CyberStep Holdings' subsidiary CyberStep, Inc. and NAXA will jointly launch a security assessment service covering SaaS and cloud services. The service will launch on 1 November 2026, focusing on identifying vulnerabilities spanning multiple systems and reporting the priorities for addressing them.
CyberStep, Inc., a 100%-owned subsidiary of CyberStep Holdings, listed on the TSE Standard Market, and NAXA, Inc. will jointly launch a security assessment service covering SaaS, cloud services and business systems. The service will launch on 1 November 2026. Assessments will be conducted within a scope agreed with each customer, with services extending from formulating remediation plans and supporting the implementation of countermeasures through post-remediation reassessments.
The assessments will examine configuration and permission weaknesses spanning multiple systems from an attacker's perspective, and report the routes that could lead to unauthorised access to sensitive information and the priorities for addressing them. Assessments will be conducted within the scope agreed with each customer, with support provided from formulating remediation plans and implementing countermeasures through post-remediation reassessments.
The target environment is an enterprise environment integrating SaaS, cloud services, identity and access management platforms, and systems operated by external contractors. Risks covered will include excessive allocation of administrator privileges, inadequate external sharing settings, credentials that have not been changed for extended periods and the absence of audit logs. The service will also support assessments covering PHP2Shell-related vulnerabilities.