clouds. Its overlap with Cloudbase in multi-cloud posture and workload protection makes it a direct peer, particularly for the workload-scanning and vulnerability-detection aspects of Cloudbase's offering.
• Wiz: Wiz is a leading global CNAPP/CSPM platform that scans multi-cloud environments (AWS, Azure, GCP, OCI) for misconfigurations, vulnerabilities, and identity risks. It is the most direct global comparable to Cloudbase's core platform in product functionality, although Cloudbase differentiates through Japanese-language remediation and domestic cloud integration.
• Orca Security: Orca Security provides agentless cloud security posture management and workload protection across AWS, Azure, GCP, and Oracle Cloud. Like Cloudbase, it focuses on multi-cloud misconfiguration and vulnerability detection with automated risk prioritization, making it a closely aligned direct peer in the CNAPP space.
• Lacework: Lacework is a cloud security platform offering CSPM, CWPP, and threat detection across major public clouds. It targets similar enterprise use cases to Cloudbase — automated multi-cloud risk detection and remediation — and serves comparable buyer personas (DevOps and security teams), making it a direct product peer.

Regional players

• NRI Secure Technologies: NRI Secure Technologies is a major Japanese cybersecurity services and consulting firm offering managed cloud security, MSSP, and posture management services to Japanese enterprises. It is a regional peer competing for the same Japanese enterprise cloud security budget that Cloudbase targets, particularly via managed services.
• LAC Co., Ltd. LAC is a Japanese cybersecurity company that provides security consulting, managed security services, and cloud security solutions to Japanese enterprises and government agencies. As a domestic peer with deep relationships with Japanese enterprise buyers, it represents a relevant regional alternative for the same customer base Cloudbase serves.

Emerging players

• Cyera: Cyera is a leading DSPM (data security posture management) platform that discovers, classifies, and protects sensitive data across cloud environments. It is closely comparable to the Cloudbase AI (LLM data leakage prevention) module and the broader data-centric positioning of Cloudbase's platform.

Market position

Strengths2 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/cloudbase_inc

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds3 records

Investors7 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cloudbase