What AISEC does

Beijing An sai Chuangxiang Technology Co., Ltd. (AISEC, 安赛科技) is a Chinese cybersecurity company founded in 2012 and headquartered in Haidian District, Beijing. The company builds AI-powered security products including AIScanner (an enterprise vulnerability scanner with a proprietary Web2.0 intelligent interaction engine covering 5,763+ vulnerability types), AIWAF (Web Application Firewall), WebIDS and NIDS (intrusion detection systems based on full-traffic mirroring and big data processing), SPS (bypass blocking device for Layer-7 defense), APT (advanced threat analysis platform), and NGFW. Its underlying technology stack combines browser-sandbox-based dynamic execution, a vulnerability fingerprint database with 7x24 updates, and full-traffic mirror storage capable of retaining 500 billion+ session records.

AISEC serves primarily Chinese government agencies, financial institutions (PBOC, ICBC, CCB, BOC, ABC, CDB, CSRC, 100+ mid-to-large banks), state-owned energy and telecom operators (State Grid, China Southern Power Grid, China Mobile), and large internet enterprises (Tencent, Baidu, Alibaba, JD.com, Huawei), with deployments covering 70% of national ministries and 80% of national information security regulatory units. The company monetizes through a hybrid model: one-time hardware/software licenses and subscription-based SaaS (AIScanner Cloud at CNY 30,000/year for SMEs, enterprise custom pricing), professional services including penetration testing and Level Protection compliance, and MIIT-authorized NSACE training/certification.

The go-to-market is enterprise field sales with technical pre-sales support, supplemented by channel partners (Digital China / 神州数码). AISEC is privately held and founder-led by CEO Lin Yujian (林榆坚/linx). It received strategic investment from Tencent and 360 in 2012 and a national R&D special fund grant in 2013, listed on Beijing's New Fourth Board (ZS0401) in March 2015, secured CNNVD technical support unit and CNVD technical cooperation unit designations, and raised $15 million from Tencent in January 2018. Key certifications include National High-Tech Enterprise, ISO9001 (CNAS/ANAB dual), and Ministry of Public Security product certifications.

Name

AISEC

Legal name

北京安赛创想科技有限公司

Website

https://aisec.com

Company type

Private

Founded year

2012

Operating status

Operating

Headcount range

51–100 employees

Short description

Beijing-based AISEC (安赛科技) is a Chinese AI-powered cybersecurity vendor providing vulnerability scanning (AIScanner), Web Application Firewall, intrusion detection, and APT analysis products to government ministries, financial institutions, state-owned enterprises, and large internet companies across China.

Ownership category

akta.pro rank

Product category

Cybersecurity Software (Network and Web Application Security)

NAICS

Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

AI Observability, Monitoring & Evaluation Platforms (Drift, Quality, Safety) (HDAEANAF)

akta.pro secondary industry

AI Governance, Risk & Compliance (GRC) Platforms (HDAAAMAA)

Keywords

• Web vulnerability scanning
• Intrusion detection systems
• Web application firewall
• Advanced threat analysis
• Cybersecurity software

Headquarters

HQ city

Beijing

HQ country

China

HQ region

Asia

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Enterprise Security Products (Hardware/Software Licenses): Sale of enterprise-grade security products including AIScanner (vulnerability scanner), AIWAF (Web Application Firewall), WebIDS/NIDS (intrusion detection), APT platform, SPS (bypass blocker), and NGFW. Products are deployed on-premise or as hardware appliances. Revenue is generated through perpetual licenses or subscription-based maintenance and support contracts.
2. SaaS/Cloud Security Detection Services: AIScanner cloud-based security detection cluster provides online vulnerability scanning and monitoring as a service. Offered in tiers (free, SME, enterprise) with annual subscription pricing. Users receive periodic scanning, vulnerability reports, and security consulting.
3. Professional Services (Security Assessment & Penetration Testing): Manual security assessment and penetration testing services to identify system vulnerabilities. Targets mid-sized enterprises requiring comprehensive security evaluation. Revenue is project-based.
4. Security Training & Certification (NSACE): NSACE (Network Security Advanced Career Education) certification training authorized by MIIT. Provides security talent training as a licensed training base. Revenue from training fees and certification charges.
5. Government & Enterprise Security Service Projects: Project-based contracts for key accounts such as the People's Bank of China (PBOC) full traffic mirror analysis system. Includes system integration, deployment, and ongoing managed security services.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

AISEC develops and sells an integrated portfolio of AI-powered enterprise cybersecurity products — including the AIScanner vulnerability scanner (available as hardware appliance and SaaS), WebIDS/NIDS intrusion detection, AIWAF Web Application Firewall, SPS bypass blocking device, NGFW next-generation firewall, and APT/Situational Awareness platform — sold primarily to Chinese government agencies, banks, large internet companies, and critical infrastructure operators. The company also delivers project-based security assessment, penetration testing, level-protection compliance services, and MIIT-authorized NSACE security training.

