ToCSG
ToCSG is a Seoul-based Korean IT security firm (founded 2008) that develops proprietary endpoint and OT security products (BS series) and distributes global security platforms (StellarCyber, Nozomi), serving financial institutions, government agencies, and industrial enterprises across South Korea.
- Company typePrivate
- Founded2008
- HeadquartersSeoul, South Korea
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What ToCSG does
ToCSG is a Seoul-based Korean IT security specialist founded in January 2008 that provides internet-based security solutions, database management (DBMS) solutions, operational technology (OT) security, and IT consulting services. The company serves Korean enterprises with a vertically-integrated portfolio that combines proprietary products under the "BS (Beyond Security)" brand with value-added distribution of global security vendors. Proprietary offerings include BSOne (one-agent unified endpoint security, formerly QS-eCRM HomeEdition), BSD (malicious email simulation training), BSI (vulnerability management), BSU (USB port control with patented hardware-blocking technology), BSC (security incident management), and BSP (security process integration). The firm also distributes and integrates third-party solutions including StellarCyber Open-XDR, Nozomi Networks, TXOne, SSenStone, Digital Guardian, Trellix-FireEye, INISAFE Nexess, CubeOne (DB encryption), and WEEDS BlackBox Suite.
The company operates a multi-channel go-to-market model combining direct enterprise sales, a nationwide channel partner network (approximately 13 partners as of 2016 with a Seoul metropolitan-area system targeting public sector customers), and government procurement registration (조달청 나라장터). Revenue is generated through subscription/recurring license fees for proprietary and distributed security solutions, supplemented by professional services for Oracle database construction/tuning, vulnerability consulting, and solution deployment. Customer base spans financial services (Shinhan Card, NH농협손해보험, 한양증권, 메트라라이프생명, LG CNS), government (국가정보원 and 155 agencies using BSD for phishing training, plus multiple ministries), and industrial OT/ICS verticals.
ToCSG's business model reflects a hybrid proprietary-plus-distributor positioning: it builds core BS-series products in-house while leveraging Korean distribution agreements for global OT/IoT and XDR platforms (StellarCyber since 2020, Nozomi Networks since 2021) that it cannot replicate at scale. This is complemented by a Smart City/Building division established in 2017 via the acquisition of Smart&Plus, and consulting practices around Oracle DBMS that pre-date the security business. The firm is privately held by founder/CEO 임천수 with no disclosed external funding, indicating a bootstrapped growth profile.
ToCSG firmographics
Firmographics- Name
- ToCSG
- Legal name
- (주)투씨에스지
- Website
- https://tocsg.co.kr
- Company type
- Private
- Founded year
- 2008
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- ToCSG is a Seoul-based Korean IT security firm (founded 2008) that develops proprietary endpoint and OT security products (BS series) and distributes global security platforms (StellarCyber, Nozomi), serving financial institutions, government agencies, and industrial enterprises across South Korea.
- Ownership category
- akta.pro rank
ToCSG industry classification
Industry- Product category
- Cybersecurity Software
- NAICS
- Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511)
- SIC
- Services-Computer Programming Services (7371), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Endpoint & Device Management (UEM/MDM) Services (BPAEABAF)
- akta.pro secondary industries
- IT Operations, Event & Incident Management (NOC/SOC-to-ITSM) (BPAEAJAH), Identity, Access Control & Device Authentication Infrastructure (SSO/Directory, NAC) (EDAEAHAG)
Keywords
Where ToCSG is headquartered
LocationHeadquarters
- HQ city
- Seoul
- HQ country
- South Korea
- HQ region
- Asia
Offices1 record
Markets served
ToCSG business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- 보안 솔루션 매출 (Security Solutions): 자가 개발 보안 솔루션 (BS 시리즈: BSOne, BSD, BSI, BSU, BSC, BSP 등)과 파트너 솔루션 (Nozomi Networks, StellarCyber, Digital Guardian 등) 판매를 통한 매출 발생. 솔루션 라이선스 및 유지보수 포함.
