Korea Internet & Security Agency

What Korea Internet & Security Agency does

Korea Internet & Security Agency (KISA, 한국인터넷진흥원) is South Korea's national cybersecurity regulator and internet development agency, established in 2003 and operating under the Ministry of Science and ICT as a public institution headquartered in Naju with regional offices in Seoul and Pangyo. It serves as the country's authoritative body for incident response (via KrCERT/CC), .kr domain registration, biometric and cryptomodule certification, spam regulation, and information protection policy. KISA serves four primary constituencies: South Korean citizens (via the 24/7 118 hotline and outreach), small and medium enterprises (89.4% of ransomware victims in Korea per KISA data), critical-infrastructure companies (a vulnerability management center monitoring approximately 1,200 major firms), and government agencies (the National Network Security Framework deployment).

The agency's core technology stack includes 24/7 cyber incident response platforms, AI-powered vulnerability management and abnormal-behavior detection, distributed denial-of-service defense, biometric certification (facial and palm vein), post-quantum cryptography pilots, mobile electronic document infrastructure, a Cybersecurity Big Data Center, and AI-enabled spam/smishing blocking. KISA operates KISA Academy (K-Shield, White Hat School training 420 professionals per cohort, BoB, practical cyber ranges), 16 regional information protection support centers, an Illegal Spam Response Center, the WHOIS and KRWHOIS OpenAPI services, and the Smart City Security Living Labs (autonomous driving, digital healthcare, smart manufacturing).

KISA's business model is non-commercial: it is funded entirely by annual appropriations from the Ministry of Science and ICT, with services delivered free of charge or as heavily subsidized programs (Technology Guardian Service, seven SME cybersecurity support programs, 4B-won software supply chain fund, 12B-won New Information Security Technology Programme, 45B-won N2SF deployment). Go-to-market is direct-to-government and direct-to-citizen, with no sales motion, paid tiers, or revenue generation. International expansion includes APIGA (co-operated with ICANN, 422 graduates from 32 countries), a $25.6M Philippines ODA cybersecurity center project (2026–2029), and Korea-Indonesia partnership activities involving 10 Korean security vendors.

Name

Korea Internet & Security Agency

Legal name

한국인터넷진흥원 (Korea Internet & Security Agency)

Website

https://kisa.or.kr

Company type

Private

Founded year

2003

Operating status

Operating

Headcount range

501–1,000 employees

Short description

Korea Internet & Security Agency (KISA) is South Korea's national cybersecurity regulator under the Ministry of Science and ICT, delivering 24/7 incident response, AI-powered vulnerability management for 1,200+ critical companies, .kr domain administration, biometric certification, and SME cybersecurity services via 16 regional centers and partnerships with OpenAI and Anthropic.

Ownership category

akta.pro rank

Product category

National Cybersecurity Services

NAICS

National Security (928110), Security Systems Services (56162), Investigation and Security Services (5616)

akta.pro primary industry

Cybersecurity Architecture & Security Integration (BPAEAAAL)

akta.pro secondary industries

Security Awareness, Training & Compliance Attestation (HDADAIAJ), Vulnerability Management, Pen Testing & Attack Surface Management (ASM) (HLACAJAN), Cybersecurity (General) (EDAOAIAB), Penetration Testing, Red Team & Ethical Hacking (EDAOAIAH)

Keywords

• National cybersecurity services
• Cyber incident response
• Internet address management
• Biometric certification programs
• Information protection consulting

Headquarters

HQ city

Naju

HQ country

South Korea

HQ region

Asia

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales

Revenue model

1. Government Budget Allocation: KISA operates as a South Korean public institution funded by the national budget. It receives annual appropriations from the Ministry of Science and ICT for cybersecurity infrastructure, SME support programs, incident response, and talent development. No commercial revenue model applies.

Pricing tiers

Go-to-market motion1 record

Distribution channels5 records

Marketing channels8 records

Core offering

KISA operates South Korea's national cybersecurity infrastructure, providing 24/7 cyber incident response via KrCERT/CC, free cybersecurity support programs for SMEs (including security investment guides, attack surface checks, software supply chain diagnostics, penetration testing, and the Technology Guardian Service), WHOIS and .kr domain administration, illegal spam reporting and blocking, biometric (palm vein, facial) certification for the financial sector, AI-powered vulnerability management for approximately 1,200 critical-industry companies, and cybersecurity talent development through KISA Academy (K-Shield, White Hat School, BoB). The agency coordinates the National Network Security Framework (N2SF), runs the post-quantum cryptography pilot for finance, and delivers the APIGA internet governance program across 32 countries in partnership with ICANN.

