Penta Security Systems
Penta Security Systems is a Seoul-based cybersecurity vendor founded in 1997, providing web application firewall (WAPPLES, Cloudbric), data encryption (D.AMO with post-quantum cryptography), and passwordless authentication (iSIGN) to enterprises, governments, and financial institutions globally.
- Company typePrivate
- Founded1997
- HeadquartersSeoul, South Korea
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What Penta Security Systems does
Penta Security Systems (Penta Security Inc.) is a Seoul-headquartered cybersecurity vendor founded in 1997 by Seokwoo Lee, operating across three product pillars: web application and API protection (WAPPLES and the Cloudbric cloud platform including Cloudbric WAF+, Cloudbric Managed Rules, and Cloudbric WMS), data encryption and key management (D.AMO with KMS and Control Center modules, plus MyDiamo), and unified authentication (iSIGN). The company's core technical differentiator is the proprietary COCEPTM detection engine, which uses AI-based logical rules rather than signature lists to identify web attacks; the engine has been independently validated by the Tolly Group at a 91.53% true-positive rate. D.AMO additionally incorporates Hybrid Post-Quantum Cryptography, making Penta Security the first recipient of the Fortress Cybersecurity Awards 2026 Quantum Security category.
Penta Security monetizes through a mix of one-time licenses (WAPPLES appliance and WAPPLES SA), SaaS subscriptions (Cloudbric, Cloudbric Managed Rules, Cloudbric WMS on AWS Marketplace), and subscription/license for D.AMO and iSIGN. Its primary customer segments are enterprises, government agencies, and financial institutions, with PCI DSS v4.0.1, ISO 27001:2022, ISO 9001:2015, ISO 14001:2015, ICSA, and Common Criteria EAL 4 certifications supporting procurement. WAPPLES is the Korean WAF market leader for 16 consecutive years (since 2009) and the APAC market leader since 2016, protecting 700,000+ websites in 171 countries, while Cloudbric has surpassed 1,100 enterprise customers with 98% overseas.
The company pursues a multi-channel GTM combining AWS Marketplace (one of only eight ISVs globally offering AWS WAF managed rules and an AWS ISV Accelerate participant since March 2024), regional channel partners (RAS Infotech for MENA, PT Prospera for Indonesia), direct enterprise sales, and a dense event and PR cadence. Most recent strategic emphasis is on international expansion via the Beyonders ambassador program (January 2026) and product portfolio extension into authentication (iSIGN Passwordless, 2025) and data masking (Cloudbric Mask, 2025), alongside D.AMO's post-quantum cryptography positioning for the emerging quantum-threat horizon.
Penta Security Systems firmographics
Firmographics- Name
- Penta Security Systems
- Legal name
- Penta Security Inc.
- Website
- https://pentasecurity.com
- Company type
- Private
- Founded year
- 1997
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Penta Security Systems is a Seoul-based cybersecurity vendor founded in 1997, providing web application firewall (WAPPLES, Cloudbric), data encryption (D.AMO with post-quantum cryptography), and passwordless authentication (iSIGN) to enterprises, governments, and financial institutions globally.
- Ownership category
- akta.pro rank
Penta Security Systems industry classification
Industry- Product category
- Cybersecurity Software
- NAICS
- Computer Systems Design and Related Services (5415), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)
- SIC
- Computer Communications Equipment (3576)
- akta.pro primary industry
- Cloud Security Managed Services (CSPM/CWPP/CNAPP) (BPAEADAF)
- akta.pro secondary industry
- Key Management, Encryption & Secrets Management (KMS/HSM/Vault) (HDABAHAG)
Keywords
Where Penta Security Systems is headquartered
LocationHeadquarters
- HQ city
- Seoul
- HQ country
- South Korea
- HQ region
- Asia
Offices3 records
Markets served
Penta Security Systems business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- Cloud Security SaaS (Cloudbric): Cloudbric provides cloud-based security-as-a-service (SECaaS) through subscription plans. Includes Cloudbric Managed Rules (AWS Marketplace subscription), Cloudbric WMS, Cloudbric WAF+ v3.0, and Cloudbric VPN Plus Plan. Revenue grew 156% year-over-year driven by global demand, with 98% of customers overseas.
- Data Security Platform (D.AMO): On-premises and cloud data encryption platform licensed to enterprises for data-at-rest and data-in-transit protection, incorporating post-quantum cryptography and key management systems.
- Web Application Firewall (WAPPLES): WAPPLES and WAPPLES SA are appliance-type and software-based WAF/WAAP solutions sold as licenses. WAPPLES has been the Korean market leader for 16 consecutive years since 2009 and APAC market leader since 2016.
- Authentication Security (iSIGN Passwordless): Unified authentication platform providing OS-level authentication technology with phased implementation, available as subscription or license.
Go-to-market motion4 records
Distribution channels5 records
Marketing channels7 records
Penta Security Systems product offering
Product offeringCore offering
Penta Security Systems develops and sells enterprise cybersecurity products across three domains: web application and API protection (WAPPLES, WAPPLES SA, and the Cloudbric cloud security SaaS platform including Cloudbric WAF+, Cloudbric Managed Rules, and Cloudbric WMS), data encryption (D.AMO platform with KMS and Control Center modules, plus MyDiamo database encryption), and passwordless authentication (iSIGN). The portfolio is delivered as on-premises appliances, cloud SaaS, and AWS Marketplace subscriptions, and targets government agencies, enterprises, and financial institutions needing protection against OWASP Top 10 threats, zero-day attacks, data breaches, and post-quantum cryptography risks.
