NTT Security Holdings.

What NTT Security Holdings. does

NTT Security Holdings Corporation is the cybersecurity-specialized subsidiary of NTT Group (Nippon Telegraph and Telephone), operating primarily through its Japanese operating entity NTT Security Japan, established in March 2013. The company delivers a full-lifecycle managed security services portfolio spanning prediction, diagnosis, protection, detection, response, and recovery, with core offerings including the Aurora endpoint security family (Aurora Protect, Aurora Endpoint Defense, and the newly launched Aurora Managed Endpoint Defense / AMED in partnership with Arctic Wolf), a proprietary SIEM-based MDR service with 24/7 SOC monitoring across IT, OT, and cloud environments, and the SOC in Pocket hardware-appliance service for small and mid-sized businesses. The technology stack combines the company's own SIEM platform and threat analysis engine with third-party AI capabilities, most notably Arctic Wolf's Alpha AI predictive endpoint protection and CyCraft's AI-driven forensic analysis, alongside OT security products from TXOne Networks and threat intelligence from Blackwired's ThirdWatch platform.

The company generates revenue through subscription-based managed security services, project-based professional services (consulting, assessments, incident response), and security hardware/software resale, with quote-based enterprise pricing and a publicly disclosed entry-level price of approximately 100,000 JPY per month for the SOC in Pocket service. Go-to-market is anchored by direct enterprise sales leveraging NTT Group's existing customer relationships, supplemented by channel partners including NTT Bizlink, NTT Business Solutions, and Nikkei Tsugo System for the SMB segment, and NTT DOCOMO Business as a secondary agent for KnowBe4 distribution. The customer base spans large Japanese enterprises and conglomerates, manufacturing verticals (automotive, chemical, industrial) with deep OT security needs, government and critical infrastructure operators, and the SMB segment served through SOC in Pocket, with case studies including NTT Urban Development and JNC Petrochemical. The group also maintains European operations through wholly-owned subsidiaries in Sweden and Norway, and a Cyber Active Defense Research Institute for threat intelligence development.

Name

NTT Security Holdings.

Legal name

NTT Security Holdings Corporation

Website

https://jp.security.ntt

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

501–1,000 employees

Short description

NTT Security Holdings is the cybersecurity subsidiary of NTT Group, providing managed detection and response, endpoint security, OT security, and threat intelligence to Japanese enterprises, manufacturing firms, and SMBs, with additional European operations in Sweden and Norway.

Ownership category

akta.pro rank

Product category

Managed Security Services

NAICS

Security Systems Services (56162), Security Systems Services (except Locksmiths) (561621)

SIC

Computer Peripheral Equipment, Nec (3577)

akta.pro primary industry

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)

akta.pro secondary industries

Remote Access & Privileged Access for OT (ZTA/PAM for Vendors) (HDADAJAG), NTN-Enabled Emergency, Government & Defense Communications (Public Safety, Tactical, Resilience) (HDAIAJAJ)

Keywords

• Managed security services
• Endpoint protection platform
• Threat detection response
• OT security solutions
• Cybersecurity consulting

Headquarters

HQ city

Tokyo

HQ country

Japan

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Services (MSS): Recurring managed security services including MDR (Managed Detection and Response), SOC in Pocket (hardware-based threat monitoring), endpoint security (Aurora Protect, AMED), and OT security services. Delivered as subscription or per-month pricing, often with multi-year contracts. Includes 24/7 monitoring, threat analysis, and incident response capabilities.
2. Security Professional Services (Consulting): Security consulting services including risk assessments, security architecture design, CSIRT building, compliance advisory, and penetration testing. Delivered as project-based or retainer engagements.
3. Security Solution Provision (Equipment and Maintenance): Sale and maintenance of security hardware and software solutions, including OT security products (TXOne Networks), endpoint security platforms (Aurora), and related maintenance contracts.
4. Threat Intelligence Platform (ThirdWatch): Resale of Blackwired's ThirdWatch threat intelligence platform in Japan, providing dark web monitoring, direct threat intelligence, and attack campaign visualization. Delivered as a subscription service.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

NTT Security Holdings provides managed cybersecurity services including Managed Detection and Response (MDR), endpoint protection (Aurora), OT security, and security consulting. The company operates 24/7 SOCs in Japan and Europe, leveraging a proprietary SIEM platform and 20+ years of threat intelligence to deliver proactive cyber defense for enterprises, manufacturing firms, and SMBs.

