What Global Security Experts does

Global Security Experts Co., Ltd. (GSX) is a Japanese cybersecurity education and services company founded in 1997, headquartered in Tokyo. The company positions itself as a "Cybersecurity Education Company" and operates an integrated portfolio spanning four service pillars: (1) security education and training, (2) vulnerability assessment, (3) cybersecurity organization/operations building, and (4) security product resale and incident response. GSX serves approximately 3,000 companies annually with a reported ~90% repeat customer rate, and its TrapMail platform alone has been adopted by 11,000+ companies cumulatively with 7.6 million+ email addresses trained, holding the No. 1 domestic market share in Japan for targeted email attack training per ITR Market View 2022.

GSX's core proprietary technology consists of internally developed training and certification platforms: TrapMail (phishing email simulation with URL/link tracking and benchmarking against 7,000+ companies), Securio (cloud-based security awareness platform combining email attack training, e-learning, quizzes, phishing reporting, and AI-powered auto-training), Mina Secure (SaaS e-learning for general employees plus an OT-specific variant for manufacturing), and SecuriST (a GSX-founded domestic certification program covering vulnerability assessment, secure web application design, zero trust coordination, and AI security engineering). The company also delivers white-hat penetration testing, red team evaluation, AI prompt diagnosis (built on the OWASP LLM Top 10 framework), and resells leading global tools including CrowdStrike Falcon, Exabeam SIEM, SentinelOne, Cybereason, Cloudflare One, and SecurityScorecard. EC-Council Global Awards for Training Center of the Year in 2021 and 2022, plus IPA registration of its Tiger Team and Web Application Diagnosis services (METI conformity standards), validate the technical and regulatory standing of the platform.

The business model combines recurring subscription revenue (e.g., TrapMail annual plans, Securio, Mina Secure, incident case study courses at JPY 66,000/year), project-based professional services (vulnerability diagnosis starting at JPY 330,000 per engagement, penetration testing, red team evaluation, ISO 27001/ISMS certification support), and managed security services (CrowdStrike/Exabeam/SentinelOne product resale with implementation and 24/7 monitoring, plus AWS MSS). Pricing for premium certifications includes CISSP CBK 5-day training at JPY 440,000 and EC-Council CC training at JPY 132,000. GSX goes to market through direct enterprise sales (with emergency hotline 03-3578-9055), a nationwide channel partner network across 11 regions in Japan, online self-service inquiry, and a vCISO casual consultation service for mid-market companies. Customer segments span large enterprises (e.g., Maxell, Kanematsu, Sawai Group, Ricoh Japan), mid-market and SMEs, security engineers seeking certifications, general employees, and manufacturing/OT environments — a horizontal segmentation approach covering all size tiers.

Name

Global Security Experts

Legal name

グローバルセキュリティエキスパート株式会社 (Global Security Experts Co., Ltd.)

Website

https://gsx.co.jp

Company type

Private

Founded year

1997

Operating status

Operating

Headcount range

51–100 employees

Short description

GSX is a Japanese cybersecurity education and services company offering security training, vulnerability assessment, advisory, and security product resale to approximately 3,000 companies annually across large enterprises, mid-market, and SMEs in Japan.

Ownership category

akta.pro rank

Product category

Cybersecurity Education and Services

NAICS

Computer Systems Design and Related Services (54151), Other Scientific and Technical Consulting Services (54169), Security Systems Services (56162)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Managed Detection & Response (MDR) & SOC Services (HDADAGAG)

akta.pro secondary industries

Application Security & Secure Software (DevSecOps) (EDAOAIAK), Security Operations Center (SOC) as a Service (BPAEADAB), Web Security Gateways (SWG) & Secure Web Proxy (HDADABAE)

Keywords

• Cybersecurity education services
• Security awareness training
• Vulnerability assessment services
• Phishing simulation training
• Penetration testing services

Headquarters

HQ city

Tokyo

HQ country

Japan

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Cybersecurity Education and Training Services: Recurring and one-time training services including e-learning subscriptions (Mina Secure), email attack simulation training (TrapMail), certification programs (SecuriST, EC-Council, CISSP), and on-demand courses. Revenue from per-user licenses, per-session training, and annual course fees.
2. Vulnerability Assessment and Penetration Testing Services: One-time and project-based professional services for web application security, platform/OS diagnostics, IoT, smartphone apps, and red team assessments. Billed per engagement.
3. Security Product Resale and Integration: Resale and integration of third-party security products including CrowdStrike Falcon, Exabeam, SentinelOne, Cybereason, Cloudflare One, i-FILTER@Cloud, ALog Cloud, and SecurityScorecard. Revenue from product licensing, implementation, and managed services.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

