Penetration Testing for Modern Architectures,
by World-Class Experts.

Based in Tokyo, our penetration tests are delivered by experienced, world-class security experts equipped with cutting-edge security AI. Our ability to uncover critical vulnerabilities in your Web, Cloud and AI Applications is unmatched, no matter the complexity of your systems.

Led by World-Class Experts in Offensive Security

Our globally recognized experts are more than just certified. In addition to credentials such as OSCE3 certifications and numerous wins in CTF, our track record includes consistently reporting critical vulnerabilities to giants like Meta, Microsoft, Cloudflare, and GitHub. With us, you will get direct access to the forefront of offensive security.

Comprehensive Security Tests for Your Entire Stack

  • Web Applications / APIs

    Our focus includes complex business logic, modern authentication and authorization (Passkey, IDaaS, OIDC), and threats unique to technologies like GraphQL and SSR.

  • Mobile Applications (iOS & Android)

    Our comprehensive mobile app testing covers everything from client-side vulnerabilities and API weaknesses to advanced assessments like reverse engineering and anti-cheat analysis for mobile games.

  • Cloud Platforms

    Our cloud testing analyzes your infrastructure in the context of your application, identifying critical misconfigurations, IAM vulnerabilities, container escapes (Docker/Kubernetes), and other cloud-native threats that pose genuine business risks.

  • LLM & AI Applications

    We test LLM applications for critical risks like prompt injection and data poisoning, with support for frameworks like LangChain. We also identify design-level risks in technologies that extend LLMs, such as RAG, MCP, and Agentic AI.

Expertise Across a Wide Range of Technologies

Discover the Quality of Our Reports

You can download a sample report by completing the form below.

Meet the Experts

  • RyotaK

    Head of Security Research

    RyotaK is a security researcher known for his various groundbreaking cybersecurity research. His series of work has revealed critical vulnerabilities of cloud service providers including GitHub, Cloudflare, and other essential engineering platforms such as Homebrew and PyPI. He’s also known for participating in various live hacking events, winning multiple awards, and reporting vulnerabilities to many leading companies such as Google, Cloudflare, GitHub, Salesforce, and Microsoft.

  • Ryota Shiga

    Co-CTO

    Ryota Shiga is a well-versed security expert. He has revealed 15 critical vulnerabilities for the Linux Kernel and VMM (KVM/VirtualBox) during the 18 months of his research at GMO Flatt Security, all while directing over 100 web penetration testing projects, proving not only his extensive security knowledge but his leadership skills as well. He has also won a prize in Pwn2Own 2021 for reporting a privilege escalation in Ubuntu.

  • Takashi Yoneuchi

    Co-CTO

    Takashi Yoneuchi is one of the leaders of the cloud and application security industry in Japan with over 7 years of experience educating and motivating people on this topic. He is the author of "Web Browser Security" published in 2021, and more, with thousands of Japanese readers. He led Team Asia at the International Cybersecurity Challenge 2023 as Head Captain. He is also a member of the review board for CODE BLUE, the largest cybersecurity conference in Japan.

  • Shuta Ide

    Senior Security Engineer

    Shuta Ide is an offensive security specialist focusing on web applications, who has proven his elite skills by securing numerous first-place victories in CTF competitions, including SECCON CTF (domestic) in 2022 and 2024, the Japan Ministry of Defense CTF in 2021 and 2025, pbctf 2020, and IERAE CTF 2024.

Featured Projects

View All Posts

Takumi: Our AI-Powered Augmentation Engine

"Takumi" means "artisan" or "craftsman", and is a popular name for boys in Japan.

Takumi achieved a 96.2% successful detection rate on our benchmarks, uncovering vulnerabilities that traditional tools typically miss, such as broken authZ and logic bugs.

Takumi has a proven record of finding zero-days in major projects like Next.js and Vim.

You can introduce Takumi to your team for only $500/month.

Learn more

Pricing Examples

  • Quick Assessment

    Analysis with Takumi + Engineer Review

    $3,500

  • Standard Pentest

    1-Week Manual Testing

    $20,000

  • Comprehensive Pentest

    2-Week Manual Testing

    $40,000