Securify Attack Surface & Vulnerability Platform

3-shake Inc. is a Japanese technology company founded in January 2015 and headquartered in Ginza, Chuo-ku, Tokyo, with about 140 employees. Besides SRE consulting and data platforms, it builds Securify to help organizations find security risks in their internet-facing systems and move remediation forward without large in-house security teams.

Securify is a cloud security platform that brings several checks into one console. Securify ASM discovers public-facing assets from domains, IP ranges and cloud accounts and flags unmanaged exposure. Web vulnerability diagnosis scans websites and APIs, including authenticated pages, REST and GraphQL APIs and single-page apps, and gives evidence and fix examples. A CSPM module monitors public settings and permissions across six cloud platforms, and an SBOM module matches components in repositories and container images to known vulnerabilities. The vendor reports more than 400 customers in finance, manufacturing and IT, including NTT Data, ROHM and Yanmar Holdings.

• Attack surface management: Discovers public assets from domains, IPs and cloud environments and flags unmanaged exposure.
• Web and API vulnerability scanning: Tests authenticated pages, REST and GraphQL APIs and single-page apps.
• Cloud posture management: Monitors public settings and permissions across six cloud platforms.
• SBOM management: Extracts components from repositories and container images and matches known vulnerabilities.
• Remediation tracking: Tracks status and comments for each finding and exports asset lists to CSV.
• Scheduled diagnostics: Runs recurring scans and produces PDF reports for management and auditors.

A regional bank can discover all subdomains and web services exposed to the internet and scan them on a schedule. A retailer running many campaign websites can find outdated or forgotten sites before they are exploited. A Japanese-invested manufacturer in Vietnam can check cloud settings and container images used by its factory systems.

Organizations get one inventory of internet-facing domains, IPs and cloud assets, reducing blind spots from forgotten or unmanaged systems. Scheduled web and API scans replace part of costly manual assessments and can run before each release. Findings come with evidence, fix examples and PDF reports, so development teams can act without security specialists. Status tracking and comments per finding help teams follow remediation to closure.

Attackers increasingly target forgotten subdomains, test servers and exposed cloud services, which has made external attack surface management a fast-growing category. Regulators and auditors also expect regular vulnerability assessments of web systems and APIs. Vietnamese banks, retailers and manufacturers with many websites, mobile backends and cloud services need continuous discovery rather than one-off penetration tests.

3-shake Inc. was founded in January 2015, is headquartered in Ginza, Chuo-ku, Tokyo and has about 140 employees. Its other businesses include Sreake (SRE consulting), Reckoner (data platform) and Relance (engineering HR). Securify has been rated Leader in the vulnerability assessment category of the ITreview Grid Award for 11 consecutive terms.