- 컨설팅 및 구축 서비스 (Consulting Services): DB 구축, 관리 및 튜닝, 보안 컨설팅, 솔루션 도입 컨설팅等服务. 기술력이 풍부한 IT 전문가 그룹으로서의 컨설팅 역량 활용.
- 스마트시티 & 빌딩 사업 (Smart City & Building): 스마트빌딩 기획, 설계 및 시공, 시설자산관리시스템, 공간시각관리시스템, 에너지환경 관리시스템 구축 등 신사업 분야. 2017년 스마트앤플러스를 인수합병하고 스마트그린서비스(SGS)사업부를 신설하여 본격 진출.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Quote-based enterprise pricing |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels6 records
ToCSG product offering
Product offeringCore offering
ToCSG develops and distributes IT and OT security software solutions for Korean enterprises, governments, and financial institutions. Its proprietary BS series (BSOne, BSD, BSI, BSU, BSC, BSP) delivers unified endpoint protection, malicious email training, vulnerability management, USB control, incident management, and security policy automation through a single-agent architecture. The company also distributes global security products (StellarCyber Open-XDR, Nozomi Networks, TXOne, Trellix, APPSCAN, INISAFE Nexess, CubeOne, WEEDS) and provides Oracle DBMS consulting and integration services.
Product overview
ToCSG (투씨에스지) is an IT security and infrastructure solutions company offering a portfolio of proprietary and distributed security products. Their core offerings include the BS (Beyond Security) series of proprietary solutions comprising BSOne (unified PC security), BSD/Defense Trainer (malicious email training), BSI/Insight (vulnerability management), BSU/USB PortLock (USB control), BSC/Control Tower (incident management), and BSP/Policy Control (process integration), alongside distributed products including StellarCyber Open-XDR, Nozomi Networks, TXOne, and SSenStone for OT/IoT security, plus database solutions like CubeOne. The company operates on a platform-plus-modules architecture with specialized security solutions complemented by system integration and consulting services.
Differentiator
Problem solved
Functional benefit
Brands
- BSOne: One Agent 통합 PC 보안 솔루션 - 원 에이전트 올인원 보안 솔루션
- BSD (Defense Trainer)
- BSI (Insight)
- BSU (USB PortLock)
- BSC (Control Tower)
- BSP (Policy Control)
- QS-eCRM
- BS (Beyond the Security)
Products and services
- BSOne (One Agent Unified PC Security Solution) One Agent unified PC security solution providing all-in-one endpoint protection with single agent integration for security management, including DLP, ATP, USB control, and monitoring. Targets enterprise customers needing simplified endpoint security infrastructure.
- BSD (Defense Trainer) - Malicious Email Response Training Solution Malicious email response comprehensive training solution that provides scenario-based security awareness training using simulated phishing attacks to improve employee cybersecurity awareness. Includes 5 security consciousness levels, 4 difficulty levels, and 6 theme options.
- BSI (Insight) - Security Vulnerability Integrated Management Platform Security vulnerability integrated management platform that automates the entire process from policy establishment through diagnosis, result analysis, remediation, and final reporting across various vulnerability assessment tools.
- BSU (USB PortLock) - USB Port Control Solution USB port control solution that physically blocks USB ports and detects unauthorized access attempts to prevent illegal information asset leakage. Has filed patent for port blocking and detection technology.
- BSC (Control Tower) - Integrated Security Incident Management System Integrated security incident management system providing rapid ticket processing and fast response to security threats and attacks with real-time dashboard.
- BSP (Policy Control) - Security Process Integration System Security process integration system that centrally manages exception application processes for existing security solutions like document security, PC security, and groupware in one step with approval workflow management.
- QS-eCRM - Data Risk Integrated Management Solution Data risk integrated management solution that enables efficient data search, classification, and risk analysis across enterprise heterogeneous data stores, supporting identification, classification, analysis, management, security, and utilization of sensitive data.
- StellarCyber Open-XDR (Open Extended Detection and Response) AI-based integrated security analysis and monitoring platform providing comprehensive threat detection and response across network, endpoint, cloud, and applications using big data and AI analysis technologies. Integrates NTA, ML-IDS, NG-SIEM, UEBA, and SOAR capabilities.