Product overview

AISEC offers a unified platform of cybersecurity products centered on AI-powered vulnerability detection and threat analysis. The core portfolio includes: AIScanner (enterprise vulnerability scanner with Web2.0 support), WebIDS/NIDS (intrusion detection systems), AIWAF (Web Application Firewall), SPS (bypass blocking device), NGFW (next-generation firewall), APT (Advanced Threat Analysis), and NTA (Situational Awareness Platform). The products share common technological foundations including full traffic mirroring, big data analysis, and vulnerability fingerprint databases. Additional services include security assessment/penetration testing, level protection compliance, and NSACE security training certification.

Differentiator

Problem solved

Functional benefit

Brands

• AIScanner: Enterprise-level vulnerability scanner with Web2.0 intelligent interactive engine, supporting 5,763+ vulnerability types. Includes cloud-based SaaS scanning service (AIScanner安全检测集群) and hardware appliance version (AIScanner安全检测系统).
• AIWAF
• WebIDS
• NIDS
• APT
• SPS
• NGFW
• NSACE

Products and services

• AIScanner Security Detection System Enterprise-grade web vulnerability scanner using B/S architecture that provides 7x24 vulnerability scanning and security monitoring. Supports Web2.0, AJAX, intelligent interaction and over 5,763 vulnerability types, with browser sandbox analysis, intelligent form filling and DOM XSS memory verification.
• AIScanner Cloud Security Detection Cluster (SaaS) Cloud-based SaaS vulnerability scanning service built on a cluster of AIScanner hardware devices, providing online 7x24 web security detection with scalable scanning capacity, online registration and automatic license authorization.
• WebIDS Web Intrusion Detection & Vulnerability Perception System Passive vulnerability perception and intrusion detection system based on full traffic mirroring and big data processing, detecting web vulnerability scanning, vulnerability triggering and system compromise events through analysis of bidirectional web application layer packets.
• AIWAF Web Application Firewall Website application-level intrusion prevention system using intelligent web attack protection technology, enforcing HTTP/HTTPS security policies to protect web applications. Certified by the Ministry of Public Security and widely used in government, finance, energy and communications sectors.
• NIDS Next-Generation Intrusion Detection System Network intrusion detection system based on full traffic mirroring with deep mining of 300+ protocols, detecting vulnerability scanning, vulnerability triggering and system compromise events and supporting incremental backup with over 200 billion URL historical records for retrospective testing.
• SPS Side Prevent System (Bypass Blocking Device) Lightweight bypass device that achieves attack traffic blocking through packet injection while monitoring full traffic mirrors, providing Layer-7 intrusion detection, complex DPI, multi-session correlation, retrospective analysis and zero-day vulnerability hot patches.
• NGFW Next-Generation Firewall Next-generation firewall independently developed for advanced threat protection, using B/S architecture to provide 7x24 security protection for enterprises, governments and organizations.
• APT Advanced Threat Analysis Platform Advanced Persistent Threat analysis platform based on big data analysis technology for monitoring complex advanced sustainable attacks, providing 7x24 web security monitoring, email monitoring, network monitoring and HTTP monitoring modules.
• Situational Awareness Platform (NTA) Compound threat analysis platform based on big data analysis technology for monitoring advanced persistent threats, including web monitoring (full traffic mirror + big data correlation), HTTP monitoring (reputation analysis + broad spectrum feature matching), mail monitoring (dynamic sandbox) and data flow monitoring modules.
• Security Assessment & Penetration Testing Services Professional security assessment and penetration testing services that provide comprehensive identification of system vulnerabilities through manual security detection and simulated hacker attack testing, targeted at mid-sized enterprises and institutions requiring in-depth security evaluation.
• Level Protection (等级保护) Compliance Services Information security level protection services following Chinese national standards, including security assessment, construction, rectification and compliance evaluation to meet cybersecurity law and等级保护 requirements.
• NSACE Security Training and Certification Network Security Advanced Career Education training and certification program authorized by the Ministry of Industry and Information Technology, training information security engineers capable of security services, operations and management in government and enterprise organizations.

Quantifiable outcome

• AIScanner has discovered 13,735 vulnerabilities for users across 50+ internet clients
• +4 more outcomes

Named customers26 records

Segments6 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability4 records

Feature8 records

Partnerships

Nine partnerships are on record, tiered core and minor.

