What EG Secure Solutions does

EG Secure Solutions (EGセキュアソリューションズ株式会社) is a Tokyo-based cybersecurity firm founded in 2008 (originally as HASH Consulting) that specializes in web application security for Japanese enterprises. It operates three pillars: (1) SiteGuard, a domestically developed Web Application Firewall deployed across more than one million websites and offered in software, appliance, and cloud editions; (2) a manual vulnerability assessment practice covering web applications, smartphone apps, server platforms, AWS configurations, large language model systems, and threat-based penetration testing, delivered by expert technicians with detailed reporting; and (3) SecurityCampus, an e-learning and group-training platform anchored by CTO Tokumaru Hiroshi, the author of Japan's definitive web application security textbook and a recognized industry expert. Adjacent services include a 24/7 SOC, security consulting and advisor retainers, cheat/bot countermeasures for the gaming industry, and an EC site security package co-developed with sister company GresAveil under the GUARDIAX brand.

The company is a consolidated subsidiary of E-Guardian Group, which has been listed on the Tokyo Stock Exchange First Section since 2016 and sits within the Change Holdings / CyLeague Holdings cybersecurity platform. Revenue is generated through a mix of professional services engagements (vulnerability assessments, penetration tests, consulting) recognized on report delivery, recurring subscription revenue from SiteGuard WAF and SOC monitoring, and course fees plus e-learning subscriptions from SecurityCampus. Go-to-market is sales-led and event-driven: direct enterprise engagement via inquiry forms is supported by an unusually deep content and community footprint that includes a 40+ video YouTube series, a monthly newsletter (Vol.1 to Vol.29+), regular seminars, the EGSS Web Security Regular Study Group, and a podcast launched in 2026. The company is ISO 27001 certified (IS 575950), counts more than 1,000 corporate customers across sectors as varied as consumer electronics, gaming, media, HR tech, and legal tech, and operates exclusively in the Japan domestic market.

Name

EG Secure Solutions

Legal name

EGセキュアソリューションズ株式会社

Website

https://eg-secure.co.jp

Company type

Private

Founded year

2008

Operating status

Operating

Headcount range

1–10 employees

Short description

EG Secure Solutions is a Tokyo-based cybersecurity firm providing web application vulnerability assessments, the domestically developed SiteGuard WAF (1M+ sites), and security education to 1,000+ Japanese enterprises, operating as a subsidiary of E-Guardian Group within Change Holdings' CyLeague cybersecurity platform.

Ownership category

akta.pro rank

Product category

Web Application Security Services

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)

akta.pro secondary industry

Bug Bounty, Vulnerability Disclosure & Security Services (FSAPAJAL)

Keywords

• Web application security
• Vulnerability assessment
• Web application firewall
• Security consulting
• Security education

Headquarters

HQ city

Tokyo

HQ country

Japan

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Vulnerability Assessment Services: Core revenue stream providing security testing services for web applications, smartphone apps, platforms, AWS environments, LLM systems, and penetration testing. Revenue recognized upon report delivery.
2. WAF Products (SiteGuard Series): Web Application Firewall product sales including cloud, software, and appliance versions. Provides recurring protection services.
3. Security Education and Training: Security Campus e-Learning and GroupTraining services, plus specialized courses like 'Tokumaru Basic Exam' certification training. One-time course fees and potential subscription for e-learning platform.
4. Consulting Services: Security consulting and advisory services including security advisor retainer services.
5. Security Monitoring (SOC): Security Operations Center services providing continuous cyber attack detection and analysis for enterprises and organizations.

Pricing tiers

Go-to-market motion2 records

Distribution channels1 record

Marketing channels7 records

Core offering

EG Secure Solutions provides web application cybersecurity services to Japanese enterprises, including manual vulnerability assessments for web apps, smartphone apps, platforms, AWS environments, and LLMs, alongside the domestically developed SiteGuard WAF product line. The company also delivers security education via the SecurityCampus platform, security consulting, advisor retainer services, and 24/7 SOC monitoring, backed by 15+ years of operational track record and protection of over 1 million websites.

