Naru Security launches AI web defence service ZeroTiCA Lite Web
In short
Naru Security (나루씨큐리티) said on 20 October that it is launching ZeroTiCA Lite Web, a subscription service that uses AI to analyse web server and service logs for signs of past breaches, current attacks and likely future targets. The company said it has already applied the service to some institutions that recently suffered breach incidents.
Read the full story 2 min read
Naru Security (나루씨큐리티) said on 20 October that it is launching an AI web defence service called ZeroTiCA Lite Web. The company describes it as a subscription breach-assessment service that uses AI to analyse large volumes of logs from companies' web servers and services, trace attack traces and anomalous behaviour, and continuously evaluate whether a breach has occurred and what the potential risk of attack is. [ 1 , 2 , 3 , 4 ]
The analysis covers four areas: verifying traces of past breaches, identifying the current attack state, predicting future attack targets, and determining whether an attack is AI-driven or automated. According to Chosun Ilbo, the service tracks attack attempts and behaviour in past web logs that may have led to actual breaches, identifies abnormal access and attacks in progress, analyses repeated attack patterns and service exposure to predict likely targets, and judges links to automated attacks such as those by AI agents. [ 2 , 3 , 4 ]
Bloter, Newsis and Chosun Ilbo reported the company as saying that attacks using AI automation to repeatedly probe web services and APIs for vulnerabilities are growing. They said that in environments where many systems are connected, new vulnerabilities can arise from the links between systems even when each security device works normally. Newsis added that attacks on financial and other major institutions have exploited such links. The company designed the service on the premise that an organisation may already have been breached. [ 2 , 3 , 4 ]
Newsis and Chosun Ilbo said the service extends the company's breach-assessment technology, previously centred on firewall logs, to the web. Bloter and Chosun Ilbo said web logs had mainly been used to find causes after an incident, and that the service applies AI and the company's own threat analysis model to them. The company said it applied the service to some institutions that recently had breach incidents and completed verification of the performance of its AI analysis technology. Newsis said it plans to expand the service on that basis. [ 1 , 2 , 3 , 4 ]
Bloter and Newsis said the company also aims to reach small and mid-sized firms that cannot run large security monitoring organisations. Bloter described the company as a security firm that analyses network traffic and logs and said it is expanding an AI-based security-as-a-service (SECaaS) business. [ 2 , 3 ]
Chief executive Kim Hyuk-jun (김혁준) said: "AI is a powerful tool not only for attackers but also for defenders." In Newsis and Chosun Ilbo he added that applying AI to cyber defence can build an autonomous defence system covering a wider range, and that the company will keep verifying organisations' threats and security status and lead the AI threat response market. [ 2 , 3 , 4 ]
Why it matters
The outlets present the launch as a response to attacks that use AI to probe web services and APIs. The documents give only the company's account of the service's performance, so its wider impact is not established.
Key facts
- Naru Security (나루씨큐리티) announced the AI web defence service ZeroTiCA Lite Web on 20 October. [ 1 , 2 , 3 , 4 ]
- It is a subscription breach-assessment service that uses AI to analyse large volumes of logs from companies' web servers and services. [ 1 , 2 , 3 , 4 ]
- The analysis covers four areas: verifying past breach traces, identifying the current attack state, predicting future attack targets, and determining whether attacks are AI or automated. [ 2 , 3 , 4 ]
- The company said it applied the service to some institutions that recently had breach incidents and completed verification of the AI analysis technology's performance. [ 1 , 3 , 4 ]
- The company also aims to serve small and mid-sized firms that cannot run large security monitoring organisations. [ 2 , 3 ]
Confirmed by several sources
- Naru Security announced ZeroTiCA Lite Web, an AI-based web defence service, on 20 October. [ 1 , 2 , 3 , 4 ]
- The service analyses large web logs with AI and is sold as a subscription breach-assessment service. [ 1 , 2 , 3 , 4 ]
- The company said it applied the service to some institutions that recently had breach incidents and finished verifying the technology's performance. [ 1 , 3 , 4 ]
Still unclear
- How well the service performs Only the company's own statement of completed verification is reported; no results are given.
- Which institutions the service was applied to The documents do not name them.
- Price and availability of the service The documents do not give pricing or a rollout schedule.
- Whether attacks on financial and other major institutions have exploited links between systems Only Newsis states this.