サイバーステップ株式会社 and NAXA株式会社 will launch a security assessment service on 1 November 2026 to identify vulnerabilities from an attacker’s perspective. The service covers web services, cloud services, SaaS and authentication infrastructure, and supports customers through the development of remediation plans and reassessment.
サイバーステップ株式会社 and NAXA株式会社 will jointly launch a security assessment service that verifies attack paths from an attacker’s perspective. The service is scheduled to launch on 1 November 2026 and will investigate weaknesses in configurations and access privileges across multiple systems, reporting attack paths that could lead to unauthorised access to critical information and prioritising countermeasures.
The service includes confirming points of contact with the target systems, verifying paths to critical information, preparing reports for technical personnel and management, developing remediation plans and conducting reassessments. The assessments will be carried out within the scope approved by the customer.
The background to the service includes ransomware attacks ranking first and supply-chain attacks second among the Information Security 10 Major Threats for organisations, as well as the need to address the critical PHP vulnerability disclosed in 2026, known as PHP2Shell.
The target customers are companies using SaaS, cloud services and business systems. The service is primarily intended for companies with multiple cloud integrations, companies handling confidential information and companies with numerous connections to external contractors. The assessment methods and reporting content will be improved going forward.