Skip to main content
Cyber Security Cloud, Inc.
Cyber Security Cloud, Inc.

CSC's Services

The Right Security for 
What Matters Most

What is the NIST Cybersecurity Framework?

The NIST Cybersecurity Framework (CSF) is a global standard guideline developed by the National Institute of Standards and Technology (NIST) for organizations to manage and improve cybersecurity risks.

The six functions of the NIST Cybersecurity Framework: Governance, Identification, Defense, Detection, Response, and Recovery.

The NIST Cybersecurity Framework has a central "Governance" function, surrounded by five functions: "Identify," "Defend," "Detect," "Response," and "Recover." The outer arrows indicate that these functions work together in a continuous manner.

CSC's Services

  • Cloud Fastener

    Fully ManagedSecurity Services
    for Public Clouds

    • Govern
    • Identify
    • Protect
    • Detect
    • Respond
    • Recover

    CloudFastener provides comprehensive cloud security operations support, including security policy development tailored to your organization, threat detection, vulnerability management, and alert remediation. Our security experts (TAMs) work closely with your team to support ongoing security operations, including cross-team coordination during remediation—tasks that can be difficult to manage with security tools alone.

  • WafCharm

    Automated WAF Managementfor Public Clouds

    • Protect
    • Detect

    Automate rule configuration and updates for AWS WAF, Azure WAF, and Google Cloud Armor, as well as IP blocklist management. Continuous countermeasures against evolving threats and technical support enhance website and web system security while reducing operational burden.

  • CSC Managed Rules for AWS WAF

    Security Rules Designed for AWS WAF

    • Protect
    • Detect

    This rule set for AWS WAF is designed and operated by security experts based on domestic and international threat intelligence. By adding it to your existing AWS WAF, you can strengthen your defenses against attacks that exploit vulnerabilities. We are one of only eight companies in the world to be certified as AWS WAF Managed Rule Sellers, and we currently provide services in over 100 countries and regions.

  • Shadankun

    Cloud-Based WAF Service

    • Protect
    • Detect

    Our cloud-based WAF detects and blocks unauthorized access attempts and cyberattacks targeting vulnerabilities, helping protect websites and web applications from data breaches, website defacement, and service disruptions. Our security engineers promptly update protection signatures to address newly discovered vulnerabilities, while our technical support team provides assistance in the event of false positives.

  • SIDfm

    Vulnerability Information Management Tool

    • Identify
    • Detect

    Automatically collects and stores vulnerability information for operating systems, applications, and network products worldwide. Clearly identifies vulnerabilities that require attention and recommended remediation steps, while streamlining remediation tracking. Provides timely information in Japanese on affected systems and remediation methods, helping organizations prioritize and address critical vulnerabilities.

  • Vulnerability Assessment Service

    Web Application Vulnerability AssessmentPlatform Vulnerability AssessmentAPI Vulnerability Assessment

    • Identify

    Our security experts assess vulnerabilities in web applications, platforms, and APIs using threat intelligence gathered through our WAF services and over 25 years of experience and expertise. We identify weaknesses that could be exploited by attackers, helping organizations understand their risks and prioritize remediation efforts.

  • AI Application Vulnerability Assessment

    • Identify

    We assess vulnerabilities and potential exploitation risks across AI applications, including LLMs, RAG, AI agents, MCP, and tool calling. Beyond identifying risks, we provide clear remediation priorities and actionable recommendations.

  • AI Security Remediation and Implementation Support

    • Identify
    • Protect

    Our AI security and development experts work together to address identified vulnerabilities, turning security findings into actionable remediation plans. We provide end-to-end support, from designing solutions to implementing fixes.

  • AI Governance Assessment

    • Govern
    • Identify

    Gain visibility into how AI is used across your organization, including who is using which tools and for what purposes. Identify security and governance risks and prioritize the issues that need attention.

  • AI Governance Policy ＆Guideline Development

    • Govern

    Move from rules that restrict AI use to guidelines that enable safe adoption. We help define when AI can be used, what information can be shared, and when approval is required. By aligning the needs of management, business teams, IT, security, and legal departments, we develop practical guidelines that help organizations manage risks without slowing AI adoption.

CSCGroup Products ＆Services

  • AI MONBAN, Datasign Co., Ltd.

    AI Governance Platform

    • Govern
    • Identify
    • Protect
    • Detect

    An integrated governance platform that helps organizations securely adopt and manage AI agents. It provides visibility, control, and auditing of AI-related data flows, from automated prompt masking to integrations with external SaaS applications and internal data sources.

  • webtru (WebTrue) - Datasign Co., Ltd.

    Consent Management Platform
     (CMP)

    webtru automates consent management to help organizations meet privacy regulatory requirements, including Japan's Telecommunications Business Act, the EU's GDPR, and California's CPRA.

  • AI Optimeter, Datasign Co., Ltd.

    AI Traffic Analytics Tool

    AI Optimeter provides visibility into website traffic referred by LLMs such as ChatGPT and Gemini, as well as AI-generated brand recommendations. It categorizes traffic into three types—human visitors, AI bots, and AI-referred visitors—helping organizations optimize their marketing performance in the AI era.

  • Please tell me the URL. Datasign Co., Ltd.

    Detect Third-Party Ad Tags and Analytics Tools

    This browser extension lets you quickly identify web services used on the page you're visiting, including third-party advertising tags and analytics tools.

CSC Technology

The Technology Behind CSC

  • AI-Powered Web Attack Detection

    Cyneural

    Cyneural is a deep learning-based AI engine for detecting web attacks. It uses a feature extraction engine built on insights gained from extensive research into web traffic and attack techniques. By combining multiple machine learning models, Cyneural can quickly detect common and previously unknown attacks while also identifying false positives.

    Cyneural

  • AI-Powered Automated WAF Rule Management

    WRAO

    WRAO is our patented technology for automating WAF rule management, helping reduce operational costs. It analyzes website traffic data to learn normal access patterns and predict attack characteristics specific to each website. This enables the automatic selection of flexible WAF rules tailored to the web application's traffic patterns and predicted attack characteristics.

    WRAO

  • Cyber Threat Monitoring Powered by World-Class Threat Intelligence and Security Researchers

    Cyhorus

    The need for faster collection, analysis, and evaluation of cyber threat intelligence—and its integration into security signatures—continues to grow. Cyhorus is a specialized team of CSC security researchers that works with an Israeli threat intelligence company. By analyzing intelligence from this partnership, publicly available information, and extensive attack logs collected by CSC, the team identifies threats that require action and handles the entire process, from threat assessment to security signature development.

    Cyhorus