What LeadSec Technology (Beijing) Co., Ltd. does

LeadSec Technology (Beijing) Co., Ltd. (北京网御星云信息技术有限公司), commercially branded 网御星云, is a Beijing-headquartered Chinese cybersecurity company that delivers a full-stack security portfolio spanning boundary/network security hardware, data security, application security, industrial internet security, cloud security, security management platforms, big-data analytics, host security, commercial cryptography applications, and a recently introduced large-model/AI-agent security product line. Its platform architecture includes the Security Operations Center, Cloud Security Management Platform, Threat Intelligence Platform, Intrusion Analysis Platform, Situation Awareness Platform, SOC, Critical Information Infrastructure Protection Platform, Attack-Defense Range Platform, and the self-developed L-UEBA platform for distributed big-data user-entity behavior analysis.

The company sells to government (party affairs, government, politics/law, taxation, transportation), finance, healthcare, education, industrial internet, and media/broadcasting customers through direct enterprise field sales supported by branch offices across China, a channel partner program for mid-market resellers, and participation in national and provincial government procurement and bidding. Revenue is generated primarily through hardware appliance sales (UTM, firewall, WAF, IPS, industrial firewall, video security), software and platform licensing (situation awareness, threat intelligence, UEBA, EDR), commercial cryptography products and services, and professional security services (risk assessment, managed security services, emergency response), with quote-based pricing and multi-year contracts.

LeadSec is affiliated with the Venus Group and operates under President Hu Xiaofeng (胡晓峰), having undergone a strategic restructuring in 2012. The company has been consecutively ranked #1 in China's UTM hardware market by IDC for 10 years and #1 in China's data diode market by Frost & Sullivan for 9 years, holds near 80 invention patents and 100+ software copyrights, and is a key contributing author to multiple Chinese cybersecurity industry standards including GA/T 2147-2024. The 2025-2026 strategic emphasis is on AI-driven security operations: the proprietary Taihe Security LLM, the Anxin AISOP platform, the Anxin 9-member Digital Employee family, and a broad agent-security product portfolio (MASB, ASG, ABA, MADA Mask, ClawScan) targeting the emerging security requirements of enterprise AI deployments.

Name

LeadSec Technology (Beijing) Co., Ltd.

Legal name

北京网御星云信息技术有限公司

Website

https://leadsec.com.cn

Company type

Private

Founded year

2012

Operating status

Operating

Headcount range

11–50 employees

Ownership category

akta.pro rank

Product category

Cybersecurity Solutions

NAICS

Computer Systems Design and Related Services (54151), Computer Systems Design and Related Services (5415), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Computer Communications Equipment (3576)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Managed Detection & Response (MDR) & SOC Services (HDADAGAG), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Secure Collaboration & Data Sharing (IRM/DRM, Secure Workspaces) (HDADAFAM)

Keywords

• Cybersecurity solutions
• Network security products
• Data security platforms
• AI security operations
• Zero trust security

Headquarters

HQ city

Beijing

HQ country

China

HQ region

Asia

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Cybersecurity Hardware Products: Sale of proprietary network security hardware appliances including UTM, firewall, WAF, IPS, data security, industrial security, and video security products. Products are sold directly to government and enterprise customers through procurement channels.
2. Security Software and Platform Licenses: Security management platforms, situation awareness systems, threat intelligence platforms, and specialized security software solutions sold as licenses (perpetual or subscription) to enterprise and government clients.
3. Security Services: Professional security services including risk assessment, security hardening, managed security services, monitoring and early warning, threat analysis, emergency response, security consulting, and security training services. Provided on a managed services or project-based engagement model.
4. Commercial Password Products and Services: Commercial password products and services including cryptographic hardware (servers, signature/verification servers, VPN gateways), key management, and password application services for compliance-driven government and enterprise customers.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

LeadSec is a comprehensive cybersecurity solutions provider that designs, develops, and sells proprietary network security hardware (UTM, firewall, IPS/IDS, WAF, video security, industrial security, data diodes), security software and platforms (SOC, situation awareness, threat intelligence, L-UEBA, data security, cryptography), and managed/consulting security services to government, finance, healthcare, education, industrial, and media customers in China. The portfolio is anchored on the Taihe security large language model, AI-powered Anxin AISOP operations platform, Tianguan Zero Trust+ architecture, and a family of nine AI digital employee agents covering the full security lifecycle.

