Cloudbase Exposure Management Platform

Cloudbase Inc. is a Japanese security vendor based in Minato-ku, Tokyo, led by CEO Koya Iwasa. It helps Japanese enterprises find and fix misconfigurations and vulnerabilities across public clouds and on-premises systems, with the stated mission of creating an era in which Japanese companies change the world.

The Cloudbase platform is an agentless CNAPP/CSPM service for AWS, Microsoft Azure, Google Cloud and Oracle Cloud. It detects misconfigurations and vulnerabilities, prioritizes risks and provides step-by-step fix guides, now covering more than 200 misconfiguration items. Cloudbase Sensor extends the platform to on-premises servers and network devices with asset discovery, SBOM generation and SSVC-based prioritization, and the company also offers AI-assisted penetration testing. Customers include TOPPAN Holdings, Idemitsu Kosan, ENEOS, Kioxia and SBI Sumishin Net Bank.

• Multi-cloud CSPM: Detects misconfigurations across AWS, Azure, Google Cloud and Oracle Cloud without agents.
• Vulnerability scanning: Finds vulnerabilities in VMs, container images, Lambda and Azure App Service.
• Risk prioritization: Ranks findings and shows internet exposure so teams fix the riskiest issues first.
• Fix guides: Provides remediation instructions for more than 200 misconfiguration items.
• Cloudbase Sensor: Discovers on-premises assets, collects SBOMs and detects network device vulnerabilities.
• Compliance checks: Maps settings to CIS AWS benchmarks, AWS FSBP and PCI DSS v4.0.1.

A Japanese-invested manufacturer in Vietnam can monitor its AWS and Azure accounts together with factory servers for misconfigurations and outdated software. A digital bank can run PCI DSS and CIS checks continuously before audits. A retail chain can track which cloud services and web servers are exposed to the internet.

Security teams see misconfigurations and vulnerabilities from four major clouds and on-premises servers on one screen instead of checking each console. Agentless scanning shortens onboarding because no software must be installed on cloud workloads. Built-in fix guides for more than 200 misconfiguration items help operations staff remediate without deep cloud expertise. Compliance checks such as CIS AWS benchmarks, PCI DSS v4.0.1 and the Japanese FISC standard support audits in regulated industries.

Enterprises in Asia are running workloads on several public clouds at once, and misconfigured storage, exposed services and unpatched VMs remain a leading cause of breaches. Demand is shifting from separate CSPM and vulnerability tools to unified exposure management. Vietnamese banks, manufacturers and retailers moving to AWS, Azure and Google Cloud face the same need for continuous configuration checks.

Cloudbase Inc. is headquartered in Mita, Minato-ku, Tokyo, with capital of 770.76 million yen including capital reserve. It holds ISO/IEC 27001:2022 certification and AWS Foundational Technical Review approval, received a 2025 Good Design Award, joined Japan's NCPC cybersecurity community in 2026 and was runner-up in the DEF CON 34 Cloud Village CTF.