- Nozomi Networks OT/IoT Security Solution OT/IoT security and anomaly detection solution providing visibility into operational technology assets and identifying suspicious activities in industrial control systems for manufacturing, power, and infrastructure operators.
- TXOne OT Zero Trust Security Solution OT Zero Trust security solution for protecting operational technology environments through network segmentation and access control.
- SSenStone One-way/Dynamic Authentication Solution One-way and dynamic authentication solution for OT and endpoint device security.
- APPSCAN Web Application Vulnerability Assessment Solution Web application vulnerability assessment solution for identifying security weaknesses in web applications.
- Trellix-FireEye APT Attack Response Solution APT attack response solution for detecting and responding to advanced persistent threats.
- INISAFE Nexess SSO Integrated Authentication Solution SSO integrated authentication and authority management solution for enterprise identity and access management.
- WEEDS BlackBox Suite Personal Information Access Log Management Solution Personal information access log creation and management solution for compliance with data protection regulations.
- CubeOne Database Encryption Solution Database encryption solution providing data protection for enterprise database management systems.
- Oracle DBMS Consulting and Maintenance Services Oracle database construction, management, tuning, maintenance, and consulting services for enterprise customers, including Oracle tuning consulting and DBMS operational management service.
- Security Consulting Services Security consulting, database consulting, and solution introduction consulting services delivered by IT specialists with deep technical expertise.
Quantifiable outcome
- 조직 구성원 보안 인식 수준 향상 (5단계 보안의식 레벨 측정)
- +2 more outcomes
Companies that use ToCSG
Customer profileNamed customers9 records
Segments4 records
Ideal customer profiles4 records
ToCSG technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature9 records
ToCSG partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered strategic and core.
- 한전KDN-美 노조미네트웍스 MOUstrategic한전KDN과 노조미네트웍스 간 산업제어 보안 비즈니스 협력 MOU 체결. 전력 등 인프라 산업 OT 보안 강화.
- Nozomi NetworkscoreNozomi Networks와 한국 총판 계약 체결. OT/IoT 보안 솔루션 (자산 가시화, 이상징후탐지) 국내 공급 및 사업 확대. 2021년 체결 이후 OT 보안 시장 출사표.
- StellarCybercore스텔라사이버와 차세대 통합보안분석·관제 플랫폼 'Open-XDR' 한국 총판 계약 체결. AI/빅데이터 분석 기술 기반 보안 솔루션 국내 공급.
- Sejong University Defense Cyber Security Research Center (세종대학교 국방사이버안보연구센터)strategic세종대학교 국방사이버안보연구센터와 업무협약 체결. 공동 기술연구개발 및 기술협력 강화. 2017년 10월 협약식 개최.
- Digital Guardiancore디지털 가디언과 공식 파트너십 체결. 차세대 엔드포인트 통합 플랫폼 (DLP, ATP, 데이터 분류/모니터링) 국내 제공. 단일 에이전트로 다양한 보안 기능 통합.
- Smart & Plus (스마트앤플러스)core스마트앤플러스 인수합병 (2017년). 스마트시티, 스마트빌딩, 부동산자산관리 등 신사업 추진 위한 기반 마련. 스마트그린서비스(SGS)사업부 신설.
Scale indicators7 records
Recent moves6 records
Expansion highlights5 records
ToCSG competitors and assessment
Company assessmentBroad incumbents
- CrowdStrike: Global endpoint, XDR, and SIEM-replacement leader (NASDAQ: CRWD) whose Falcon platform competes head-to-head with ToCSG's BSOne unified-agent endpoint stack and the StellarCyber Open-XDR portfolio in Korean enterprise deals.
- AhnLab: Korea's largest publicly traded cybersecurity vendor (KOSDAQ: 053800) with a broad portfolio spanning endpoint security (V3), network security, and cloud. Comparable to ToCSG as the dominant incumbent across endpoint and enterprise security in Korea, with similar financial-sector and government GTM.
