IT DIRECT

What IT DIRECT does

IT DIRECT Inc. (アイティーディレクト株式会社) is a privately held Japanese cybersecurity and IT consulting company founded in September 2009 and headquartered at the KDDI Otemachi Building in Tokyo. The company serves primarily Japanese financial institutions, telecommunications carriers, and large distribution/retail enterprises with a vertically integrated offering spanning AI/DX consulting, cybersecurity advisory, CRM/digital marketing consulting, and penetration testing services, along with a portfolio of proprietary cloud security products.

Its product line is built around AWS-native and partner-integrated components: FalconEyes is a low-cost SaaS SIEM service that collects and visualizes Syslog from FortiGate UTMs; ITDIRECT Auth is an OIDC/OAuth 2.0 authentication service built directly on AWS Cognito; MAF is a cloud email-application firewall for targeted email attack protection; xIdentify provides two-pathway authentication co-developed with Authentify; and Tamako is a malware and forensics tool. Hardware-side offerings include DataLocker-encrypted USB/HDD devices managed through SafeConsole, the SafeCrypt virtual-drive encryption tool, and EncryptDisc encrypted media, all FIPS 140-2 validated for regulated workloads.

The revenue model is multi-stream: professional-services consulting (including a ¥250,000/month cybersecurity advisory retainer), recurring cloud security subscriptions, annual penetration testing contracts ranging from ¥750,000 (Nano) to ¥3,000,000 (Epic), and one-time or repeat hardware-encrypted device sales. Go-to-market is direct enterprise field sales in Japan via the corporate website and dedicated product microsites, supplemented by a staffing/dispatch business under active government permits. Public-facing third-party validation is thin: the company is founder/management-controlled under Representative Director and President Masahiro Sato, with no disclosed external funding or named customer logos.

Name

IT DIRECT

Legal name

アイティーディレクト株式会社

Website

https://itdirect.co.jp

Company type

Private

Founded year

2009

Operating status

Operating

Short description

IT DIRECT is a privately held Japanese cybersecurity and IT consulting firm founded in 2009 and based in Tokyo, serving financial institutions, telecom carriers, and large retailers with integrated consulting, penetration testing, and cloud security products such as FalconEyes, ITDIRECT Auth, and DataLocker hardware encryption.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting and Managed Security Services

NAICS

Security Systems Services (56162), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

akta.pro secondary industries

Access Management & Policy Enforcement (Authorization, ZTNA integration) (HDAEAJAG), Key Management, Encryption & Secrets Management (KMS/HSM/Vault) (HDABAHAG), Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM), Collaboration Security for File Sharing & Content (M365/Google Drive/Box) (HDADAKAG)

Keywords

• Cybersecurity consulting
• Penetration testing services
• IT security products
• Hardware encryption devices
• DX consulting

Headquarters

HQ city

Tokyo

HQ country

Japan

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Supply Chain, Operations

Revenue model

1. コンサルティングサービス: AI/DX consulting, cybersecurity consulting, and CRM & digital marketing consulting engagements for financial institutions, telecom, and retail companies. Includes cybersecurity advisory contracts at ¥250,000/month.
2. セキュリティ製品・クラウドサービス: Recurring cloud-based security products including FalconEyes (SIEM log analysis), ITDIRECT Auth (authentication service), MAF (email security), xIdentify (2FA), and Tamako (forensics). Hardware encryption devices (Datalocker USB/HDD, EncryptDisc CD) are one-time or repeat purchase items.
3. セキュリティ診断サービス: Penetration testing and vulnerability assessment services. Plans range from Nano (¥750,000) to Epic (¥3,000,000), with annual contracts allowing multiple tests per year. Additional consulting and application security services available.
4. 暗号化デバイス販売: Sales of hardware-encrypted USB drives, external HDDs (Datalocker Sentry/K350/DL4 series), encrypted CDs (EncryptDisc), and virtual drive encryption software (SafeCrypt). Both one-time purchase and recurring models.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels6 records

Core offering

IT DIRECT provides B2B cybersecurity and IT consulting services to Japanese enterprises, particularly financial institutions, telecommunications carriers, and major retailers. Its core offerings include AI/DX strategy consulting, cybersecurity strategy and implementation support, CRM and digital marketing consulting, AI-driven penetration testing, and web application vulnerability diagnosis. The company complements these services with an in-house and partnered product portfolio spanning SIEM log analysis (FALCON EYES), cloud authentication (ITDIRECT Auth), email security (MAF), two-factor authentication (xIdentify), malware/forensics (Tamako), cloud-storage encryption (SafeCrypt), and hardware-encrypted USB/HDD devices (DataLocker with SafeConsole management) and encrypted optical media (EncryptDisc).

Product overview

IT DIRECT provides a portfolio of cybersecurity products and consulting services. The core products include FALCON EYES (SIEM log visualization for FortiGate), ITDIRECT Auth (AWS Cognito-based authentication), MAF (email security firewall), xIdentify (two-factor authentication), Tamako (malware/forensics tool), SafeCrypt (cloud storage encryption), DataLocker encrypted USB/HDD hardware with SafeConsole cloud management, and EncryptDisc encrypted media. The service lineup includes AI/DX consulting, cybersecurity consulting, CRM & digital marketing consulting, and penetration testing services (ITDIRECT PenTest using RidgeBot AI). The products work both independently (each addressing specific security needs) and as an integrated security ecosystem.