Product overview

EG Secure Solutions offers a comprehensive cybersecurity portfolio centered around three pillars: security diagnostics, WAF protection, and security education. The core offerings include SiteGuard, a pure Japanese WAF protecting 1 million+ websites; SecurityCampus, an e-learning and training platform based on Tokumaru Hiroshi's expertise; and various vulnerability assessment services covering web applications, smartphone apps, platforms, AWS infrastructure, and LLMs. Additional services include penetration testing, SOC monitoring, security consulting, and specialized solutions for EC sites and gaming applications.

Differentiator

Problem solved

Functional benefit

Products and services

• SiteGuard Series (WAF) Pure Japanese domestic Web Application Firewall (WAF) product line protecting web applications from cyber attacks including SQL injection, XSS, and other OWASP Top 10 threats; deployed across 1M+ sites.
• SecurityCampus (e-Learning and GroupTraining) Security education and training platform offering e-learning courses and group training programs for web application developers and security personnel, based on Tokumaru Hiroshi's expertise.
• Web Application Vulnerability Assessment (Webアプリケーション脆弱性診断) Manual vulnerability assessment service examining web applications for security vulnerabilities using various testing techniques tailored to customer environments.
• Smartphone Application Vulnerability Assessment (スマートフォンアプリ脆弱性診断) Security vulnerability assessment service for smartphone mobile applications.
• Platform Vulnerability Assessment (プラットフォーム脆弱性診断) Vulnerability assessment service for server platforms, networks, and infrastructure components.
• LLM Vulnerability Assessment (LLM脆弱性診断) Security vulnerability assessment service specifically designed for Large Language Models (LLM) and AI-powered applications.
• Threat-Based Penetration Testing (脅威ベースペネトレーションテスト) Penetration testing service based on threat analysis to identify and exploit security vulnerabilities from an attacker's perspective.
• AWS Configuration Audit Service (AWS設定監査サービス) Security assessment service auditing AWS cloud infrastructure configurations for security misconfigurations and compliance issues.
• Security Operations Center (SOC) / Security Monitoring Service 24/7 cybersecurity monitoring and threat detection service providing real-time analysis and response recommendations for cyber attacks.
• Security Consulting (コンサルティング・支援) Professional security consulting services leveraging Tokumaru Hiroshi's expertise to address organization-specific security challenges.
• Security Advisor (セキュリティ顧問) Ongoing security advisory retainer service providing continuous expert guidance and support for maintaining security posture.
• EC Site Security Package (ECサイト向けセキュリティパッケージ) Bundled security solution package specifically designed for e-commerce sites.
• Endpoint Security (エンドポイントセキュリティ) Endpoint security services as part of comprehensive cybersecurity offerings.
• EC-CUBE Security Diagnosis Service Specialized vulnerability assessment for the EC-CUBE e-commerce platform, developed in collaboration with LOCKON and EC-CUBE developers; includes Standard Pack (600,000 JPY), Platform Diagnosis Option (150,000 JPY), and Repeater Pack (300,000 JPY).
• Wireless LAN Vulnerability Assessment Service Wireless LAN vulnerability assessment service for IoT environments, checking encryption protocols, wireless device configurations, and unauthorized access points.
• Cheat/Bot Countermeasure Security Diagnosis Service Security diagnosis service targeting online game companies for cheat and bot prevention, combined with Trunel's game application debugging expertise.
• Vulnerability Inspection Hands-on Seminar with OWASP ZAP Hands-on training seminar teaching vulnerability inspection methodology using the OWASP ZAP open-source tool; includes Web Health Check (from 200,000 JPY) and OWASP ZAP Maniacs (from 150,000 JPY) courses.

Quantifiable outcome

• 1M+ websites protected by WAF, consulting, and vulnerability assessment services
• +2 more outcomes

Named customers10 records

Segments4 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Eight partnerships are on record, tiered core, minor and flagship.