Product overview

LeadSec Technology (Beijing) Co., Ltd. (北京网御星云信息技术有限公司) operates as a comprehensive network security solutions provider offering a unified platform-plus-modules architecture. The company organizes its products into 11 distinct product lines: 边界安全(Boundary Security)、网络通信安全(Network Communication Security)、数据安全(Data Security)、应用安全(Application Security)、工业互联网安全(Industrial Internet Security)、云安全(Cloud Security)、安全管理与支持(Security Management and Support)、大数据(Big Data)、主机与计算环境安全(Host and Computing Environment Security)、密码应用安全(Cryptography Application Security)、大模型应用安全(Large Model Application Security). Key platforms include 安全运营中心(Security Operations Center)、云安全管理平台(Cloud Security Management Platform)、威胁情报平台(Threat Intelligence Platform)、入侵分析平台(Intrusion Analysis Platform)、态势感知平台(Situation Awareness Platform)、安全管理平台SOC(Security Management Platform)、关键信息基础设施安全保卫平台CII(Critical Information Infrastructure Security Protection Platform)、攻防平台(Attack-Defense Platform)、L-UEBA平台(L-UEBA Platform). The company has developed a comprehensive AI product portfolio including 安星人工智能安全运营系统AISOP(AI-powered security operations)、安星威胁检测智能体(AI threat detection agent)、安星数字员工家族(9 digital employees covering security hardening, code audit, penetration testing, risk assessment, consulting, emergency response, security operations, data security, AI agent security)、MASB大模型访问安全代理(MASB AI access security broker)、智能体安全网关ASG(Agent Security Gateway)、智能体行为审计系统ABA(Agent Behavior Audit System)、MADA Mask大模型访问脱敏罩(Model Application Desensitization Access Mask)、天关·零信任+(Tianguan Zero Trust+实名认证)、泰合安全大模型(Taihe Security Large Model)、AIDK智能体共性技术开发平台(AIDK Agent Development Platform), along with data security products like 网御数据分类分级与风险合规系统DSMP-CRCS、DSFM软硬一体机、隐私计算平台、可信数据空间服务平台, and network security hardware products like IDS/IPS/WAF/TAR/CSP/ASM vulnerability scanners, email security management system, endpoint EDR products, network security range platforms for training and exercises.

Differentiator

Problem solved

Functional benefit

Brands

• 天关·零信任+: Zero trust security architecture integrating CT and IT networks with national identity authentication system
• 安星数字员工
• 安星人工智能安全运营系统
• AISOP
• L-UEBA
• CII
• MASB
• AIDK
• DSFM
• MADA Mask
• ABA
• ASG
• ClawScan
• Skills安全情报监测分析服务
• 欺骗防御智能体
• 智能体行为审计系统
• 泰合安全大模型
• 泰合安全运营体系
• 天关·零信任+