Global Security Experts (GSX) is a Japanese cybersecurity education and services company that delivers an integrated portfolio spanning security awareness training (phishing simulation, e-learning, certification programs), vulnerability assessment (web, platform, IoT, smartphone, AI prompt, penetration testing), organizational security building (advisory, ISO/CSIRT support, vCISO), and managed security services (resale and operation of CrowdStrike, Exabeam, SentinelOne, Cloudflare One, Cybereason). Its proprietary platforms TrapMail and Securio anchor the training business, while its white-hat hacker team executes diagnostic and incident response work.

Product overview

Global Security Experts (GSX) operates as a cybersecurity education and services company offering an integrated portfolio of security training, vulnerability assessment, organizational security, and incident response services. The core training portfolio includes TrapMail (phishing simulation, #1 in Japan), SeculiO (cloud-based training platform with AI-powered auto-training), Mina Secure (IT/OT e-learning), SecuriST (domestic certification program), EC-Council Official Training (international certifications including CEH), CISSP/CC training, Secure Eggs, MicroHardening gamified training, and incident case study courses. The vulnerability assessment suite spans web application, platform, penetration testing, red team evaluation, WordPress, smartphone app, IoT, AI prompt, and design document reviews — all registered with IPA. GSX resells and manages security products including CrowdStrike Falcon, Exabeam SIEM, SentinelOne, Cybereason, Cloudflare One, and others, complemented by cloud security, emergency response, CSIRT/ISO certification support, and vCISO advisory services.

Differentiator

Problem solved

Functional benefit

Brands

• トラップメール (TrapMail): Domestic share No.1 targeted attack email training service for phishing awareness education
• セキュリオ (Securio)
• Mina Secure
• SecuriST (セキュリスト)
• EC-Council Official Training
• MicroHardening Enterprise Edition
• Tiger Team Service (タイガーチームサービス)