Product overview

Korea Internet & Security Agency (KISA) operates as a comprehensive cybersecurity and digital trust agency offering multiple integrated services and programs. The portfolio includes the KISA Academy platform for cybersecurity talent development (featuring K-Shield certifications, White Hat School, and practical cyber training ranges), the 118 Emergency Response Center for 24/7 incident reporting, Local Information Protection Centers across 16 regions, WHOIS and domain services, Illegal Spam Response Center, blockchain trust infrastructure (K-BTF), National Network Security Framework (N2SF), AI security programs, and mobile electronic document services. The agency also provides information protection consulting and SECaaS for SMEs, cryptomodule verification, cybersecurity big data analytics, physical AI security certification, and the APIGA internet governance training program. These offerings work together to provide end-to-end cybersecurity coverage from education and prevention through incident response and international cooperation.

Differentiator

Problem solved

Functional benefit

Brands

• KISA 118 / 118 상담 서비스: KISA's 24/7 cybersecurity hotline service providing hacking, spam, and personal information breach consultation to the public.
• KISA 아카데미 (KISA Academy)
• 지역정보보호센터 (Regional Information Protection Support Centers)
• 불법스팸대응센터 (Illegal Spam Response Center)
• KISA WHOIS

Products and services

• 118 Emergency Response Center 24/7 nationwide emergency hotline for cyber incidents, spam, and personal information breaches with phone counseling, text ARS, chat counseling, and chatbot services. Serves South Korean citizens reporting hacking, voice phishing, smishing, personal data breaches, and spam messages.
• KrCERT/CC (Korea Computer Emergency Response Team/Coordination Center) Standing national cyber incident response and coordination capability under KISA, operating 24/7 to coordinate detection, analysis, and response to major cyber incidents in South Korea and provide hand-on support to victim enterprises.
• Local Information Protection Support Centers (16 regional centers) Network of 16 regional information protection support centers across South Korea (Gyeonggi, Incheon, Gangwon, Chungbuk, Chungnam, Daejeon, Sejong, Jeonbuk, Jeonnam, Gwangju, Gyeongnam, Busan, Daegu, Ulsan, Gyeongbuk, Jeju) providing local SMEs with free cybersecurity consulting, SECaaS cloud security services, and vulnerability assessments.
• KISA Academy (Korea Internet & Security Agency Academy) Comprehensive cybersecurity professional training and certification platform operated by KISA, offering K-Shield certification courses, White Hat School talent development, BoB (Best of the Best) program, AI Security Control training, and hands-on cyber training ranges. Located at the Pangyo Education Center in the Creative Economy Valley.
• Information Protection Consulting & SECaaS Security consulting and cloud-based Security-as-a-Service (SECaaS) offerings for SMEs, including security solution packages and ransomware response consulting, delivered largely through the 16 regional information protection support centers.
• WHOIS Service (.kr) Domain name registration information lookup service for .kr with OpenAPI programmatic access, supporting domain availability checks, IP address and AS number queries, domain registration confirmation, information protection settings, and authentication code lookup. Functions as South Korea's national internet address management service.
• Illegal Spam Response Center National center for receiving, processing, and responding to illegal spam reports and violations, providing SPF (Sender Policy Framework) mail-server registration, smishing confirmation, and AI-based malicious message blocking for South Korean users.
• Seven Free Cybersecurity Support Programs for SMEs Bundle of seven free cybersecurity support programs targeting SMEs with insufficient security conditions: security investment guides, attack surface checks, software supply chain diagnostics, AI vulnerability testing, penetration testing, and security vulnerability checks. Co-delivered by the Ministry of Science and ICT and KISA.
• Technology Guardian Service (Article 18, Technology Protection Act) 24/7 cybersecurity monitoring and software support service for SMEs lacking dedicated cybersecurity personnel, providing free monitoring and software support for three years. After the free period, the Ministry of SMEs and Startups provides up to 8.8 million won per company for ongoing security activities.
• New Information Security Technology Support Programme 2026 Funding and commercialization support program distributing 12 billion won ($8.3 million) to 50 companies for 18 projects across four next-generation security domains: AI-based security product commercialization, AI security company development, Korean-model integrated security, and zero-trust adoption.
• AI Security Promising Company Fostering Programme KISA-led program supporting the development and commercialization of AI-based security products, including funding for agentic AI platforms for Autonomous Security Operations Centers (SOC) where multiple AI agents collaborate on detection, analysis, and response tasks.
• National Network Security Framework (N2SF) Deployment Support Programme Security framework for government and public institutions that classifies information into confidential, sensitive, or public categories with differentiated security levels, replacing the previous mandatory network separation policy. 45 billion won deployment support programme channels funding through six consortiums of public agencies (Climate/Energy Ministry-KDN, Gender Equality Ministry, Korea Post, Korea Expressway Corporation, Korea Real Estate Agency, Korea Research Foundation) paired with domestic security vendors.
• Post-Quantum Cryptography (PQC) Pilot Transition Project 2026 Pilot project in the finance sector to conduct real-world validation of migrating financial institutions from traditional RSA and ECC cryptography to PQC-based architecture. H Card selected as the first participating financial institution; BlockS conducting the validation work.
• Biometric Certification Program (palm vein / facial) National certification program for biometric technologies including facial recognition and palm vein biometrics, providing domestic assurance of technology effectiveness, particularly for authentication in the financial sector.
• AI-Powered Vulnerability Management Center Government-operated AI-powered vulnerability management center monitoring approximately 1,200 major companies in critical industries, established under the AI-powered emergency system within the Office of National Security. KISA-operating platform for AI-driven vulnerability detection and proactive threat response.
• Cybersecurity Big Data Center Platform for analyzing and monitoring cybersecurity threats and trends, including ransomware dynamics, cyber threat intelligence, and spam distribution statistics. Accessible via the Boho website (boho.or.kr) and supports web-server log analysis and anomaly detection.
• Cryptomodule Verification Service Verification service ensuring safety and implementation suitability of cryptomodules used in information protection products deployed in government networks, accompanied by professional education programs for cryptographic module developers.
• Blockchain Trust Infrastructure (K-BTF) Blockchain industry activation program supporting blockchain service discovery and diffusion in South Korea with approximately 3 billion KRW in annual support funding.
• APIGA (Asia-Pacific Internet Governance Academy) Joint internet governance training program co-operated by KISA and ICANN since 2016 for the Asia-Pacific region, with 422 graduates from 32 countries and local APIGA programs operating in 10 Asia-Pacific countries. The 'APIGA+10' task force (Busan, July 2026) is transforming the program into a global internet governance talent development program.
• My Data Service (온마이데이터) Personal data management platform enabling South Korean citizens to view and control their personal information across multiple service providers, supported by KISA-run awareness events promoting usage and personal information autonomy.
• Smart City Security Living Lab Testing and certification facility for smart city technologies, including autonomous-driving security and digital healthcare security solutions, operated by KISA as part of its digital trust infrastructure.
• Physical AI Security Certification Program Program developing security standards and industry-specific protection models for physical AI systems, addressing cyberattacks on physical AI that could cause equipment malfunctions and production shutdowns across the manufacturing, healthcare, and mobility sectors.