Products and services

• Boundary Security Products (UTM, Firewalls, IPS, IDS) LeadSec's flagship boundary security product line including UTM, next-generation firewalls, intrusion detection/prevention systems (IDS/IPS), data diodes, and related appliances. LeadSec UTM products have ranked #1 in China UTM hardware market for 10 consecutive years per IDC.
• Network Communication Security Products Network communication security solutions providing protection during network communication processes for enterprise and government customers.
• Data Security Products (DSMP-CRCS, DSFM, Data Security Situation Management) Data security product line including AI-powered data classification and risk compliance system (DSMP-CRCS), data security situation management system, DSFM software-hardware integrated machine (GA/T 2380-2026 compliance), privacy computing platform, trusted data space service platform, data security sandbox, data circulation control API, and full-process supervision and analysis platform for data security governance.
• Web Application Firewall (WAF) and Application Security Products LeadSec Web Application Firewall (WAF) for protecting web applications from web-based attacks. Obtained Web Application Firewall certification. Also includes the Email Security Management System providing spam filtering, malicious link detection, attachment scanning, and user behavior analysis.
• Industrial Internet Security Products Industrial control system and industrial internet security solutions including the LeadSec Industrial Firewall which received National Development and Reform Commission special support in 2015. Protects ICS/SCADA environments, industrial IoT devices, and industrial protocols for manufacturing, energy, and utility operators.
• Cloud Security Products and Cloud Security Management Platform Cloud security management platform aligned with 等保2.0 compliance requirements for private cloud, data center, and virtualization platforms. Includes cloud server cipher machines and related cloud security resource pool products.
• Host and Computing Environment Security / LeadSec EDR Host and computing environment security products including LeadSec EDR providing endpoint behavior real-time monitoring, attack process tree forensics, malicious program identification, and full-process interception of high-difficulty dynamic ransomware. Also includes LeadSec EDR for Claw specifically enhanced for AI agent scenarios.
• Cryptography Application Security Products (Commercial Password Products) Commercial cryptography application security products including server cipher machines, signature/verification servers, VPN integrated security gateways, and key management systems. Supports GB/T 39786-2021 compliance and 密评 (commercial cryptography application security evaluation) requirements.
• L-UEBA User Entity Behavior Analysis Platform Self-developed distributed big-data-based security analysis platform supporting stream and log data ingestion, governance, and storage management. Provides multiple analysis engines with plug-in algorithm models for intelligent user/entity behavior anomaly analysis, detecting threats that bypass boundary defenses and identifying user business access risks.
• Security Operations Center (SOC) Platform Integrated security operations platform providing comprehensive protection including predictive prevention, monitoring and alerting, situation awareness, and emergency response.
• Threat Intelligence Platform Threat intelligence platform aggregating malicious IPs, URLs, programs, and vulnerability information from multiple sources to deliver real-time threat monitoring across industry application systems.
• Intrusion Analysis Platform Network intrusion behavior analysis and security event analysis platform for investigating and responding to network intrusions.
• Situation Awareness Platform Real-time monitoring and early warning of intrusion behavior and virus propagation across network backbone nodes and internet-facing systems for government and large enterprise customers.
• Critical Information Infrastructure Security Protection Platform (CII) Comprehensive solution used by public security agencies to monitor network backbone nodes and important connected systems within their jurisdiction. Provides real-time monitoring, threat awareness, investigation, traceability, grading protection, notification and early warning, intelligence information, rapid response, command and dispatch, and attack-defense drill capabilities.
• Attack-Defense Platform (Cybersecurity Range) Network security attack-defense drill and capability verification platform using super simulation technology to reproduce various security devices; supports linkage of hierarchical and peer ranges with 5000+ simultaneous online nodes. Also includes the Innovation Drill Range Platform for low-cost, normalized, and flexible cyber-range exercises.
• Taihe Security Large Language Model (Taihe Security LLM) Self-developed security domain-specific large language model built on Jiutian and DeepSeek dual-model bases, combined with high-quality security datasets, attack-defense knowledge base, and industry practical experience. Powers the AISOP security operations platform with domain-specific deep natural language understanding, attack-defense logic reasoning, and scenario-based intelligent decision making.
• Anxin AI Security Operations System (AISOP) AI-powered security operations platform built on the Taihe security large language model, providing intelligent alert triage, automated threat hunting, attack forensics, and intelligent emergency response covering over 100 mainstream security operations scenarios. Achieves greater than 95% alert noise reduction and 99.9% automated response rate in customer deployments.
• Anxin Digital Employee Family (Anxin·Code Audit, Pentest, Hardening, Risk Assessment, Consulting, Emergency Response, Security Ops, Data Security, AI Agent Security) Family of nine AI-powered digital security employees that can be deployed independently or composed into automated service workflows: Anxin Security Hardening, Anxin Code Audit (Java/Python/Go static and semantic analysis for SQL injection, XSS, hard-coded credentials), Anxin Penetration Testing (7x24 automated hacker path simulation), Anxin Risk Assessment (quantified CVSS scoring with threat intelligence activity index), Anxin Consulting/Planning (built-in cybersecurity law knowledge base), Anxin Emergency Response (compresses golden window response to under one minute), Anxin Security Operations (7x24 alert triage and ticket routing), Anxin Data Security (sensitive data access monitoring with DLP linkage), and Anxin AI Agent Security (auditing enterprise AI applications and agents).
• MASB Large Model Access Security Proxy AI security product for large-model user-side access introducing the innovative CBAC (content-based access control with user-role data content) architecture. Provides trustworthy identity-controllable interaction, accurate intent recognition, deep enabled capability continuous evolution, and proactive defense full-coverage navigation to defend against prompt injection, role-playing, and other novel attacks.
• Intelligent Agent Security Gateway (ASG) Security infrastructure for the intelligent agent era providing Token operations management (visualized AI usage), intelligent computing power scheduling (ensuring stability and economics of inference services), and intelligent agent security protection (prompt injection defense, MCP/API security, graceful tool control).
• Agent Behavior Audit System (ABA) Third-party audit system deployed independently that collects intelligent agent behavior data via side-network traffic mirroring. Provides audit brain (agent thinking process transparency), audit hands-and-feet (full agent action recording), agent asset panorama, task panorama correlation display, and risk identification and automatic containment.
• MADA Mask (Large Model Access Desensitization Shield) Data security protection tool oriented to the access side that builds data security defenses at the access source. Provides data identification, real-time desensitization, content blocking, and full-chain audit capabilities.
• Tianguan Zero Trust+ Real-Name Authentication System Real-name identity authentication system built on operator SIM card resources and national-level trust infrastructure, achieving one-person-one-number-one-card-one-password-one-device entity identity binding that bridges digital and physical identity. Establishes the technical trust system on social trust foundations.
• AIDK Intelligent Agent Common Technology Development Platform Full-stack intelligent agent development and runtime platform for the network security domain, condensing core common technologies and providing multi-base-model adaptation, multi-agent collaboration choreography, full-category tool-chain integration, full-life-cycle security governance, and low-code scenario development.
• ClawScan Shadow AI Agent Detection Tool Tool for accurately identifying and addressing enterprise network risks from shadow applications formed by employees self-deploying OpenClaw, using an innovative combat model that deeply integrates specialized tools with professional services.
• Skills Security Intelligence Monitoring Analysis Service Service that fuses metadata audit, instruction behavior, and code consistency analysis techniques to continuously monitor global Skills ecosystems, accurately identifying supply chain attacks, prompt injection, command injection, remote code execution, data leakage, and privacy intrusion risks.
• Anxin Threat Detection Intelligent Agent AI-driven autonomous threat hunting agent realizing three major upgrades: AI-led autonomous threat hunting (using ATT&CK framework), dynamic evolution via dual-engine continuous learning, and proactive countermeasures using high-fidelity decoy assets to anticipate attacker behavior.
• LeadSec EDR for Endpoint and AI Agent Runtime Protection Endpoint detection and response product providing real-time endpoint behavior monitoring, attack process tree forensics, precise malicious program identification, and millisecond-level anomaly behavior detection. The 'LeadSec EDR for Claw' variant is specialized for AI agent runtime environments.
• Application Delivery Controller (LeadSec ADC) and Load Balancing Products Application delivery product providing complete ingress-egress link load balancing solutions with integrated minimum-flow, minimum-latency, minimum-jitter, and minimum-packet-loss algorithms. Supports multi-link redundancy, intelligent path selection, and link balancing for campus networks across multi-operator links.
• Video Security Solution (Video Security Firewall, Video Security Protection System, Video Security Boundary Interaction System) Comprehensive video security solution including Video Security Firewall, Video Security Protection System, and Video Security Boundary Interaction System for public security, transportation, finance, government, and medical video surveillance networks. Successfully applied to Ministry of Public Security video image information systems with LeadSec as a key contributing author to GA/T 2147-2024 standard.
• Email Security Management System Email security management product providing spam filtering, malicious link detection, attachment security scanning, and user behavior analysis for full-spectrum email security. Precisely intercepts spam, phishing, fraud, and virus emails.
• Professional Security Services (Risk Assessment, Hardening, Managed Security, Emergency Response, Consulting, Training) Professional security services including risk assessment, security hardening, managed security services, monitoring and early warning, threat analysis, emergency response, security consulting, and security training. Delivered on managed services or project-based engagement models.

