Name

Mitsui Bussan Secure Directions

Legal name

Mitsui Bussan Secure Directions, Inc. (三井物産セキュア-direクション株式会社)

Website

https://mbsd.jp

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

251–500 employees

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Facilities Management Services (541513), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)

akta.pro primary industry

Remote Monitoring & Management (RMM) Services (BPAEABAA)

akta.pro secondary industries

Data Access Governance & Entitlement Management (DSPM / CIEM-for-Data) (HDADAFAG), Identity Threat Detection & Response (ITDR) (HDAEAJAH)

Keywords

• Cybersecurity services
• Managed security services
• Incident response
• Vulnerability assessment
• Penetration testing

Headquarters

HQ city

Nihombashi-hamacho

HQ country

Japan

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Security Consulting Services: Advisory services including CSIRT organization design, security strategy development, shift-left/DevSecOps support, cyber BCP, risk assessment, OT security, cloud security, AI security, and security policy formulation.
2. Security Monitoring Services (MSS): Managed security monitoring services including log aggregation, Advanced SOC (ASOC), and dark web monitoring.
3. Security Assessment Services: Vulnerability diagnostics including web application testing (4,300+ sites), network testing (3,200+ cases), smartphone app testing (500+ cases), penetration testing, TLPT, IoT testing, AD security baseline checks, and DevSecOps assessments.
4. Security Training and Education: Security education programs, targeted email training services, and AI security education.
5. Security Products and Solutions: Proprietary and integrated products including CAAV, MGSP, SecurityScorecard integration, DSPM, and AI security solutions.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels7 records

Core offering

MBSD is a Japanese cybersecurity professional services firm delivering prevention, detection, and response capabilities including security consulting, managed security monitoring, vulnerability assessment, penetration testing, incident response, and specialized AI security services. The firm supplements its services with proprietary platforms (MGSP, CAAV, ai-trism) and co-operates the AI Security Portal with Japan's Ministry of Internal Affairs and Communications. Its client base spans large Japanese enterprises and government agencies.

Product overview

Mitsui Bussan Secure Directions (MBSD) operates as a cybersecurity services company offering integrated security solutions through multiple service lines and proprietary products. The core offerings include Security Force (incident response and threat monitoring), ASOC (advanced security operations center with integrated log monitoring), and MSS (managed security services). The company provides specialized AI security services through AI TRiSM addressing generative AI risks. MBSD's product portfolio includes proprietary platforms such as MGSP (MBSD Global Security Platform) for integrated security management and CAAV (Continuous Assessment of Asset and Vulnerability) for ongoing vulnerability evaluation, complemented by services like DSPM and SecurityScorecard integration support. The AI Security Portal serves as a knowledge resource for AI attack and defense techniques.

Differentiator

Problem solved

Functional benefit

Brands

• MBSD-SIRT: MBSD Security Incident Response Team - cybersecurity incident response services
• MBSD-SOC
• AI TRiSM
• MGSP (MBSD Global Security Platform)

Products and services

• Security Force Incident response support and incident response retainer (IR Retainer) services, including fraud transaction detection, dark web monitoring, and technical incident response delivered by MBSD-SIRT. Targeted at organizations requiring rapid, specialized response to active cybersecurity incidents.
• ASOC (Advanced Security Operations Center) Integrated log monitoring and Advanced SOC services including log environment construction support for organizations that need 24/7 expert-led detection and analysis across their IT environment.
• Security Monitoring Service (MSS) Continuous managed security monitoring services for organizational IT infrastructure, complementing ASOC's advanced detection function.
• AI TRiSM (AI Trust, Risk, Security Management) Specialized security services for generative AI and AI systems, addressing AI TRiSM requirements including model tampering, data poisoning, AI governance, and overall AI risk management. Targeted at organizations deploying generative AI systems.
• Security Consulting Services Comprehensive cybersecurity consulting including risk assessment, BCP/BCM, security organization (CSIRT) support, security strategy formulation, and ThinkTank consulting. Targeted at enterprises and public sector organizations needing strategic security guidance.
• Security Education Services Security training programs and targeted email (spear-phishing mail) training services for organizational security awareness and human factor defense.
• Security Assessment Services Vulnerability diagnostic services including web application, network, smartphone application, penetration testing, TLPT, IoT testing, hardening support, Active Directory security baseline check, DevSecOps, and shift-left design review/advisory. Targeted at organizations needing to identify and remediate security weaknesses.
• CAAV (Continuous Assessment of Asset and Vulnerability) MBSD's proprietary platform for continuous asset and vulnerability assessment, providing ongoing security evaluation across organizational environments.
• MGSP (MBSD Global Security Platform) MBSD's proprietary global security platform providing integrated security management and monitoring capabilities across organizational environments.
• SecurityScorecard Implementation Support Implementation and operational support for the SecurityScorecard platform, supporting security rating and third-party risk management for organizations adopting supply chain security programs.
• DSPM (Data Security Posture Management) Data Security Posture Management implementation support services, helping organizations discover, classify, and protect sensitive data across their environments.
• AI Security Portal Information portal co-operated with Japan's Ministry of Internal Affairs and Communications (総務省), providing AI Security Matrix-structured content on AI attack and defense techniques including adversarial examples, data poisoning, model contamination, data theft, model theft, and corresponding defense methods.
• MBSD-SIRT Security Incident Response Team (SIRT) providing technical analysis, C&C server lists, threat intelligence, and incident response support, also coordinating with international takedown operations.
• AI Security Services Specialized AI security services including AI security assessments against AI systems, AI security advisory, and AI security education. Targets organizations deploying AI/ML systems that need to assess and mitigate AI-specific attack vectors.