Differentiator

Problem solved

Functional benefit

Products and services

• FALCON EYES Cloud-based SIEM log visualization service that collects, stores, and visualizes Syslog data from FortiGate and other UTM devices, providing real-time monitoring of communication logs, rejection logs, and suspicious access for early risk detection and long-term audit support.
• ITDIRECT Auth Cloud-based authentication and authorization service built on AWS Cognito, providing OpenID Connect (OIDC) and OAuth 2.0 with SMS and mobile app OTP, risk-based two-factor authentication, custom login UI, and integration support for existing systems. Priced from $1 per user.
• MAF (Mail Application Firewall)
• xIdentify
• Tamako
• SafeCrypt
• DataLocker Encrypted USB/HDD (Sentry, K350, DL4 series)
• SafeConsole
• EncryptDisc
• ITDIRECT PenTest
• Web Application Vulnerability Diagnosis
• AI/DX Consulting
• Cybersecurity Consulting
• CRM & Digital Marketing Consulting

Quantifiable outcome

• Penetration testing costs reduced through partnership with ASV-certified India vendor and AI automation
• +3 more outcomes

Named customers6 records

Segments6 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability4 records

Feature7 records

Partnerships

Five partnerships are on record, tiered core.

• Ridge Security (RidgeBot)coreTechnology or IntegrationAI-driven automated penetration testing technology partnership. IT DIRECT integrates Ridge Security's RidgeBot for comprehensive penetration testing including attack surface identification, website/host/intranet penetration, weak credential exploitation, ransomware penetration, and third-party framework testing. RidgeBot has received high ratings from Gartner's Penetration Testing Tools Reviews (2024).
• ASV-Certified India VendorcoreTechnology or IntegrationPartnership with ASV (Approved Scanning Vendor)-certified Indian vendor enables global-level penetration testing quality at reduced cost. ASV certification is for PCI DSS-compliant vulnerability scanning. This partnership allows IT DIRECT to offer continuous, affordable penetration testing to Japanese enterprises.
• Datalocker (データロッカー)coreTechnology or IntegrationReseller and integration partner for Datalocker hardware-encrypted USB drives (Sentry, K350 series) and external HDDs (DL4 series). Datalocker products meet FIPS 140-2 standards and are on Japan's government procurement security requirements list (IPA). IT DIRECT also resells Datalocker products at datalocker.jp.
• AuthentifycoreTechnology or IntegrationCo-development partner for xIdentify two-pathway authentication service. Authentify provides technology serving approximately 1,500 companies across 32 countries globally. The partnership enables financial institution-grade two-factor and two-pathway authentication solutions for Japanese clients.
• AWS (Amazon Web Services / Cognito)coreTechnology or IntegrationAWS Cognito serves as the foundational platform for ITDIRECT Auth's OIDC and OAuth 2.0 authentication/authorization service. AWS Cognito provides the underlying user pool, identity management, and API integration capabilities. ITDIRECT Auth also supports AWS Amplify for UI customization and integrates with various AWS services.

Scale indicators2 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Fujitsu: Major Japanese IT services vendor with a substantial security portfolio spanning consulting, managed services, and products across enterprise and public sector. Competes with IT DIRECT on enterprise security strategy and integration in Japan's FSI and public sector.
• Trend Micro: Japanese-headquartered global cybersecurity vendor with broad endpoint, email, and cloud security products. Operates across the same cybersecurity market in Japan with overlapping categories (email security, SIEM/data lake) but at global incumbent scale.
• NTT Data Group: One of Japan's largest IT services conglomerates offering cybersecurity consulting, managed SOC, and large-scale system integration to financial institutions and telecom. Broad incumbent that competes with IT DIRECT on enterprise cybersecurity consulting and integration work.

Regional players

• SecureWorks: Global MSSP providing managed detection, incident response, and vulnerability assessment to enterprises. Operates outside Japan but comparable service mix to IT DIRECT's managed SIEM (FalconEyes) and security advisory offerings.

Emerging players

• Bishop Fox: Specialized offensive security firm offering penetration testing, red teaming, and attack-surface monitoring. Closely comparable to IT DIRECT's RidgeBot-powered AI-driven pen testing and continuous security validation offering.
• Flatt Security: Japanese cybersecurity firm specializing in web application vulnerability assessment and penetration testing using AI-driven automation. Directly comparable to ITDIRECT PenTest and the OWASP ZAP/BurpSuite-based web app diagnostic offering.

Others

• Macnica Networks Corp. Japanese network security distributor and integrator selling enterprise security products and services, including encryption and identity solutions. Operates as a channel and integration peer to IT DIRECT's Datalocker/encryption hardware distribution line.

Direct peers

• LAC Co., Ltd. Japanese MSSP and cybersecurity services firm offering SOC, penetration testing, and digital forensics — directly comparable to IT DIRECT's managed security services and pen testing portfolio. Both target Japanese enterprises with combined consulting + managed service delivery models.
• NRI Secure Technologies: Subsidiary of Nomura Research Institute providing cybersecurity consulting, managed security services, and security testing. Closely comparable to IT DIRECT's consulting + pen testing + product mix and financial-sector expertise in the Japanese market.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about IT DIRECT