ProAction

What ProAction does

ProAction Corporation (株式会社プロアクション) is a privately held boutique IT and security consulting firm founded in 2008 by Hajime Miyazaki and headquartered in Shinjuku, Tokyo. The firm operates with a small senior-consultant model — approximately six named consultants, all holding top-tier certifications such as CISA, IT Strategist, PMP, and ITIL — and delivers professional services across four core lines: IT Consulting, Security Consulting, System Integration, and IT Training/Education. Its service portfolio has been extended with specialized packages including IoT Security Consulting (launched December 2018), GDPR Compliance Support (April 2018), and an AI Safe Business Introduction and Operational Rule Creation Package (October 2025), each delivered on a project- or retainer-based engagement model with proposal-driven pricing and free initial consultations.

ProAction's core technology consists of proprietary evaluation and audit methodologies refined over 16+ years of engagements with central government ministries, government-affiliated financial institutions, and independent administrative corporations. The firm's risk-analysis-driven security framework covers policy, process, and technical dimensions rather than focusing solely on technical penetration testing, and the team has demonstrated capability on system projects exceeding ¥100 billion in scale at the client level. Its independence from vendor capital relationships enables objective, vendor-neutral advisory work. The firm holds registration in the Ministry of Economy, Trade and Industry (METI) Information Security Audit Company Ledger (2018, re-registered 2019), which is a prerequisite credential for bidding on Japanese government security audit engagements.

The firm operates a sales-led go-to-market targeting mid-market and enterprise clients, government agencies, and financial institutions, with demand generated through content marketing (security blog, white papers in Nikkei CrossTech Active), private seminars, earned media, and direct outreach. Geographic footprint is primarily Japan (Tokyo, Toyama satellite office established 2019 for Hokuriku region) with a single international channel — the TOMATECH alliance in Jakarta, Indonesia — supporting Southeast Asia government training and AI/IoT consulting. ProAction has not raised external funding and remains founder-led.

Name

ProAction

Legal name

株式会社プロアクション

Website

https://proaction.co.jp

Company type

Private

Founded year

2008

Operating status

Operating

Short description

ProAction Corporation is a privately held Tokyo-based boutique IT and security consulting firm founded in 2008, serving government ministries, financial institutions, and enterprises with proprietary audit methodologies, security diagnosis, IoT and AI safety consulting, and system integration services.

Ownership category

akta.pro rank

Product category

IT Consulting Services

NAICS

Other Management Consulting Services (541618), Computer Systems Design and Related Services (54151), Other Scientific and Technical Consulting Services (54169), Custom Computer Programming Services (541511)

SIC

Services-Management Consulting Services (8742), Services-Computer Programming, Data Processing, Etc. (7370), Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)

Keywords

• IT consulting services
• Cybersecurity consulting
• Information security audit
• System integration services
• AI safety consulting

Headquarters

HQ city

Tokyo

HQ country

Japan

HQ region

Asia

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D

Revenue model

1. IT Consulting Services: Professional consulting services covering IT strategy formulation, IT investment optimization, system planning, and project management support. Services are priced on a project or retainer basis, with engagement scoping determined through initial consultation. Billed through proposal-based consulting contracts.
2. Security Consulting Services: Security diagnosis, security management strengthening, targeted cyberattack countermeasures, IoT security consulting, and GDPR/privacy compliance consulting. Includes security seminars and training programs. Revenue generated through consulting project fees and training engagement fees.
3. System Integration: Business system design, construction, network and infrastructure strengthening. System development project management and support services. Billed as professional services or project-based fees.
4. IT Training and Education: IT literacy improvement, security training, and Office product study sessions. Training programs delivered by top-tier consultants with real-world project experience. Revenue from training engagement fees.
5. AI Safety Implementation Package: A bundled consulting package for safe AI business implementation, including policy formulation, operational rule documentation, and training. Offered as a structured 3-step service: AI safety start set, AI operational rulebook creation, and AI operation education. Delivered as a consulting project engagement.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels7 records

Core offering

ProAction is a boutique IT consulting firm delivering four core service lines: IT consulting (strategy, system planning, project management, IT investment optimization), security consulting (security diagnosis, policy establishment, targeted cyberattack countermeasures, GDPR/privacy compliance), system integration (business system design, construction, network and infrastructure strengthening), and IT training/education. The firm also delivers specialized consulting packages including AI safety business introduction, IoT security consulting, zero trust security, and DX support for SMEs, targeting government agencies, financial institutions, and enterprises.