Products and services

• TrapMail (トラップメール) Phishing email simulation training service that sends simulated targeted attack emails to employees and tracks their response behavior. Japan market share leader in phishing simulation training with 11,000+ client companies and 7.6 million+ trained email addresses cumulatively.
• Smishing Simulation (携帯端末ショートメール詐欺訓練) SMS-based phishing simulation training that sends simulated attack messages to employees' mobile phones to test and educate responses to smishing attacks.
• Securio (セキュリオ) Cloud-based security training platform combining phishing simulation, e-learning, security awareness quizzes, phishing reporting, and AI-powered auto-training. Used by 2,500 companies as of March 2026. Available in AR Light, AR Standard, and AR Advanced plans.
• Mina Secure (IT Security e-Learning) SaaS-based information security e-learning service covering internet browsing, email, and SNS risks. Developed by GSX security consultants and aligned with IPA's annual Top 10 Information Security Threats.
• OT Mina Secure OT security e-learning service for factory employees covering industrial control system threats per IEC62443 and IATF 16949 guidelines, extendable to external contractors.
• SecuriST Certification Program (セキュリスト) GSX-founded information security certification program covering Certified Vulnerability Assessor, Certified Secure Web Application Designer, Zero Trust Coordinator, and AI Security Engineer tracks. Over 2,000 graduates; 99% trainee satisfaction rate.
• EC-Council Official Training Official EC-Council training distributor in Japan offering certifications including CCT, CND, CSA, CEH (Certified Ethical Hacker), CPENT, CHFI, CCSE, and CASE across 150+ countries.
• Official CISSP CBK Training ISC2-certified 5-day training covering CISSP CBK's 8 domains for international information security professional certification. Special price JPY 440,000 (tax included); exam fee separate at JPY 143,000.
• Official CC Training ISC2-certified entry-level cybersecurity certification training covering security principles, business continuity, access control, network security, and security operations. Pre-requisite for CISSP. Special price JPY 132,000 including textbooks and exam voucher.
• SecureEggs (セキュアEggs) Exercise-based security fundamentals training covering IT basics, network security, incident response, web application security, forensics, and DevSecOps. Designed as a gateway to global certifications like SANS GIAC and CISSP. JPY 160,000 per person for 2-day pack.
• MicroHardening: Enterprise Edition Gamified cybersecurity hardening training where participants defend a cloud-hosted e-commerce site from simulated attacks in 45-minute sessions. Recognized as IPA-supported information security specialist designated training. JPY 132,000 per person (minimum 8 participants).
• Actual Incident Case Studies Course (実録インシデント講座) On-demand course analyzing real major security incidents from third-party committee reports, covering attack methods, damage expansion factors, and recurrence prevention measures from the attacker's perspective. JPY 66,000 per year per user.
• SEA/J CSBM Course Security fundamentals course covering IPA's 16 information security skill map elements, aligned with ITSS Security Level 1. 2-day on-demand course at JPY 104,500 including exam voucher.
• GSX Vulnerability Diagnosis Services Comprehensive vulnerability diagnosis services including web application, platform/server, smartphone app, IoT, cloud, AI prompt, and design document review, delivered by white-hat hackers. Registered with IPA as conforming to information security service standards.
• Web Application Diagnosis Web application vulnerability diagnosis combining automated and manual testing to detect SQL injection, XSS, CSRF, and 26+ vulnerability categories. Registered with IPA as conforming to information security service standards.
• Web Vulnerability Diagnosis Quick Rapid, cost-effective web vulnerability diagnosis delivering 23 diagnostic items in as few as 3 days using tool-based scanning. Fixed price JPY 330,000 (tax included). Covers SQL injection, XSS, OS command injection, open redirect, and more.
• Platform Diagnosis Infrastructure vulnerability diagnosis for servers, OS, middleware, and network devices covering 90,000+ check items using black-box methodology. Available in Standard (manual), Light (tool-based), and One-Day Pack plans.
• Penetration Testing Red team-style penetration testing using actual attacker's methodologies to discover realistic attack paths. Covers reconnaissance, authentication attacks, privilege escalation, lateral movement, and data exfiltration. All engineers hold EC-Council CEH certification.
• Red Team Evaluation Simulated targeted attack exercise evaluating client network security defenses using IPA attack scenarios. Tests initial intrusion, infrastructure building, internal reconnaissance, and objective completion phases.
• WordPress Vulnerability Diagnosis Hybrid WordPress diagnosis combining automated tools and security consultant manual review. Detects version-related vulnerabilities, plugin/theme issues, configuration flaws, and unauthorized information exposure.
• Smartphone App Security Diagnosis Mobile app security diagnosis for Android/iOS using static analysis (APK/IPA file parsing) and dynamic analysis (runtime behavior testing). Tests for insecure data storage, insecure communication, and WebAPI vulnerabilities.
