South Korean companies are accelerating moves into security-as-a-service (SECaaS, Security-as-a-Service), offering security solutions as platforms based on software-as-a-service (SaaS).

In the South Korean market, on-premises security has held a larger share than SaaS, leading security companies to focus their business more on on-premises than SECaaS. But the mood has changed. With cloud and AI spreading, more South Korean security companies are positioning SECaaS for the longer term.

AhnLab is speeding up its push into domestic and overseas security markets with SECaaS. MonitorLab has long run its business centered on SECaaS, and it is also reported that several other South Korean security companies will step up SECaaS businesses in South Korea.

ㆍAhnLab "We will transform into an AI-native security company and aim for 1 trillion won in sales" ㆍ"As the shift to N2SF accelerates, the public-sector market is opening its locks on security SaaS...we will take on the challenge"

Major South Korean telecom operators are also moving quickly. SK Telecom is expanding its AI cloud security business in cooperation with global security company F5. It plans to strengthen competitiveness by not only selling F5 security solutions but also taking charge of customer deployment and operations. Earlier, LG Uplus said on Sept. 4 it acquired managed detection and response (MDR) solutions specialist Pago Networks. It plans to internalize Pago Networks' threat detection, analysis and response capabilities, advance companywide security systems and expand security business for corporate customers.

ㆍSKT targets enterprise AI security with F5...expands integrated managed services ㆍLG Uplus takes over Pago Networks...advances companywide security systems

Other moves and issues surrounding security involving companies in South Korea and overseas are summarized below.

Naver Cloud plans to expand globally results secured through a security-focused AI foundation model project promoted at the government level. Naver Cloud CEO Yu-won Kim (김유원) said, "We recently declared the expansion of a global AI factory in cooperation with Nvidia. Going forward, we will have the AI security model operate at AI factories around the world and connect each base into a cyber security cooperation network." AI security specialist AIM Intelligence launched a global consortium, PASC (Physical AI Safety Consortium), to study safety issues across physical AI such as robots and autonomous systems.

ㆍ"To respond to AI-driven threats, global solidarity is key...we will also target overseas markets with a security-focused AI model" ㆍAIM Intelligence launches global physical AI safety consortium PASC

Genians developed an AI-based K-cybersecurity integrated management platform, the Nexus Framework, through a national task under the Ministry of Science and ICT-backed "Cybersecurity International Cooperation Foundation Technology Development" program. AI digital forensics specialist U-Rack will launch an AI-based automatic data-grade classification solution, DFAS Arc. JiranJigyo Security is stepping up its quantum-safe transition business and will step up an execution initiative for it, the Q-BRIDGE project.

ㆍGenians develops AI-based K-security integrated platform targeting Middle East market ㆍU-Rack launches AI-based data grade classification solution DFAS Arc...targets N2SF transition market ㆍJiranJigyo Security to push quantum transition business in earnest...also cooperates with various companies

Italian cybersecurity startup Exein raised $270 million in investment. Exein is also developing a foundation model for physical AI security, targeting launch next year.

ㆍItaly's Exein raises $270 million...develops physical AI security foundation model

The spread of AI agents is seen as effectively bringing an end to "security through obscurity" as a security strategy. Security through obscurity refers to an approach that sees systems as safe if their structure or vulnerabilities are simply hidden from outside. It is a way for companies to try to maintain security by not disclosing software code or network design, and it may have worked in the past, but it is difficult to make it work now when AI can quickly find vulnerabilities.

ㆍThe old saying "just hide it" no longer works...AI hacking shakes OT security

A certification system that assesses reliability and stability when private cloud companies provide services to public institutions will be unified into a single verification system aligned with the National Intelligence Service's National Network Security Framework (N2SF) from the second half of 2027. As a result, the Ministry of Science and ICT's Cloud Security Assurance Program (CSAP) will be abolished and the cloud security certification system will be integrated into the N2SF framework. Entry barriers for private cloud companies to obtain certification will also be somewhat lower than under CSAP, and global clouds are expected to gain relatively more room to operate in the public-sector market.

ㆍPublic cloud security certification to be overhauled...global companies expected to gain greater access

The Ministry of Science and ICT will overhaul cybersecurity systems across the ministry and its affiliated and subordinate agencies. It will subdivide security systems depending on the importance of work information and apply separate security standards to new technology areas such as AI and cloud. It will also codify procedures to preserve evidence held by external contractors when security incidents occur.

ㆍScience ministry to overhaul cybersecurity system...expands to AI, cloud and space