Quantifiable outcome

• 89.4% of ransomware attack reports in South Korea targeted SMEs and mid-sized companies last year
• +7 more outcomes

Named customers8 records

Segments4 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

AI capability11 records

Feature8 records

Partnerships

24 partnerships are on record, tiered core, minor and flagship.

• Korea International Cooperation Agency (KOICA)coreStrategic or Co-development Partner · 22 June 2026KISA was selected as the implementing organization for KOICA's Philippines Cyber Crisis Response Capacity Building project. The $25.6 million ODA program runs from second half 2026 through 2029 (4 years) to help build the Philippines National Cyber Security Center and develop cybersecurity professionals.
• Airkey Co., Ltd. (주식회사 에어키)coreStrategic or Co-development Partner · 22 June 2026Airkey participated in the consortium led by KISA for the Philippines National Cyber Security Center construction and professional development project. Consortium includes Piolink and Korea Telecom Internet Technology.
• Piolink Co., Ltd. (주식회사 파이오링크)coreStrategic or Co-development Partner · 22 June 2026Piolink participated in the consortium led by KISA for the Philippines National Cyber Security Center construction and professional development project, contributing network security technology expertise.
• Korea Telecom Internet Technology (한국통신인터넷기술)coreStrategic or Co-development Partner · 22 June 2026Participated in the KISA-led consortium for the Philippines cyber crisis response capacity building, contributing telecommunications and internet security technology.
• Six Consortiums (Public-Sector and Domestic Cybersecurity Companies)coreStrategic or Co-development Partner · 19 June 2026KISA selected six consortiums comprising public-sector organizations and domestic cybersecurity companies for the 2026 National Network Security Framework (N2SF) deployment support programme. Consortiums include climate/energy ministry-KDN, Gender Equality Ministry, Korea Post, Korea Expressway Corporation, Korea Real Estate Agency, and Korea Research Foundation with security companies.
• International Patent Barun (국제특허 바른)minorOthers · 18 June 2026KISA signed an MOU with four patent law firms and one domain registrar to protect corporate online brands. Partners include International Patent Barun, Lea&mo Partners, Patent Law Firm Loud, Patent Law Firm Seongam, and Whois (주식회사 후이즈), collaborating on domain name dispute resolution and trademark protection.
• Lea&mo Partners (리앤목 특허법인)minorOthers · 18 June 2026KISA partnered with Lea&mo Partners for K-brand protection, focusing on domain name dispute resolution and trademark protection in the online environment.
• Patent Law Firm Loud (특허법인 라우드)minorOthers · 18 June 2026KISA partnered with Patent Law Firm Loud for K-brand protection, focusing on domain name dispute resolution and trademark protection in the online environment.
• Patent Law Firm Seongam (특허법인 성암)minorOthers · 18 June 2026KISA partnered with Patent Law Firm Seongam for K-brand protection, focusing on domain name dispute resolution and trademark protection in the online environment.
• Whois (주식회사 후이즈)minorOthers · 18 June 2026KISA partnered with domain name registrar Whois for K-brand protection, focusing on domain name dispute resolution and trademark protection in the online environment.
• Asia-Pacific Internet Governance Academy (APIGA) PartnerscoreStrategic or Co-development Partner · 10 June 2026KISA and ICANN co-operate APIGA since 2016, which has trained 422 graduates from 32 countries. Local APIGA programs now operate in 10 Asia-Pacific countries. An 'APIGA+10' task force is being established in July 2026 in Busan to transform APIGA into a global internet governance talent development program.
• United Nations Internet Governance Forum (IGF) Multistakeholder Advisory GroupminorStrategic or Co-development Partner · 9 June 2026Met with UN IGF Multistakeholder Advisory Group chair at ICANN meeting to discuss APIGA development and expand internet governance cooperation globally.