Quantifiable outcome

• Over 8,000 vulnerability assessments delivered from April 2017 to March 2024, including 4,300+ web application tests across 185,000+ requests and 3,200+ network assessments across 8,000+ IPs
• +2 more outcomes

Named customers4 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability7 records

Feature5 records

Partnerships

Ten partnerships are on record, tiered core and minor.

• Microsoft Digital Crimes UnitcoreStrategic or Co-development Partner · 24 June 2026MBSD participated as the only Japanese company in Microsoft's coordinated global takedown operation of the Amadey botnet and Stealc infostealer. The operation targeted all known command-and-control server infrastructure, with MBSD contributing technical analysis, C&C server lists, encryption keys, and three years of threat intelligence tracking both malware families.
• ESET ResearchcoreStrategic or Co-development Partner · 24 June 2026ESET contributed technical analysis, C&C server lists, encryption keys, and three years of threat intelligence to the coordinated Amadey/Stealc takedown operation led by Microsoft.
• BitSightcoreTechnology or Integration · 24 June 2026BitSight participated in the coordinated takedown operation of the Amadey botnet and Stealc infostealer led by Microsoft, contributing to the disruption of cybercrime-as-a-service platforms.
• Lumen TechnologiescoreTechnology or Integration · 24 June 2026Lumen Technologies participated in the coordinated takedown operation targeting the Amadey botnet and Stealc infostealer infrastructure.
• Europol EC3coreStrategic or Co-development Partner · 24 June 2026Europol's European Cybercrime Centre (EC3) coordinated the law enforcement investigation alongside the Microsoft-led industry operation (Operation Endgame) targeting the Amadey botnet and Stealc infostealer.
• 総務省 (Ministry of Internal Affairs and Communications)coreStrategic or Co-development PartnerMBSD co-operates the AI Security Portal (AIセキュリティ情報発信ポータル) with 総務省 as part of the ministry's project to organize and disseminate technical information on security challenges in 5G terminals and related AI systems. The portal provides structured AI attack/defense knowledge including the AI Security Matrix.
• 情報処理推進機構 (IPA)minorStrategic or Co-development PartnerMBSD conducted penetration testing surveys on security measure status for IPA, contributing to national cybersecurity assessment efforts.
• 防衛省 (Ministry of Defense)minorStrategic or Co-development PartnerMBSD provides technical support services in the cyber domain for Japan's Ministry of Defense.
• 日本原子力研究開発機構 (Japan Atomic Energy Agency)minorStrategic or Co-development PartnerMBSD provides unauthorized intrusion attack monitoring services for the Japan Atomic Energy Agency.
• 株式会社ChillStackminorStrategic or Co-development PartnerMBSD co-develops and delivers Secure AI Development Training with ChillStack, covering adversarial examples, data poisoning, model extraction, and other AI attack/defense techniques through hands-on and e-learning formats.

Scale indicators3 records

Recent moves7 records

Expansion highlights5 records

Broad incumbents

• CrowdStrike (Services): Global cybersecurity platform with a growing professional services and incident response practice (CrowdStrike Services). Comparable as an incumbent expanding into the services-led offerings MBSD specializes in.
• Palo Alto Networks (Unit 42): Threat intelligence, incident response, and security consulting arm of Palo Alto Networks. Directly comparable to MBSD's MBSD-SIRT and threat intelligence capabilities, though at global scale and as part of a platform vendor.
• NTT Security (Japan) / NTT DATA-CERT: Part of NTT Group, one of Japan's largest managed security services providers and system integrators with broad cybersecurity offerings and significant government contract presence. Comparable as a broader incumbent in the same Japanese market.
• Trend Micro Japan: Japan-headquartered global cybersecurity vendor offering threat intelligence, managed detection and response, and consulting. Comparable as a broader incumbent with deep Japan presence and overlapping threat intelligence capabilities.

Direct peers

• SecureWorks: Global managed security services provider offering MDR, vulnerability management, and incident response. Comparable in business model to MBSD's MSS/ASOC offerings, though serving a broader geographic market.
• Mandiant (Google Cloud): Global leader in incident response, threat intelligence, and security consulting. Comparable to MBSD's MBSD-SIRT services and large-scale malware takedown participation, though at significantly larger scale.
• Internet Initiative Japan (IIJ): Japanese managed security services provider offering SOC, vulnerability assessment, and consulting as part of its enterprise network services portfolio. Competes with MBSD for Japanese enterprise MSS contracts.
• NRI Secure Technologies: Japanese cybersecurity consulting and managed security services firm serving financial institutions and large enterprises. Closely comparable to MBSD in size, Japanese enterprise/government focus, and service portfolio.
• LAC Co., Ltd. Japanese cybersecurity services firm offering security consulting, vulnerability diagnostics, SOC services, and incident response. Closest direct domestic peer to MBSD in scale and service mix within Japan.

Emerging players

• OPTUS / Optiv Security: Cybersecurity solutions integrator offering advisory, managed security, and integration services. Comparable as a services-led cybersecurity peer addressing enterprise security transformation needs.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xtwitter.com/mbsdnews
• YouTubeyoutube.com/MBSDch
• Facebookfacebook.com/mbsdnews
• LinkedInlinkedin.com/company/mitsui-bussan-secure-directions-inc.

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Mitsui Bussan Secure Directions