NPCore

What NPCore does

NPCore is a South Korean cybersecurity company founded in 2008, built around an AI-based behavioral analysis engine applied to advanced persistent threat (APT) detection, endpoint detection and response (EDR/XDR), ransomware defense, and threat intelligence. Its core platform, the ZombieZERO suite, includes the Inspector V4.0 Series for network, email, and file APT detection with integrated management, ZombieZERO EDR and ZombieZERO XDR products, the RansomZERO ransomware defense line, ZombieZERO CTI for threat intelligence, and the npFirewall appliance. Underlying technology is proprietary: an AI-driven behavioral analysis engine, an AI-TIP automated threat-judgment module, and a NET-certified deep-learning RGB image-based PE malware similarity detector. The company is incorporated as NPCore, Inc., with an entity establishment date of December 2022 referenced in its company timeline.

The company sells primarily to Korean government agencies and large enterprises, with an expanding footprint across Southeast Asia and the US. Named customers and counterparties include the Indonesian National Police, VNPT in Vietnam, CMC CS under an MOU, and Korea's Educational Cyber Safety Center (ECSC) under the Ministry of Education. NPCore is integrated with the Korea Internet & Security Agency's C-TAS threat-intelligence platform and with VirusTotal. The portfolio carries multiple Korean regulatory certifications — GS Certification, National Intelligence Service certification, CC (Common Criteria), and NET certifications — which are gating credentials for Korean public-sector and critical-infrastructure deals.

The business model combines on-premises appliance and software licensing (ZombieZERO Inspector, EDR, XDR, npFirewall, RansomZERO) with consulting, malware security services, security education, and a now-narrowed ZombieZERO SECaaS offering (partially discontinued in November 2024). Distribution is direct to Korean public-sector and enterprise accounts and channel-led internationally, with a Vietnam joint venture and additional partnerships in Malaysia, Thailand, and Japan. NPCore raised a pre-IPO round of approximately 8 billion KRW (~US$6M) in November 2023 led by Mirae Asset Securities to support a planned KOSDAQ listing, and pursues ecosystem partnerships such as its November 2025 collaboration with SOC PRIME to extend its XDR detection content.

Name

NPCore

Legal name

NPCore, Inc.

Website

https://npcore.com

Company type

Private

Founded year

2022

Operating status

Operating

Headcount range

11–50 employees

Short description

NPCore is a South Korean AI-based cybersecurity company specializing in APT detection, EDR/XDR, ransomware defense, and threat intelligence, serving government agencies and large enterprises across South Korea and Southeast Asia.

Ownership category

akta.pro rank

Product category

Cybersecurity Software

NAICS

Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Endpoint Deception & Anti-Ransomware (HDADAEAL)

akta.pro secondary industries

Deception Technology & Threat Hunting (HDADAGAI), Email & Collaboration Threat Detection/Response (ICR/CTDR) (HDADAKAI), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)

Keywords

• Advanced persistent threat
• Endpoint detection response
• Extended detection response
• Ransomware protection software
• Threat intelligence platform

Headquarters

HQ city

Seoul

HQ country

South Korea

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Security Software Licenses and Subscriptions: NPCore sells AI-based cybersecurity solutions including Network APT, EDR, XDR, and ransomware protection products. Products are available in both on-premises and cloud deployment models, suggesting subscription or perpetual license revenue.
2. SECaaS (Security as a Service): Cloud-based security services expanding the company's portfolio beyond on-premises solutions into managed security services.
3. Malware Security Consulting: Professional consulting services for malware security analysis and response.

Go-to-market motion2 records

Distribution channels2 records

Marketing channels4 records

Core offering

NPCore develops and sells AI-based cybersecurity software under the ZombieZERO brand, including Network/Email/File APT detection (Inspector V4.0 Series), Endpoint Detection and Response (EDR), Extended Detection and Response (XDR) with automated threat judgment (AI-TIP), Cyber Threat Intelligence (CTI), anti-ransomware (RansomZERO), and a firewall (npFirewall). Its products use AI-driven behavioral analysis with sandboxing to detect zero-day and variant malware, offered as on-premises appliances or as cloud-based security services (SECaaS), alongside malware security consulting and security education.

Product overview

NPCore offers a comprehensive AI-based cybersecurity product portfolio centered around the ZombieZERO brand. The core product line includes the ZombieZERO Inspector V4.0 Series (encompassing Network APT, Email APT, File APT, and integrated management), ZombieZERO EDR for endpoint security, and ZombieZERO XDR for extended detection and automated threat response. Supporting the core products are specialized modules including ZombieZERO SECaaS (cloud-based security services), ZombieZERO CTI (cyber threat intelligence), RansomZERO (anti-ransomware), and npFirewall. The company also provides malware security consulting and security education services. All products leverage AI-based behavior analysis technology to detect and respond to new and variant malware threats without relying on traditional signature-based detection.