• DotAsia (닷아시아)coreStrategic or Co-development Partner · 8 June 2026KISA and DotAsia signed an MOU at the 86th ICANN meeting to cultivate internet governance talent for the Asia-Pacific region. DotAsia manages the .asia ccTLD, hosts the Asia-Pacific Internet Governance Forum, and supports youth capacity building education.
• ICANN (International Corporation of Assigned Names and Numbers)coreStrategic or Co-development Partner · 8 June 2026KISA co-operates the Asia-Pacific Internet Governance Academy (APIGA) with ICANN since 2016. At the 86th ICANN meeting, KISA shared APIGA's 10-year achievements and discussed plans to expand APIGA into a global program with an 'APIGA+10' task force.
• APTLD (Asia Pacific Domain Name System Regional Internet Registry)minorStrategic or Co-development Partner · 8 June 2026KISA met with APTLD secretariat and other regional internet policy organizations at the ICANN meeting to discuss APIGA development and promote participation in the APIGA+10 task force.
• Japan Network Information Center (JPNIC)minorStrategic or Co-development Partner · 8 June 2026Met with JPNIC at ICANN meeting to discuss APIGA development and cooperation in internet governance education for the Asia-Pacific region.
• Vietnam Internet Network Information Center (VNNIC)minorStrategic or Co-development Partner · 8 June 2026Met with VNNIC at ICANN meeting to discuss APIGA development and regional internet governance cooperation.
• Taiwan Network Information Center (TWNIC)minorStrategic or Co-development Partner · 8 June 2026Met with TWNIC at ICANN meeting to discuss APIGA development and cooperation in internet governance education.
• Indonesia Communications and Information Technology Association (Kominfo)coreStrategic or Co-development Partner · 4 June 2026KISA co-hosted the '2026 AI Era Korea-Indonesia Information Protection Partnership Day' with Indonesian communication association, attended by 120+ Indonesian officials and business representatives. Seminar covered telecom and financial cybersecurity policies, and 10 Korean security companies conducted 1:1 business meetings with Indonesian organizations.
• 10 Korean Information Security Companies (Korea-Indonesia Partnership)coreStrategic or Co-development Partner · 4 June 2026Participating companies in the Korea-Indonesia Information Protection Partnership Day included Piolink, Raon S+ecure, NPCORE, WinningI, LSWARE (telecom sector) and QuadMiner, MarkAny, Eagle Corp, PNSecure, WIZCORE (financial sector), engaging in seminars and 1:1 business meetings with Indonesian organizations.
• AnthropicflagshipTechnology or Integration · 3 June 2026Korea joined Anthropic's Project Glasswing through KISA, gaining access to the Claude Mythos AI model for expert-level vulnerability detection. The initiative expanded to approximately 150 organizations across 15 countries. Samsung Electronics, SK hynix, and SK Telecom were expected to join as new partners, having previously participated in Anthropic's Series H funding round.
• Ministry of Science and ICTcoreStrategic or Co-development Partner · 29 May 2026At the 9th science and technology ministers meeting, KISA and the ministry announced measures to strengthen private sector cybersecurity response systems, including establishing an AI-powered emergency system under the Office of National Security and a vulnerability management center under KISA monitoring 1,200 major companies.
• OpenAI (Digital Defense Partnership)flagshipTechnology or Integration · 29 May 2026Korea announced expanded cooperation with OpenAI for digital defense response and information sharing as part of its cybersecurity system transformation plan, leveraging homegrown AI technologies starting in 2027.
• OpenAIflagshipTechnology or Integration · 27 May 2026South Korea became the first Asian country alongside Japan to join OpenAI's Daybreak cybersecurity initiative under the Governmental Trusted Access for Cyber (GTAC) program. KISA oversees the program's implementation, granting Korean institutions access to advanced AI models including GPT-5.5-Cyber for defensive cybersecurity purposes. OpenAI plans to expand access to private companies in key Korean industries.