Product overview

NTT Security Japan offers a comprehensive cybersecurity service portfolio centered on managed security services with proprietary AI-powered detection and response capabilities. The core product family includes Aurora Protect (EPP with predictive AI), Aurora Managed Endpoint Defense (AMED, EPP+EDR with managed SOC), and NTT Security MDR (integrated MDR with proprietary SIEM). Supporting services include SOC in Pocket for SMBs, OT Security services (Assessment Quick, OT-IDS, Health Monitor), and professional services (consulting, incident response, security diagnosis). The company distributes partner products including Blackwired ThirdWatch threat intelligence, TXOne Networks OT security solutions, and KnowBe4 security awareness training. All services leverage NTT Group's 20+ years of cyber threat intelligence and expertise in proactive cyber defense.

Differentiator

Problem solved

Functional benefit

Brands

• Aurora Endpoint Security: Comprehensive endpoint security product line including Aurora Protect (EPP), Aurora Endpoint Defense (EPP+EDR), and Aurora Managed Endpoint Defense/AMED (EPP+EDR+SOC managed). Features Alpha AI for predictive malware blocking.
• SOC in Pocket (セキュリティおまかせBOX)
• ThirdWatch
• Aurora Managed Endpoint Defense (AMED)
• CyCraft

Products and services

• Aurora Protect Endpoint Protection Platform (EPP) using predictive AI (Alpha AI for Endpoint) to block malware before execution. Provides signature-free protection with local AI that works offline in closed environments such as factories, medical, and financial institutions.
• Aurora Managed Endpoint Defense (AMED) Managed endpoint security service combining Aurora EPP+EDR with Arctic Wolf SOC 24x7 monitoring. Implements Prevention First philosophy with AI-based pre-execution blocking to minimize alert noise and reduce IT operator workload.
• NTT Security MDR Managed Detection and Response service with proprietary SIEM platform, 24x7 SOC analyst monitoring, AI-powered threat analysis, and incident response including endpoint isolation. Covers IT, OT, cloud, and network environments with log collection from 70+ sources.
• SOC in Pocket (セキュリティおまかせBOX) Managed security service for small and medium enterprises featuring dedicated hardware appliance, real-time threat detection with NTT's threat analysis engine, incident response support desk, and bundled cyber risk insurance from Tokyo Marine Fire Insurance.
• ThirdWatch Threat Intelligence Platform Threat intelligence platform from Blackwired providing Direct Threat Intelligence (DTI), ARFi attack scenario analysis, evidence-based risk scoring (18 items), enhanced Attack Surface Management (eASM), Third Party Risk Management (TPRM), and Zero Day Live zero-day detection capabilities.
• Security Consulting, Education & Consultation (セキュリティコンサルティング・教育・相談) Professional security consulting services including security strategy development, risk assessment, compliance guidance, and security education programs for organizations.
• Security Management (セキュリティ管理) Security management services including access control, asset management, and security posture building support for organizations.
• Security Diagnosis, Assessment & Investigation (セキュリティ診断・評価・調査) Vulnerability assessment, security testing, and investigation services to identify security weaknesses and recommend remediation measures.
• Security Monitoring & Detection (セキュリティ監視・検知) Continuous network and system monitoring services with real-time threat detection capabilities through security operations center.
• Security Incident Response & Investigation (セキュリティインシデント対応・調査) Incident response and forensic investigation services including rapid response during incidents and prevention of recurrence.
• OT Security (OTセキュリティ) Operational technology security services for factories and industrial control systems including Assessment Quick (1.5-month assessment), OT-IDS implementation support, OT Security Health Monitor, and TXOne Networks product integration.
• Supply Chain Security (サプライチェーンセキュリティ) Risk management services for automotive industry supply chain cybersecurity, supporting compliance with automotive cybersecurity guidelines.
• IoT Product Security (IoTプロダクトセキュリティ) Security services protecting IoT devices from cyber threats, covering product lifecycle security from design to deployment.
• TXOne Networks OT Security Products OT-native security solutions including Element series (asset discovery and integrity), Stellar (endpoint protection), Edge series (network defense), and SageOne (CPS protection platform) for manufacturing and critical infrastructure.
• Arctic Wolf Aurora Endpoint Security Endpoint security platform combining EPP and EDR with Alpha AI for pre-execution malware blocking, memory protection, script control, and behavioral detection. Available in Protect (EPP only), Endpoint Defense (EPP+EDR self-managed), and Managed (full SOC management) tiers.