Differentiator

Problem solved

Functional benefit

Brands

• ZombieZERO: AI-based behavior analysis security solution product line including Network APT, Email APT, File APT, EDR, XDR, and SECaaS products
• ZombieZERO Inspector
• ZombieZERO EDR
• ZombieZERO XDR
• ZombieZERO SECaaS
• ZombieZERO CTI
• npFirewall
• RansomZERO
• AI-TIP

Products and services

• ZombieZERO Inspector V4.0 Series (Network APT) Network-based Advanced Persistent Threat (APT) detection and response solution that collects network traffic data through a dedicated acceleration board and analyzes URL/File information using virtual analysis machines to detect and block new variant malware and APT attacks. Targets enterprise and government security teams.
• ZombieZERO EDR Agent-based endpoint security solution that uses AI-based behavioral analysis to detect, analyze, and block ransomware and new variant malware attacks on user endpoints including PCs and servers. Features execution holding, data backup, and whitelist-based file execution control. Targets enterprise and government endpoint environments.
• ZombieZERO XDR AI-based Extended Detection and Response platform that combines active data collection with AI-TIP automated threat judgment technology to autonomously identify and respond to security threats without requiring professional security analysts. Targets SOCs and enterprise security teams.
• ZombieZERO SECaaS Cloud-based security-as-a-service offering that delivers NPCore's security capabilities via subscription for customers preferring cloud-delivered solutions.
• ZombieZERO CTI AI-based Cyber Threat Intelligence solution that provides threat hunting data including incident information, malware similarity, threat site prediction, attack techniques, and attack group profiles for security analysts and SOC teams.
• RansomZERO Anti-ransomware solution that detects and protects against ransomware attacks using AI-based behavioral analysis. Won the IR52 Jang Yeong-sil Award and designated as excellent information security technology by Korea's Ministry of Science and ICT and KISA.
• npFirewall Firewall security solution providing network perimeter protection and threat filtering capabilities.
• Malware Security Consulting (악성코드 보안 컨설팅) Professional consulting service providing expert malware security analysis, threat assessment, and security recommendations for organizations.
• Security Education Services (보안교육사업) Security education and training services for developing cybersecurity awareness and skills within client organizations.

Quantifiable outcome

• Automated threat judgment eliminates the need for professional security analysts for initial threat response
• +1 more outcomes

Named customers4 records

Segments3 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature5 records

Partnerships

Six partnerships are on record, tiered core and minor.

• Ikrama Systems (Malaysia)coreStrategic or Co-development Partner · 23 May 2025NPCore signed an MOU with Malaysian company Ikrama Systems to strengthen cybersecurity cooperation, likely involving technology integration and market collaboration in Malaysia.
• Indonesian National PolicecoreTechnology or Integration · 21 October 2024NPCore supplied its EDR (Endpoint Detection and Response) solution to the Indonesian National Police for endpoint security and advanced threat detection capabilities.
• VNPT (Vietnam Posts and Telecommunications Group)coreTechnology or Integration · 11 October 2024NPCore deployed AI-based CTI and EDR solutions for VNPT's security monitoring team, establishing a comprehensive AI-powered security infrastructure for Vietnam's telecom provider.
• CMC CS (Vietnam)coreStrategic or Co-development Partner · 30 May 2024NPCore signed an MOU with Vietnamese cybersecurity company CMC CS for endpoint cybersecurity collaboration, leveraging local market expertise and technology synergies.
• BlueZebra (Thailand)minorChannel Partner/ Reseller/ Distributor · 7 May 2024NPCore conducted a joint workshop with Thai local partner BlueZebra, a distribution and implementation partner for NPCore's products in the Thai market.
• ANSVminorStrategic or Co-development Partner · 17 January 2023NPCore and ANSV partnered to strengthen endpoint cybersecurity capabilities, combining their respective security technologies.

Scale indicators3 records

Recent moves8 records

Expansion highlights5 records

Broad incumbents

• Sophos: Established endpoint security and XDR vendor with Intercept X and MDR services, competing with NPCore's EDR and XDR products in enterprise and government segments.
• Trend Micro: Global cybersecurity vendor with endpoint, network, email, and cloud security, directly overlapping NPCore's EDR, Network APT, Email APT, and XDR product categories.
• Palo Alto Networks: Global cybersecurity platform with Cortex XDR product line directly overlapping NPCore's ZombieZERO XDR, plus broader network and cloud security portfolio.

Regional players

• Secui: Korean network security specialist with firewall, APT detection, and threat intelligence offerings, directly comparable to NPCore's npFirewall and Network APT solutions.
• Penta Security: Korean cybersecurity vendor with web application security, data encryption, and authentication products, comparable as a Korean cybersecurity peer targeting enterprise and government.
• IGLOO Security: Korean cybersecurity company offering network security, endpoint security, and security consulting, comparable as a Korean regional peer targeting enterprise customers.
• S2W: Korean cybersecurity company specializing in threat intelligence and dark web monitoring, comparable to NPCore's CTI and AI-TIP capabilities in the Korean and Asian markets.

Direct peers

• AhnLab: Korean cybersecurity incumbent and the dominant domestic endpoint and threat intelligence provider, directly competing with NPCore in the Korean market with broader product portfolio.
• CrowdStrike: Global leader in endpoint security and XDR with the Falcon platform, directly competing with NPCore's ZombieZERO EDR/XDR offerings for enterprise and government customers.
• SentinelOne: AI-powered endpoint security and XDR vendor competing head-to-head with NPCore's behavioral analysis approach to detect new and variant malware.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/npcore1
• LinkedInlinkedin.com/company/np-core-inc-

Compliance10 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds5 records

Investors8 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about NPCore