Product overview

ProAction is an IT consulting company offering four core services: IT Consulting, Security Consulting, System Integration, and IT Training/Education. The portfolio includes specialized consulting packages such as AI Safety Implementation, IoT Security Consulting, GDPR Compliance Support, Zero Trust Security, Free Security Diagnosis, Information Security Policy Establishment, Privacy Mark Certification Support, and DX Support for SMEs. These services are delivered through professional consultants and focus on government agencies, financial institutions, and general enterprises.

Differentiator

Problem solved

Functional benefit

Products and services

• IT Consulting (ITコンサルティング) IT consulting services covering IT strategy formulation, system planning, project management support, and IT investment optimization. Targeted at enterprises, government agencies, and financial institutions seeking to align IT investments with business objectives.
• Security Consulting (セキュリティコンサルティング) Comprehensive security consulting including security diagnosis, security management strengthening, targeted cyberattack countermeasures, IoT security, GDPR/privacy compliance, and information security policy establishment. Targeted at organizations seeking to improve security posture and regulatory compliance.
• System Integration (システムインテグレーション) System integration services covering business system design, construction, network and infrastructure strengthening, from planning through implementation. Targeted at enterprises requiring end-to-end system delivery and infrastructure projects including ultra-large-scale deployments.
• IT Training/Education (IT研修・教育) IT training services covering IT literacy improvement, security training, and technical skills development from basic to advanced levels. Includes Office product study sessions and AI operation education. Targeted at corporate clients seeking to upskill their workforce.
• AI Safe Business Introduction and Operational Rule Creation Package (AIの安全な業務導入と運用ルールづくりパッケージ) A bundled three-step consulting package for safe AI business implementation: AI safety start-up, AI operational rulebook creation, and AI operation education/stabilization. Targeted at enterprises seeking to safely deploy generative AI and other AI technologies in business operations.
• IoT Security Consulting (IoTセキュリティコンサルティング) IoT device security vulnerability diagnosis and countermeasures support covering routers, car navigation, web cameras, surveillance cameras, multifunction devices, factory equipment, VR devices, and payment card readers. Includes firmware analysis, communication protocol testing, and hardware security assessment. Targeted at IoT device manufacturers and operators.
• GDPR Compliance Support Services (GDPR対応支援サービス) GDPR compliance consulting services with Basic plan (current state analysis and To-Do clarification) and Advanced plan (end-to-end support from diagnosis through planning, implementation, and operationalization). Targeted at Japanese companies expanding into Europe or handling EU personal data.
• Zero Trust Security Consulting (ゼロトラストセキュリティ) Zero trust security consulting based on the NIST SP800-207 framework, addressing modern security challenges in remote work and cloud environments. Targeted at organizations transitioning from perimeter-based to zero trust security architectures.
• Free Security Diagnosis (セキュリティ無料診断) Free security diagnostic services including information security diagnosis, network security diagnosis, and information leakage prevention diagnosis. Limited to first 5 companies per month with free on-site visit. Targeted at mid-market and SME companies seeking initial security assessment.
• Information Security Policy Establishment (情報セキュリティ規程整備) Information security policy establishment and implementation support services, including operational verification of security measures against information leakage and defense against sophisticated security threats. Targeted at organizations requiring formal security policy frameworks.
• Privacy Mark Certification Support (プライバシーマーク認証支援) Privacy mark certification support services for organizations seeking personal information protection certification under Japan's PrivacyMark system. Targeted at organizations handling personal information that require formal certification.
• DX Support for Small and Medium Enterprises (中小企業のDX支援) Digital transformation support services for small and medium enterprises, including value stream mapping and strategic planning. Targeted at SMEs seeking to develop DX strategy grounded in information systems foundations rather than mere tool adoption.