• IoT Security Diagnosis Wireless security diagnosis covering radio communication environments and IoT device hardware, firmware, and network layers. Available in Standard (non-destructive) and Deep (destructive hardware/firmware analysis) plans.
• AI Prompt Diagnosis (AIプロンプト診断) Security diagnosis for LLM-integrated web applications testing for OWASP LLM Top 10 threats including prompt injection, prompt leakage, data poisoning, and DoS. Covers 8 diagnostic categories across Defense-in-Depth framework.
• Design Document Review Security review of system design documents evaluating session management, authentication, access control, and business logic security. Detects vulnerabilities that commercial tools cannot find, such as session management flaws leading to impersonation attacks.
• Vulnerability Information Service Filtered vulnerability information delivery service providing only relevant CVE/CVSS data to clients. Offers Basic (Japanese JVN), Express (Japanese/English fast delivery), and Multi-Tenant plans with 1-hour delivery intervals.
• Security Risk Assessment & Risk Visualization Information security risk assessment using ISMS, NIST CSF, and cybersecurity management guidelines. Identifies high-impact risks, prioritizes countermeasures, and provides objective reporting covering domestic and overseas operations.
• Security Advisory Services Security advisory services provided by experienced GSX consultants to address security talent shortages and cyber attack challenges, with hospitality-focused support tailored to client needs.
• Ransomware Posture Assessment Service Ransomware resilience evaluation selecting critical systems and analyzing attack scenarios. Provides risk assessments and recommendations to minimize damage and strengthen preparedness.
• Incident Response Training Service Simulation-based training for information security incidents and contingencies, improving organizational adaptive response capabilities through practical exercises.
• Cyber Threat & Vulnerability Monitoring Service (ASM) Security monitoring service using ULTRA RED and ASM tools, providing tools and operational resources to address security operations challenges for small-to-mid-sized enterprises.
• ISO Certification Support (ISMS/ITSMS/QMS/EMS) ISO27001 (JISQ27001) certification acquisition and renewal support using GSX's proven consulting track record, covering ISMS, ITSMS, QMS, and EMS.
• CSIRT Building & Operations Support CSIRT (Computer Security Incident Response Team) establishment and operational support to help organizations respond quickly and appropriately to cyber attacks.
• Managed Security Services / MSS for AWS Managed security services with full-time monitoring of malicious attacks regardless of vendor, and AWS-specialized MSS covering attack detection, response, and incident preparedness.
• Emergency Response Service Security incident emergency response service supporting rapid root cause investigation, business recovery, and recurrence prevention when a security incident occurs.
• vCISO Support Services vCISO (virtual Chief Information Security Officer) support services providing information security consultation, risk management deployment, and security requirement definition support.
• IT Support Services IT support services to help organizations maintain and operate their security infrastructure.
• CrowdStrike Falcon Endpoint Protection AI-powered endpoint protection service based on CrowdStrike Falcon, monitoring global endpoint behavior logs in real-time to detect and notify targeted attacks. Used by GSX to protect 4,400 endpoints for Maxell.
• Exabeam SaaS SIEM Platform AI-powered next-generation SIEM platform for security operations, covering Collect, Detect, and Respond functions with behavioral analytics and automated response capabilities. Deployed for Sawai Group Holdings.
• SentinelOne Endpoint Protection AI-powered autonomous cybersecurity platform managing security across endpoints, cloud, identity, and data with real-time defense, detection, and response capabilities.
• Cybereason Endpoint Protection Comprehensive security solution covering the full attack lifecycle from pre-intrusion to post-intrusion response for organizations.
• Cloudflare One ZTNA Zero Trust Network Access (ZTNA) platform that unifies network and security through Cloudflare's global network, enabling secure and fast internet access with zero trust principles.
• i-FILTER@Cloud Secure Web Gateway Secure Web Gateway (SWG) using Digital Arts' proprietary White Operation to block access to malicious URLs and prevent targeted attacks and information leakage.
• ALogCloud Log Management Cloud log management service for cyber attack recovery and internal fraud prevention. GSX provides cyber attack recovery support using this service for clients lacking adequate log storage.
• SecurityScorecard Attack Surface Monitoring External attack surface monitoring platform that evaluates organizational and supply chain vulnerabilities from an attacker's perspective for continuous security posture monitoring.
• Shadan-kun Cloud WAF Cloud-based Web Application Firewall (WAF) protecting websites and web servers from attacks including information leakage, web defacement, and server downtime.
• Cloud Security Diagnosis Cloud security configuration diagnosis for M365, AWS, Azure, and GCP platforms that visualizes current settings and recommends corrections to secure configurations.
• Cloud Security Diagnosis for Box Third-party security diagnosis service for Box cloud storage to ensure secure usage by detecting configuration errors that could lead to information leakage.