• E-Guardian (イー・ガーディアン株式会社)coreStrategic or Co-development Partner · 1 January 2015Parent company relationship. E-Guardian is the parent company (，持株会社) of EG Secure Solutions, providing the group structure. E-Guardian is a comprehensive net security company listed on Tokyo Stock Exchange First Section since 2016, with operations in content monitoring, social listening, and customer support services.
• Prime Strategy (プライム・ストラテジー株式会社)minorStrategic or Co-development PartnerJoint KUSANAGI Ready Project collaboration for WordPress plugin security verification. Also partnered on seminars regarding web security best practices.
• EC-CUBE (株式会社イーシーキューブ)flagshipTechnology or IntegrationSecurity advisory contract with EC-CUBE, the leading Japanese open-source e-commerce platform. Provides EC-CUBE free security check service, dedicated WAF options, and security consulting specifically for EC-CUBE merchants. Deep partnership involving security advisement for the EC platform.
• GresAveil (株式会社グレスアベイル)flagshipTechnology or IntegrationSister company within the E-Guardian Group developing domestic cloud WAF 'GUARDIAX'. Collaborative development of EC-CUBE Keeper with GUARDIAX - a specialized WAF option for EC-CUBE sites. Hiroshi Tokumaru serves as director of GresAveil.
• Trunel (トラネル株式会社)minorStrategic or Co-development PartnerPartner for Cheat/Bot Countermeasure Security Diagnosis Services, combining EGSS's vulnerability assessment expertise with Trunel's game application debugging expertise to provide security services for the gaming industry.
• Bengo4.com (弁護士ドットコム株式会社)minorGTM or Marketing PartnerCo-hosted seminar partnership for cybersecurity awareness content. EGSS CTO Tokumaru Hiroshi appeared as speaker at Bengo4.com organized seminars on practical incident insights.
• Sakurai (桜井)minorGTM or Marketing PartnerCo-hosted seminar on security talent shortage solutions alongside SCSK Serviceware.
• CTC Technology (CTCテクノロジー株式会社)minorChannel Partner/ Reseller/ DistributorOrganizes and distributes Tokumaru Basic Exam certification training courses. CTC Technology serves as the training course organizer (主办) for EGSS-developed security certification content.

Scale indicators4 records

Recent moves8 records

Expansion highlights5 records

Direct peers

• Cyber Security Cloud: Tokyo-listed Japanese cybersecurity firm offering cloud-native WAF (SharkGate) and managed cloud security services. Closely comparable to EGSS as a domestically-developed WAF provider serving Japanese enterprises.
• JP-Secure (now SecureBrain): Japanese security firm whose original CTO led technical development of the SiteGuard series (per EGSS management bio). Direct historical lineage in the same WAF product family and Japanese web application security market.
• MBSD (Mitsui Bussan Secure Directions): Japanese cybersecurity firm specializing in web application vulnerability assessment and penetration testing. Closely competes with EGSS's core vulnerability assessment services in the Japanese market.
• NRI Secure Technologies: One of Japan's largest pure-play cybersecurity services firms, offering vulnerability diagnostics, SOC services, and consulting. Overlapping customer base (Japanese enterprises) and overlapping service portfolio with EGSS.
• LAC Co., Ltd. Japanese cybersecurity firm providing web application diagnostics, secure development consulting, and security education. Directly competes with EGSS's assessment and training offerings in Japan.

Broad incumbents

• Trend Micro Japan: Global cybersecurity incumbent with broad portfolio in Japan; overlaps with EGSS through vulnerability assessment, web app protection, and security education, though as part of a much broader offering.
• F5 (BIG-IP Application Security Manager): Global enterprise WAF and application delivery incumbent. Competes with SiteGuard for mid-to-large enterprise WAF deployments, though typically deployed in larger international environments.
• Cloudflare: Cloud-native WAF and edge security platform widely adopted by Japanese SaaS and e-commerce companies. Increasingly strong competitor to domestically-installed SiteGuard WAF appliances/software.
• Imperva: Global web application and API protection incumbent. Competes with SiteGuard in enterprise WAF and with EGSS on application-layer vulnerability assessment as part of broader Gartner-recognized platform.

Regional players

• NTT Security Japan (NTT-CERT): Local arm of NTT Group's security practice offering SOC, vulnerability diagnostics and consulting across Japan. Overlaps significantly with EGSS's services for Japanese enterprises.

Market position

Strengths5 records

Weaknesses1 record

Competitive moat5 records

Key risks3 records

Key highlights7 records

Customer concentration

• Xtwitter.com/egsecure_jp
• YouTubeyoutube.com/channel/UCLNW6Bo_YU3TxnzsII2gEDA
• Facebookfacebook.com/egsecuresolutions

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about EG Secure Solutions