Services
The right protection
for your size and industry.
From solo founders to clinics that hold patient records and online financial services that move money, every organisation protects different things with different resources. Start with what you need, at a pace that works for you.
Stock photo for illustrationStart here
AI security trust check
¥0
Enter a URL and we check 12 items in about 30 seconds, including transport encryption (with post-quantum TLS) and browser-protection headers.
Run the free check
Spot assessment report
¥1,000 incl. tax · one time · no subscription
- Everything in the free check, plus an external look at exposed CMS/PHP versions and admin pages
- A plain-language fix guide (PDF): what is risky, who should fix it and how
- A request template you can forward to your web agency or hosting company
- One round of email Q&A about the report
Covers only what is visible from outside. This is not a penetration test.
Order the trial30-day free monitoring
¥030 days · up to 3 sites
You will need to confirm that you own the site (by placing a verification string).
- Uptime monitoring for your website and booking pages (every few minutes)
- Alerts when a site goes down or recovers
- A plain-language weekly status report
- Ends automatically after 30 days (we never charge you without asking)
Freelancers and startups
Enterprise-grade proof of trust, even for a small team.
Answer your customers’ security questionnaires with confidence. A few lines of code protect customer data with post-quantum encryption.
What is included
- SDK (up to 10,000 encrypt/sign operations a month)
- Monthly automatic checks with email results
- Security questionnaire answer templates
- Email support (reply within 2 business days)
Small and mid-size businesses
Notice AI attacks, even without an IT department.
Companies with few staff are increasingly targeted by automated AI attacks. Our defense AI watches behaviour around the clock and explains anything unusual in plain words.
What is included
- Defense AI monitoring and auto-blocking for APIs and logins
- Weekly automatic checks and a monthly report
- First-response advice during incidents (weekday business hours)
- An annual security report for management
Clinics, small hospitals and care facilities
Protect your website and booking pages without IT specialists.
Doctors and office managers are busy with patients. We take on the external checks, the configuration work and the monitoring, and explain any decision in plain language.
After CVE-2026-109618 and CVE-2026-109619 were disclosed, medical associations and providers took their sites offline as a precaution. Most clinic websites run on PHP (WordPress and similar), so it matters to agree in advance who applies the fix. Read the IPA alert (Japanese)
What is included
- External checks of your website and booking pages (exposed PHP/WordPress versions, public admin pages, etc.)
- Setting up Cloudflare (free plan) and its WAF for you
- Monitoring for defacement and downtime, plus a clear emergency procedure
- Mapping the web-related items of the MHLW cybersecurity checklist for medical institutions
Small and mid-size online finance: neobanks, payments, brokerage
Your cryptography move for the quantum era, from plan to code.
As Japan’s Financial Services Agency studies the move to post-quantum cryptography, the first step is an inventory of where each algorithm is used. We work with you from that inventory to a staged hybrid migration.
What is included
- Cryptographic inventory and prioritisation
- A migration plan aligned with NIST IR 8547 and the FSA’s study
- Hybrid PQC encryption of critical data with the SDK (dedicated environment)
- SLA, a named contact and help preparing audit documents
Partner program
For web agencies and IT support companies
If you look after many clinic or small-business websites, we offer a way to check and monitor them together, plus customer-facing explainers and emergency contact templates for incidents such as the PHP flaws.
- Bulk checks and monthly reports for multiple sites
- Customer-facing explainers (Japanese)
- Referral and resale terms by arrangement
Attacking AI, and the quantum computers to come.
Every plan includes two layers of protection.
Against today’s threat
See through AI that pretends to be human.
The defense AI analyses request speed, order and API call patterns, then alerts on or blocks bulk extraction by automated tools.
Against tomorrow’s threat
Stolen data stays unreadable for years.
Sensitive fields are encrypted in the browser with a hybrid of NIST ML-KEM (FIPS 203) and X25519. Only ciphertext reaches the database, and ML-DSA (FIPS 204) signatures reveal tampering.
Standards: NIST FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), SP 800-227 (KEM recommendations) and IR 8547 (transition to PQC, published October 2026). Backup algorithms HQC and FN-DSA (FIPS 206) can be added as soon as they become final standards.
Consultation is free
Not sure which plan fits? That is fine.
Tell us where you are, and we will suggest only what you need.
Prices are planned launch prices. Monthly plans exclude Japanese consumption tax; the spot assessment includes it. Details and prices may change.