Quantifiable outcome

• SOC in Pocket can help mid-market companies achieve partial compliance with JAMA/JAPIA Automotive Cybersecurity Guidelines Level 2 requirements
• +2 more outcomes

Named customers2 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration24 records

AI capability11 records

Feature4 records

Partnerships

Twelve partnerships are on record, tiered core and minor.

• Arctic WolfcoreTechnology or Integration · 28 May 2026NTT Security Japan serves as a sales partner for Arctic Wolf's Aurora Managed Endpoint Defense (AMED) and Aurora Protect endpoint security products. The partnership provides Japanese enterprises with Arctic Wolf's AI-driven endpoint protection platform, monitored and managed by NTT Security Japan's security operations team with 24/7 support.
• CyCraft Japan (株式会社 CyCraft Japan)coreStrategic or Co-development Partner · 27 May 2026NTT Security Japan entered a partnership with Taiwan-based CyCraft Japan, an AI automation cybersecurity company. The partnership leverages CyCraft's advanced AI threat analysis and forensic technology to enhance NTT Security Japan's incident analysis precision and responsiveness against sophisticated cyber incidents. Collaboration will expand into MDR service enhancement, AI governance, and supply chain security.
• Tokyo Metropolitan University (東京都公立大学法人)coreStrategic or Co-development Partner · 26 May 2026NTT Security Japan entered a joint research agreement with Tokyo Metropolitan University to research attack infrastructure analysis technology for social engineering attack countermeasures. The collaboration combines NTT Security Japan's threat intelligence with the university's academic expertise to advance collection and analysis of attack infrastructure information used in phishing and fraud attacks.
• KnowBe4coreChannel Partner/ Reseller/ Distributor · 20 April 2026NTT Security Japan entered a sales agent agreement with KnowBe4 (US-based human risk management platform) to provide security awareness training and phishing email simulation services. NTT DOCOMO Business serves as a secondary agent. The partnership leverages NTT Group's enterprise customer network to promote KnowBe4's HRM+ platform in Japan.
• TXOne NetworkscoreChannel Partner/ Reseller/ Distributor · 14 April 2026NTT Security Japan entered a partner agreement with TXOne Networks (Taiwan) to sell their OT-specific cybersecurity solutions including Element (security inspection), Stellar (endpoint protection), Edge (network defense), and SageOne (CPS protection platform) product lines. The partnership strengthens NTT Security Japan's OT security lineup for manufacturing and critical infrastructure customers in Japan.
• BunkyoWesterns (CTF Team)minorStrategic or Co-development Partner · 10 March 2026NTT Security Japan entered a sponsorship agreement with BunkyoWesterns, a top Japanese CTF (Capture The Flag) team ranked #1 in Japan and #9 globally on CTFTime 2025. The sponsorship supports Japanese young security engineers' participation in international competitions, with NTT Security Japan engineers potentially providing supplementary support at finals. Knowledge gained will be applied to improve NTT Security Japan's services.
• BlackwiredcoreTechnology or Integration · 3 March 2026NTT Security Japan signed its first Japan partnership with Blackwired (Singapore) to resell the ThirdWatch threat intelligence platform. ThirdWatch provides curated threat intelligence and 3D visualization for identifying malicious activity earlier in attack lifecycles. NTT Security Japan integrates ThirdWatch into its security operations and managed security services for organizations across Japan, targeting public sector entities, critical infrastructure operators, and large enterprises.
• Proofpoint Japan (日本プルーフポイント株式会社)coreStrategic or Co-development Partner · 31 January 2026NTT Security Japan and Proofpoint Japan co-established a cybersecurity knowledge portal site for executives on the NTT Security Japan website. The portal provides concise, practical cybersecurity knowledge for business leaders including video content on cyber risks, phishing awareness, and a quick security self-diagnosis tool. Proofpoint contributes its email security intelligence while NTT Security Japan provides broader cybersecurity expertise.
• NTT Bizlink (NTTビズリンク株式会社)coreChannel Partner/ Reseller/ Distributor · 9 July 2025NTT Security Japan signed a sales partner agreement with NTT Bizlink to distribute the 'SOC in Pocket ~ Security Okasane BOX ~' service. NTT Bizlink leverages its advanced integrated operations monitoring solution capabilities to sell the service to a broader range of enterprise customers, particularly SMB and mid-market companies.
• NTT Business Solutions (NTTビジネスソリューションズ株式会社)coreChannel Partner/ Reseller/ DistributorListed as an official sales partner for SOC in Pocket ~ Security Okasane BOX ~ service. NTT Business Solutions distributes the SMB-focused security monitoring service to its customer base.
• Nikkei Tsugo System (株式会社 日経統合システム)coreChannel Partner/ Reseller/ DistributorListed as an official sales partner for SOC in Pocket ~ Security Okasane BOX ~ service. Nikkei Tsugo System distributes the SMB-focused security monitoring service to its customer base.
• TXOne Networks Japan (TXOne Networks Japan合同会社)coreTechnology or IntegrationTXOne Networks Japan serves as the Japanese subsidiary for TXOne Networks OT security products. Partnered with NTT Security Japan for joint seminars on automotive industry cybersecurity guidelines.