Direct peers
- Penta Security: Korean web application security, encryption, and identity vendor with proprietary products like WAF and Cloudbric. Comparable to ToCSG's BSOne/Digital Guardian DLP stack and web app scanning (AppScan distribution) — same enterprise/government buyer profile.
- Somansa: Korean DLP and data security vendor with on-premise and cloud-based data leak prevention solutions. Direct competitor in the data-leak-prevention space where ToCSG's BSOne/Digital Guardian DLP also targets Korean regulated enterprises and public-sector customers.
- WINS: Korean SIEM and security operations platform vendor (KOSDAQ: 136540) offering log analysis, security analytics, and enterprise/government channel GTM. Direct competitor in Korea's enterprise security analytics space where ToCSG's BSC/StellarCyber XDR portfolio also competes.
- Genians: Korean network access control (NAC) and endpoint security platform vendor (KOSDAQ: 263860). Direct competitor in Korean endpoint/network-access protection where BSOne, INISAFE Nexess and BSU also compete, with similar BFSI and public-sector GTM.
- S2W: Korean XDR and threat intelligence vendor (KOSDAQ: 259200) building SaaS-based advanced security analytics. Direct competitor in the same Korean XDR market where ToCSG distributes StellarCyber Open-XDR, targeting similar enterprise buyers.
- Fasoo: Korean data security and DRM vendor (KOSDAQ: 150900) offering document encryption, data leak prevention, and enterprise content protection. Direct competitor in the Korean DLP and data-classification (QS-eCRM) market that ToCSG also targets.
- IGLOO Security: Korean identity-and-access security vendor (KOSDAQ: 067920) providing SSO/IAM and privileged access management. Comparable to ToCSG's distribution of INISAFE Nexess (SSO) and SSenStone authentication products, with similar public-sector/enterprise GTM.
- SECUI: Korean network security vendor (KOSDAQ: 049480) focused on next-generation firewalls, IPS, and network analytics. Comparable to ToCSG as a Korean security vendor with proprietary products, enterprise/government distribution, and a similar security-product VAR model.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
ToCSG social profiles
Digital presenceToCSG financial estimates
Financial estimateRevenue estimate
Valuation estimate
ToCSG leadership team
Management profileNumber of profiles
Profiles3 records
ToCSG subsidiaries and ownership
Company hierarchySubsidiaries1 record
ToCSG funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ToCSG M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ToCSG
What does ToCSG do?
ToCSG develops and distributes IT and OT security software solutions for Korean enterprises, governments, and financial institutions. Its proprietary BS series (BSOne, BSD, BSI, BSU, BSC, BSP) delivers unified endpoint protection, malicious email training, vulnerability management, USB control, incident management, and security policy automation through a single-agent architecture. The company also distributes global security products (StellarCyber Open-XDR, Nozomi Networks, TXOne, Trellix, APPSCAN, INISAFE Nexess, CubeOne, WEEDS) and provides Oracle DBMS consulting and integration services.
Is ToCSG a public or private company?
ToCSG is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was ToCSG founded?
ToCSG was founded in 2008. It employs 51 to 100 people.
Where is ToCSG based?
ToCSG is headquartered in Seoul, South Korea, in the Asia region.
How does ToCSG make money?
Three revenue lines are on record. 보안 솔루션 매출 (Security Solutions) is the primary driver. The others are 컨설팅 및 구축 서비스 (Consulting Services) and 스마트시티 & 빌딩 사업 (Smart City & Building).
Who are ToCSG's main competitors?
Broad incumbents on record are CrowdStrike and AhnLab. Direct peers are Penta Security, Somansa, WINS, Genians, S2W, Fasoo, IGLOO Security and SECUI.
Does ToCSG have an API?
No public API is recorded for ToCSG.
What industry is ToCSG in?
ToCSG's product category is Cybersecurity Software. Its primary akta.pro industry code is BPAEABAF, Endpoint & Device Management (UEM/MDM) Services, with a secondary code of BPAEAJAH, IT Operations, Event & Incident Management (NOC/SOC-to-ITSM). Its NAICS code is 54151 and its SIC code is 7371.