Quantifiable outcome

• Continuous training reduces email phishing click rates by 50-67% (1/2 to 1/3 of initial rates)
• +4 more outcomes

Named customers10 records

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability9 records

Feature5 records

Partnerships

Nine partnerships are on record, tiered core and minor.

• NinjaOnecoreTechnology or Integration · 9 July 2026GSX distributes and implements NinjaOne, an integrated IT operations platform trusted in 140+ countries by over 40,000 companies. The partnership helps customers centrally manage operational burden and security risks in multi-device environments.
• Keyware Solutions Inc. (キーウェアソリューションズ)minorStrategic or Co-development Partner · 30 June 2026GSX provided AI security engineer education to 150 engineers at Keyware Solutions, marking the delivery of AI security training to a cumulative total of 500 individuals. The partnership supports security response capabilities and AI-empowered development security.
• Cross Head Corporation (クロス・ヘッド)minorGTM or Marketing Partner · 28 May 2026GSX partnered with Cross Head's information systems support services to assist with cybersecurity attack response. Cross Head's customers can access GSX security certification courses to improve service quality.
• CyberSTAR Co., Ltd. (株CyberSTAR)coreStrategic or Co-development PartnerCyberSTAR is a GSX subsidiary providing Security SES services (skilled engineer staffing). CyberSTAR deploys GSX's expertise in secure development and operations personnel across various sectors.
• CySeek Inc. (CySeek)minorStrategic or Co-development PartnerCySeek is a related company of GSX operating in the cybersecurity space, featured on the GSX website as a partner ecosystem member.
• EC-CouncilcoreStrategic or Co-development PartnerGSX is the master distributor of EC-Council official training programs in Japan. EC-Council credentials (CEH, CND, CCT, CPENT, CHFI, CCSE, CASE) are recognized globally, with 150+ countries, 300,000+ certified practitioners, and 200,000+ credential holders. GSX received EC-Council's Training Center of the Year Award in both 2021 and 2022.
• ISC2coreStrategic or Co-development PartnerGSX is an official ISC2 training partner in Japan, delivering CISSP CBK (5-day training) and CC (Certified in Cybersecurity) official courses. ISC2's CISSP certification is globally recognized with 15,000+ holders worldwide.
• SEA/J (Security-Education-Alliance Japan)coreStrategic or Co-development PartnerGSX is an authorized SEA/J training partner delivering the CSBM (Certified Security Basic Master) course, covering all 16 elements of IPA's Information Security Skill Map. The course is aligned with ITSS Level 1 in the information security domain.
• Hardening ProjectminorStrategic or Co-development PartnerGSX supports the Hardening Project, which develops cybersecurity competition formats and training programs. GSX delivers Micro Hardening: Enterprise Edition, a gamified cybersecurity training format derived from the project.

Scale indicators10 records

Recent moves6 records

Expansion highlights7 records

Others

• EC-Council: EC-Council is GSX's master distribution partner for cybersecurity certifications (CEH, CND, CPENT, CHFI, CASE) in Japan; included as an ecosystem peer that anchors the training side of GSX's business and shares content licensing economics.

Direct peers

• SecureWorks: SecureWorks is a global MDR/SOC and vulnerability management provider comparable to GSX's managed security and vulnerability assessment businesses; both target enterprise customers with subscription-based detection/response and assessment services.
• Internet Initiative Japan (IIJ): IIJ provides managed security services, SOC and consulting to Japanese enterprises, directly comparable to GSX's MSS for AWS, ULTRA RED/ASM and incident response offerings. Significant overlap in Japanese mid-market and enterprise MSS customer base.
• KnowBe4: KnowBe4 is the global leader in security awareness training and phishing simulation, directly comparable to GSX's TrapMail, Securio and Mina Secure platforms. Both monetize simulated phishing, compliance training and security awareness content for enterprise customers, making KnowBe4 the closest international analog.
• LAC Co., Ltd. LAC is a major Japanese cybersecurity services company offering vulnerability assessment, managed security, incident response and training — a near-direct domestic competitor across GSX's full portfolio. Comparable in Japanese enterprise/government customer base and service breadth.
• Proofpoint Security Awareness: Proofpoint's Security Awareness business competes head-to-head with GSX TrapMail/Securio in phishing simulation, awareness training and threat-informed education content. Both target large enterprises with bundled awareness + threat intelligence offerings.
• NRI Secure Technologies: NRI Secure is a Japanese pure-play cybersecurity consulting and managed services firm, overlapping with GSX's vulnerability assessment, security advisory, managed detection and incident response lines. Both serve large Japanese financial services and enterprise clients.
• S&J Corporation: S&J is a Japanese penetration testing and vulnerability assessment firm whose service portfolio closely mirrors GSX's Web Application Diagnosis, Platform Diagnosis and Red Team Evaluation lines. Strong domestic peer in offensive security services.

Broad incumbents

• Trend Micro (Japan): Trend Micro is a Japanese-founded global cybersecurity vendor with significant training content and managed security offerings; it competes with GSX in enterprise awareness training and overlaps on managed endpoint/cloud security in Japan.
• NTT Data (Security): NTT Data provides broad IT services including cybersecurity advisory, managed security and training for Japanese enterprises and government; a broader incumbent that competes with GSX in security consulting, ISO support and CSIRT building.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/@GSXInc
• LinkedInlinkedin.com/company/gsxmktg

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments3 records

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Global Security Experts