Scale indicators4 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Trend Micro: Japanese-headquartered global cybersecurity vendor with strong MSS/MDR practice and endpoint security products, directly competing with NTT Security Japan for Japanese enterprise and government accounts.
• Fujitsu: Major Japanese IT services conglomerate offering managed security services, SOC operations, and consulting that overlap NTT Security Japan's full-stack MSS and consulting portfolio.
• NEC Corporation: NEC provides enterprise cybersecurity services, SOC monitoring, and OT/IoT security in Japan, competing head-to-head with NTT Security Japan across manufacturing and government verticals.
• LAC Co., Ltd. Japanese pure-play cybersecurity firm offering MSS, SOC, and incident response services with similar customer segments to NTT Security Japan across enterprise and SMB.
• Secureworks: Global pure-play MSSP/MDR provider offering managed detection, incident response, and vulnerability management analogous to NTT Security's MDR and Aurora AMED services.
• Trustwave: Global MSSP providing MDR, SOC, consulting, and database/OT security services comparable to NTT Security Japan's full-stack managed security portfolio.

Emerging players

• Arctic Wolf: North American MDR leader whose Aurora platform underpins NTT Security Japan's AMED offering; competes indirectly in Japan via direct enterprise sales while supplying NTT Security's stack.
• eSentire: MDR-focused pure-play offering 24/7 managed detection and response services that compete with NTT Security Japan's MDR and Aurora AMED offerings in mid-market and enterprise.

Broad incumbents

• IBM Security: Global incumbent offering MSS, MDR, and consulting services with comparable enterprise customer base and overlapping SOC and OT security capabilities.
• CrowdStrike: Endpoint and MDR platform vendor whose Falcon offering is integrated by NTT Security Japan for log collection; competes for the same large enterprise endpoint and SOC budget.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/NTTSH_JP
• LinkedInlinkedin.com/company/ntt-security-holdings

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Subsidiaries3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about NTT Security Holdings.