Quantifiable outcome

• Cost reduction of approximately 20% (several billion yen scale) achieved on large-scale system projects
• +4 more outcomes

Named customers8 records

Segments5 records

Ideal customer profiles5 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature3 records

Partnerships

Three partnerships are on record, tiered core and minor.

• TOMATECHcoreStrategic or Co-development Partner · 1 November 2018Indonesia-based alliance partner serving as ProAction's exclusive representative in Southeast Asia. Located at The Promenade Building 2nd floor, Jl. Buncit Raya no 98, Jakarta Selatan, Indonesia. Supports government agency training programs and AI/IoT consulting engagements in the region.
• EdTech Partners (柴田氏, CEO)coreStrategic or Co-development Partner · 1 November 2018Business partner who delivered AI/IoT training to Asian government officials as part of a JTEC (海外通信・放送コンサルティング協力) program. Successfully conducted a training session titled 'Wireless networks and sensors - IoT/AI solution for various social problems' for government officials from Asian countries.
• JTEC (海外通信・放送コンサルティング協力 / Japan Telecommunications and Broadcasting Consulting Cooperation)minorStrategic or Co-development Partner · 1 November 2018Organization that commissioned ProAction to deliver AI/IoT training to Asian government officials. ProAction served as the final-day training provider for JTEC's 'Latest Wireless Technology Trends for Efficient Use of Radio Spectrum' program.

Scale indicators6 records

Recent moves7 records

Expansion highlights6 records

Broad incumbents

• Internet Initiative Japan (IIJ): Major Japanese internet/network and security services provider offering security consulting, managed security, and diagnostic services to enterprises and government — overlapping with ProAction's enterprise security consulting portfolio.
• Accenture Japan: Global IT consulting and SI incumbent in Japan covering strategy, security, and large-scale system integration — competes against ProAction for enterprise transformation, security, and SI mandates in Japan.
• SCSK Corporation: Major Japanese IT services company providing system integration, consulting, and security services to enterprise and government clients — comparable to ProAction's SI and IT consulting offerings at much larger scale.
• Deloitte Tohmatsu Risk Advisory: Japan arm of global Big 4 advisory — competes for the same government, financial, and enterprise IT GRC and security consulting engagements as ProAction, but at much larger scale and broader service portfolio.
• ABeam Consulting: Japan-origin global consulting firm providing strategy, IT transformation, and security advisory — overlapping with ProAction's enterprise IT consulting and DX support offerings in Japan.
• KPMG AZSA LLC: Japan member firm of KPMG providing audit, tax, and advisory including IT security consulting and risk advisory — comparable to ProAction's information security audit work, particularly for regulated clients.

Emerging players

• Trustwave: Global cybersecurity advisory and managed detection services firm — comparable to ProAction on independent security consulting, security diagnostics, and incident response advisory, with international footprint.

Direct peers

• LAC Co., Ltd. Tokyo-headquartered Japanese cybersecurity firm offering security diagnostics, monitoring, and consulting — directly comparable to ProAction's security diagnosis, IoT security consulting, and managed security style engagements.
• NRI Secure Technologies: Japan-based security consulting arm of Nomura Research Institute, offering information security consulting, managed security, and audit services to financial institutions and government agencies — directly comparable to ProAction's core security consulting offering with a similar government/financial vertical focus.

Regional players

• MUFG Consulting: Japanese consulting firm with strong financial-institution credentials providing IT strategy, system integration, and security consulting — overlapping with ProAction's financial-sector IT consulting and security engagements in the Japan market.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ProAction