Moby Dick

What Moby Dick does

Moby Dick (legal name: 주식회사 보안그룹모비딕, Moby Dick Security Group) is a privately held South Korean information security consulting firm headquartered in Geumcheon-gu, Seoul. Founded and led by CEO Hong Youngran, the company delivers customized security consulting services to financial institutions, general enterprises, and public sector organizations, with a service portfolio that covers the full compliance-and-assessment lifecycle: certification consulting for ISMS, ISMS-P, and the ISO 27001/27017/27018/27701 families; security review and deliberation support (including Financial Supervisory Service submissions and identity verification reviews); technical vulnerability assessment (infrastructure diagnosis, penetration testing, source code review); APT and DDoS security training; information protection master plan and security architecture design; and personal information trustee inspection under the Personal Information Protection Act and Credit Information Protection Act.

The underlying technology is human-expert-driven professional services rather than a software product platform. There is no proprietary software, API, or AI/ML capability disclosed. Differentiators rest on multi-standard certification expertise, credentials including ISO/IEC 27001 certification and designation as an Information Protection Professional Service Company by the Ministry of Science and ICT, and topical authority demonstrated through press coverage in cryptocurrency exchange security, ICS/SCADA security, and critical infrastructure protection (notably a documented engagement on the Yeongheung thermal power plant, which supplies roughly 23% of the Seoul metropolitan area's electricity).

The business model is project-based professional services sold directly to enterprise and institutional clients. Pricing is quoted engagement-by-engagement with no public rate card, and the go-to-market is direct enterprise field sales supported by earned media in Korean security and business press. The firm holds a Women-owned Business certification from the Seoul Regional Small and Medium Venture Enterprise Administration, placing it in the small/medium enterprise segment of the domestic Korean market. There is no disclosed revenue, headcount, outside funding, or partnership network in the source data.

Name

Moby Dick

Legal name

주식회사 보안그룹모비딕

Website

https://mobymoby.com

Company type

Private

Operating status

Operating

Short description

Moby Dick is a privately held South Korean information security consulting firm serving financial institutions, general enterprises, and public sector clients with ISMS/ISO 27001 certification advisory, vulnerability assessment, security review support, and personal information compliance services.

Ownership category

akta.pro rank

Product category

Information Security Consulting

NAICS

Professional, Scientific, and Technical Services (541)

SIC

Services-Management Services (8741)

akta.pro primary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

Keywords

• Information security consulting
• Vulnerability assessment services
• ISMS certification consulting
• Penetration testing services
• Personal information protection

Headquarters

HQ city

Yongsan

HQ country

South Korea

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Security Consulting Services: Professional consulting services including authentication consulting (ISMS/ISMS-P/ISO27001/ISO27017/ISO27018), security review and deliberation support, technical vulnerability diagnosis, APT/DDoS security training, information protection master plan services, and personal information trustee inspection. Services are provided to financial institutions, general enterprises, and public institutions on a project/engagement basis.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels1 record

Core offering

Moby Dick is a Korean information security consulting firm that provides customized security consulting services to financial institutions, general enterprises, and public sector organizations. Its services cover the full security lifecycle including ISMS/ISMS-P/ISO 27001 family certification consulting, technical vulnerability diagnostics (infrastructure diagnosis, penetration testing, source code review), security review and deliberation support for Financial Supervisory Service submissions, APT/DDoS security training, information protection master plan establishment, and personal information trustee inspections.

Product overview

보안그룹 모비딕 (Moby Dick) is an information security consulting company that offers a portfolio of specialized security services rather than a unified software product. The company's offerings include certification consulting for international standards (ISMS, ISO 27001 family), security review and deliberation support services, technical vulnerability assessments, APT/DDoS security training, information protection master plan services, and personal information trustee inspections. These services are designed for financial institutions, general enterprises, and public sector organizations to improve their information security posture.

Differentiator

Problem solved

Functional benefit

Products and services

• Certification Consulting (인증컨설팅)
• Security Review and Deliberation Support (보안성 검토 및 심의 지원)
• Technical Vulnerability Assessment (기술 취약점 진단)
• APT/DDoS Security Training (APT/DDoS 보안 훈련)
• Information Protection Master Plan Service (정보보호 마스터 플랜 서비스)
• Personal Information Trustee Inspection (개인정보 수탁사 점검)

Named customers3 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Scale indicators1 record

Recent moves5 records

Expansion highlights3 records

Broad incumbents

• Igloo Security (이글루시큐리티): Korean cybersecurity vendor with identity and security operations offerings for enterprises and public institutions. Overlaps with Moby Dick on enterprise and public-sector security consulting in Korea.
• Fasoo (파수): Korean data security and enterprise content protection vendor serving large enterprises and public institutions. Overlaps with Moby Dick on data security consulting and Korean enterprise/government market.
• Genians (지니언스): Korean network access control and security vendor serving enterprise and public-sector customers. A broad incumbent in the Korean security market with services adjacent to Moby Dick's enterprise and public-institution consulting work.
• Penta Security (펜타시큐리티): Korean web application security and encryption vendor with associated security services. Comparable in Korean enterprise and public-sector market exposure, with overlapping compliance and web/mobile penetration testing capabilities.
• AhnLab (안랩): Largest Korean cybersecurity vendor offering endpoint security, network security, and security services to enterprise and public-sector customers. A broad incumbent in the same overall market as Moby Dick, with a much wider portfolio but overlapping compliance and vulnerability assessment capabilities.
• Somansa (소만사): Korean data loss prevention and personal information protection vendor. Directly comparable to Moby Dick on personal information protection and PIPA-related compliance work in the Korean enterprise market.

Emerging players

• S2W (에스투더블유): Korean cybersecurity company focused on threat intelligence, dark web monitoring, and security analytics, with growing enterprise security consulting. Adjacent to Moby Dick's vulnerability assessment and threat advisory work but with differentiated technology focus.

Direct peers

• SGA (에스지에이): Korean security and compliance services firm offering consulting, certification support, and security operations work to enterprise and public-sector clients. Overlaps with Moby Dick on compliance consulting and information protection services.
• Korea Information Security Consulting (한국정보보호컨설팅): Korean security consulting firm providing ISMS certification support, vulnerability diagnostics, and compliance advisory to financial and public institutions. Directly overlaps Moby Dick's certification consulting and security review service lines.
• A3 Security Consulting (에이쓰리시큐리티컨설팅): Korean boutique information security consulting firm offering similar certification consulting (ISMS/ISO 27001), vulnerability assessment, and security review services to financial, enterprise, and public-sector clients. Closely comparable in size, service mix, and target market to Moby Dick.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights6 records

Customer concentration

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments2 records

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Moby Dick