Product overview
Penta Security Systems offers a comprehensive cybersecurity product portfolio organized across three core technology domains: Web Application Security (WAPPLES, WAPPLES SA, Cloudbric), Data Security (D.AMO platform with KMS and Control Center modules, MyDiamo), and Authentication Security (iSIGN). The Cloudbric cloud security platform serves as a SaaS delivery layer with sub-products including Cloudbric WAF+ (cloud-based WAAP), Cloudbric Managed Rules (AWS WAF integration), and Cloudbric WMS (WAF managed service). The company also provides vertical IoT security solutions for Smart Energy, Smart Factory, and Smart Product Authentication, plus enterprise security solutions including SAP/FPE Security, Unstructured Data Security, and Enterprise Key Management. Products are available as hardware appliances, cloud-based SaaS, and hybrid deployment models.
Differentiator
Problem solved
Functional benefit
Brands
- Cloudbric: Korea's first cloud security SaaS platform offering web application and API protection (WAAP), including Cloudbric WAF+, Cloudbric Managed Rules, and Cloudbric WMS
- WAPPLES
- D.AMO
- iSIGN
- Beyonders
Products and services
- WAPPLES Intelligent Web Application and API Protection (WAAP) solution using proprietary COCEPTM Engine with AI-based logical rules for robust defense against OWASP Top 10 web application security risks and zero-day vulnerabilities with near-zero false positive rates.
- WAPPLES SA Cloud-based Web Application and API Protection (WAAP) service providing the same intelligent threat detection as WAPPLES in a cloud deployment model.
- D.AMO Comprehensive data security platform providing encryption solutions for protecting sensitive data at rest and in transit, supporting enterprise data protection requirements including post-quantum cryptography readiness.
- D.AMO KMS Key Management System as part of the D.AMO data security platform, providing centralized cryptographic key management for enterprise encryption needs.
- D.AMO Control Center Centralized control interface for managing D.AMO encryption policies and monitoring data security across enterprise environments.
- MyDiamo Database encryption solution provided as a separate product/service brand accessible at mydiamo.com for comprehensive database security.
- Cloudbric Korea's first cloud security SaaS platform providing comprehensive Web Application and API Protection (WAAP) including managed rules, bot protection, and DDoS mitigation. Encompasses Cloudbric WAF+, Cloudbric Managed Rules, and Cloudbric WMS.
- Cloudbric WAF+ Cloud-based Web Application and API Protection (WAAP) solution using logic-based A.I detection engine for fully managed security against web threats. Recognized in Gartner Market Guide for Cloud WAAP 2023 and ranked No. 1 in Japan's IT Trend for 7 consecutive years.
- Cloudbric Managed Rules Managed security rule group for AWS WAF delivered through AWS Marketplace, providing pre-configured rules for OWASP Top 10, Malicious IP, API, Bot, Tor IP, Anonymous IP, and Protocol Validity protection. Korea's first and one of only eight ISVs worldwide offering AWS WAF managed rules.
- Cloudbric WMS WAF Managed Service SaaS platform for AWS WAF operations providing customized rule set configuration, real-time monitoring, and intuitive security policy management for enterprises lacking dedicated security personnel.
- iSIGN Unified authentication security platform providing passwordless authentication solutions. OS-level unified authentication technology with phased implementation model that resolves compatibility issues with existing infrastructure.
- Cloudbric Mask
Quantifiable outcome
- Tolly Group validated Cloudbric Rule Set with 91.53% true-positive rate vs. competitor average of 50-68%
- +5 more outcomes
Companies that use Penta Security Systems
Customer profileNamed customers4 records
Segments5 records
Ideal customer profiles4 records
Penta Security Systems technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration3 records
AI capability4 records
Feature4 records
Penta Security Systems partnerships and signals
Strategic signalScale indicators7 records
Recent moves7 records
Expansion highlights6 records
Penta Security Systems competitors and assessment
Company assessmentMarket position
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Penta Security Systems social profiles
Digital presencePenta Security Systems compliance and trust
Trust signalCompliance5 records
Penta Security Systems financial estimates
Financial estimateRevenue estimate
Valuation estimate
Penta Security Systems leadership team
Management profileNumber of profiles
Profiles5 records
Penta Security Systems funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Penta Security Systems M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Penta Security Systems
What does Penta Security Systems do?
Penta Security Systems develops and sells enterprise cybersecurity products across three domains: web application and API protection (WAPPLES, WAPPLES SA, and the Cloudbric cloud security SaaS platform including Cloudbric WAF+, Cloudbric Managed Rules, and Cloudbric WMS), data encryption (D.AMO platform with KMS and Control Center modules, plus MyDiamo database encryption), and passwordless authentication (iSIGN). The portfolio is delivered as on-premises appliances, cloud SaaS, and AWS Marketplace subscriptions, and targets government agencies, enterprises, and financial institutions needing protection against OWASP Top 10 threats, zero-day attacks, data breaches, and post-quantum cryptography risks.
Is Penta Security Systems a public or private company?
Penta Security Systems is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Penta Security Systems founded?
Penta Security Systems was founded in 1997. It employs 101 to 250 people.
Where is Penta Security Systems based?
Penta Security Systems is headquartered in Seoul, South Korea, in the Asia region.
How does Penta Security Systems make money?
Four revenue lines are on record. Cloud Security SaaS (Cloudbric) is the primary driver. The others are data Security Platform (D.AMO), web Application Firewall (WAPPLES) and authentication Security (iSIGN Passwordless).
Does Penta Security Systems have an API?
No public API is recorded for Penta Security Systems.
What industry is Penta Security Systems in?
Penta Security Systems's product category is Cybersecurity Software. Its primary akta.pro industry code is BPAEADAF, Cloud Security Managed Services (CSPM/CWPP/CNAPP), with a secondary code of HDABAHAG, Key Management, Encryption & Secrets Management (KMS/HSM/Vault). Its NAICS code is 5415 and its SIC code is 3576.