Quantifiable outcome

• Alert count reduced from 700/day to 30/day (95%+ reduction)
• +4 more outcomes

Named customers6 records

Segments6 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability38 records

Feature7 records

Scale indicators8 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Venustech (启明星辰): Venustech is one of China's longest-established cybersecurity vendors with deep UTM/firewall, IDS/IPS, and managed security offerings to government and telecom. It is the most direct functional peer to LeadSec in Chinese network boundary security and SOC deployments.
• DBAPP Security (安恒信息): DBAPP Security is a Chinese cybersecurity company with strong focus on data security, web application firewalls, and compliance-driven offerings to government and enterprise. It directly competes with LeadSec's data classification, DSFM, and web application security products.
• AsiaInfo Security (亚信安全): AsiaInfo Security is a Chinese cybersecurity vendor focused on endpoint security, network detection and response, and 5G/operator security, spun out of AsiaInfo. It overlaps with LeadSec in endpoint detection, network security, and government/operator accounts.
• Topsec Technologies (天融信): Topsec is one of China's longest-running firewall and network security vendors with deep government and telecom customer base. It is a directly comparable peer in firewall, UTM, and security service offerings.
• NSFOCUS (绿盟科技): NSFOCUS is a Chinese cybersecurity vendor specializing in DDoS protection, web application security, vulnerability management, and security services to telecom, finance, and government. It competes with LeadSec in WAF, vulnerability scanning, and managed security services in the same enterprise verticals.

Broad incumbents

• Sangfor Technologies (深信服): Sangfor is a large Chinese IT infrastructure and cybersecurity vendor with hyper-converged infrastructure, firewalls, EDR, and managed detection offerings. It is a broad incumbent competing with LeadSec across network security hardware, endpoint security, and security services.
• Qi-Anxin Technology Group: Qi-Anxin is China's largest pure-play cybersecurity vendor with a full-stack product portfolio spanning endpoint, network, cloud, and security services to government and enterprise. It is a directly overlapping competitor in the same Chinese government and enterprise accounts that LeadSec targets, but with substantially greater scale and headcount.
• 360 Security Group (奇虎360): 360 Security is a broad Chinese internet security incumbent with consumer and enterprise offerings across endpoint, network, and threat intelligence. It is a broad incumbent competitor in Chinese enterprise and government cybersecurity markets.
• H3C (新华三):

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

Compliance27 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about LeadSec Technology (Beijing) Co., Ltd.