Scale indicators19 records

Recent moves7 records

Expansion highlights7 records

Direct peers

• Cybersecurity and Infrastructure Security Agency (CISA): CISA is the United States' national cybersecurity regulator and infrastructure protection agency, operating an incident response capability and national vulnerability management programs. It is the most direct functional peer to KISA, sharing the same combination of regulatory authority, CERT coordination, and national critical-infrastructure monitoring.
• European Union Agency for Cybersecurity (ENISA): ENISA is the EU's dedicated cybersecurity agency responsible for supporting member states with incident response preparedness, certification frameworks, and cross-border cooperation. Comparable to KISA's role as Korea's central cybersecurity coordinator under the Ministry of Science and ICT.
• JPCERT Coordination Center (JPCERT/CC): JPCERT/CC is Japan's national computer emergency response team and a leading CERT in the Asia-Pacific region. It mirrors KISA's KrCERT/CC function, providing incident handling, vulnerability disclosure coordination, and inter-agency cooperation.
• National Cyber Security Centre (NCSC-UK): The UK's NCSC is a government authority providing authoritative cyber incident response, technical guidance, and certification for critical sectors. Comparable to KISA in regulatory breadth, public-facing 24/7 incident reporting, and close coordination with major private-sector entities.
• Bundesamt für Sicherheit in der Informationstechnik (BSI Germany): BSI is Germany's federal cybersecurity authority and KISA's bilateral counterpart under the 2024 mutual recognition arrangement for IT security labels (the BSI IT Security Label program now applied to Samsung products). Comparable in regulatory scope, certification authority, and international cooperation mandate.
• CERT-In (Indian Computer Emergency Response Team): CERT-In is India's national CERT under the Ministry of Electronics and IT, responsible for incident response, cybersecurity advisories, and vulnerability handling for critical sectors. Operates a similar mandate to KISA's KrCERT/CC, scaled for a much larger digital economy.
• Cyber Security Agency of Singapore (CSA): CSA is Singapore's national cybersecurity agency overseeing national cyberdefense, critical-infrastructure protection, and ecosystem development - functionally equivalent to KISA across regulatory authority and talent development.
• CNCERT/CC (National Computer Network Emergency Response Technical Team, China): CNCERT/CC is China's national CERT coordinating incident response, vulnerability disclosure, and international cooperation. Geopolitically distinct but operationally the closest functional peer to KISA's KrCERT/CC in scale and national coordination role.
• Australian Signals Directorate / Australian Cyber Security Centre (ACSC): The ACSC sits within the Australian Signals Directorate and provides whole-of-government cyber security services, including incident response and critical-infrastructure engagement. Mirrors KISA's combined regulatory, incident response, and SME outreach posture.

Broad incumbents

• National Institute of Standards and Technology (NIST) Cybersecurity Division: NIST develops cybersecurity standards, frameworks (CSF, NICE), and cryptographic guidelines (including the post-quantum cryptography standards KISA is piloting) used globally. It is a broader standards-setting peer to KISA's cybersecurity architecture and certification work, particularly the cryptomodule verification service.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat6 records

Key risks5 records

Key highlights6 records

Customer concentration

• YouTubeyoutube.com/user/KISA118
• Facebookfacebook.com/kisa118
• LinkedInlinkedin.com/company/korea-information-security-agency
• Instagraminstagram.com/kisa118_

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Subsidiaries16 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments2 records

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Korea Internet & Security Agency