• People's Bank of China (中国人民银行)coreTechnology or Integration · 1 April 2015AISEC was selected as the winning supplier for the PBOC WEB Full Traffic Mirror Analysis System procurement project. AISEC's WebIDS product was deployed at the Central Bank's information center to provide security event analysis of internet egress mirrored traffic.
• CNVD/国家计算机网络应急技术处理协调中心 (CNCERT)coreTechnology or Integration · 1 February 2015AISEC became a CNVD (China National Vulnerability Database) technical cooperation unit, established by CNCERT. CNVD coordinates vulnerability information sharing among important information systems, telecom operators, security vendors, and internet companies.
• CNNVD/中国信息安全测评中心coreTechnology or Integration · 1 December 2014AISEC was designated as a CNNVD (China National Vulnerability Database) technical support unit by the China Information Security Evaluation Center. This is a formal government-recognized partnership for vulnerability sharing and coordinated disclosure.
• Industrial and Commercial Bank of China Data Center (工商银行数据中心)minorImplementation/ SI/ Consulting Partner · 1 July 2014AISEC collaborated with ICBC Data Center to provide security training for 70+ technical staff. This training engagement demonstrates AISEC's professional services capability for major financial institutions.
• OWASP China (开放Web应用安全项目-中国)coreStrategic or Co-development Partner · 1 September 2013AISEC is the only authorized CWASP (Certified Web Application Security Professional) training partner in Beijing. OWASP China partnered with AISEC for the CWASP certification program, which covers seven domains of application security technology. AISEC also co-organized the OWASP 2011 Asia Summit.
• 360 (exhibition partnership)minorStrategic or Co-development Partner · 1 September 2013AISEC was invited to exhibit at the 2013 China Internet Security Conference, which was organized by 360 with support from cybersecurity labs, OWASP, and Gartner. This provided visibility and partnership opportunities at China's largest security conference.
• Beijing Forestry University (北京林业大学)minorStrategic or Co-development Partner · 1 May 2013AISEC co-organized the 'AISec Cup' IT Competition with Beijing Forestry University Information College and Beilin Science Park in 2013. The competition attracted nearly 200 teachers and students, covering network technology, cybersecurity, and micro-video categories.
• Tencent Security Emergency Response Center (腾讯安全应急响应中心)coreTechnology or Integration · 1 July 2012AISEC used AIScanner to discover and help Tencent fix multiple online service vulnerabilities, receiving public acknowledgment from Tencent Security Emergency Response Center. This partnership demonstrates AISEC's vulnerability detection capabilities for large internet platforms.
• Microsoft CorporationcoreTechnology or Integration · 1 May 2012AISEC discovered and reported multiple online service vulnerabilities in Microsoft services using AIScanner, helping Microsoft fix vulnerabilities including CVE-2012-0168 referenced in MS12-023. Microsoft publicly acknowledged AISEC's contributions. AISEC continued reporting IE browser and CGI application vulnerabilities in 2012.

Scale indicators8 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• DBAPP Security (Anheng Information): Chinese security vendor focused on web application security, WAF, and application-layer protection. Directly comparable to AISEC's AIWAF and WebIDS offerings for government and enterprise buyers.
• Sangfor Technologies: Listed Chinese IT infrastructure and security vendor with overlapping WAF, NGFW, EDR, and threat-detection product lines. Targets the same large-enterprise and government buyers as AISEC and competes on integrated stack value.
• QiAnXin Technology: China's largest dedicated cybersecurity vendor (formerly 360 Enterprise Security). Competes directly with AISEC in enterprise web application security, IDS/IPS, APT detection, and government/financial sector accounts, but at materially larger scale.
• Venustech: Listed Chinese cybersecurity vendor covering NGFW, IDS/IPS, vulnerability scanning, and security services. Overlaps directly with AISEC's product portfolio and regulated-sector customer base.
• NSFOCUS: Long-established Chinese IDS/IPS, WAF and vulnerability-scanning vendor. Directly comparable on AIScanner-style web vulnerability scanning, NIDS, and government/financial-sector sales motion.

Broad incumbents

• Alibaba Cloud Security: Cloud-provider incumbent offering native WAF, vulnerability scanning and threat detection as integrated cloud services. Listed as an AISEC partner/customer; competes for Chinese enterprise security budgets via cloud-native delivery.
• Qihoo 360 Group: Major Chinese internet-security platform and an AISEC investor. Overlaps with AISEC across consumer and enterprise security but at vastly larger scale and as a broad incumbent rather than AI-vulnerability-scanning specialist.
• Tencent Cloud Security: Cloud-security offering inside Tencent's cloud platform and an AISEC investor. Competes for the same Chinese enterprise workloads through native cloud security rather than AISEC-style appliances.
• Huawei Security: Global ICT incumbent with a substantial cybersecurity portfolio spanning NGFW, IDS/IPS, APT and cloud security. Listed as an AISEC internet customer; comparable technology overlap, very different scale.

Emerging players

• Chaitin Tech: China-based web application security and automated penetration-testing company. Comparable technical positioning (browser-sandbox scanning, vulnerability research) but smaller and more narrowly focused than AISEC.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about AISEC