Macnica and GMO Cybersecurity by Ierae launch "monosec360," a platform that provides comprehensive support for product security in small and medium-sized manufacturing companies. It supports low-cost, rapid deployment, from training and system construction to practical operation.

Macnica (Headquarters: Yokohama City, Kanagawa Prefecture, Representative Director and President: Kazumasa Hara, hereinafter referred to as Macnica) and GMO Cybersecurity by Ierae Co., Ltd. (Headquarters: Shibuya-ku, Tokyo, Representative Board Director CEO: Makoto Makita, hereinafter referred to as GMO Cybersecurity by Ierae) will begin offering "monosec360," a service platform that comprehensively supports the establishment, practical operation, and training of quality assurance systems necessary for product security in small and medium-sized manufacturing companies, starting September 29, 2026 (Tuesday). Amidst the increasing strengthening of regulations concerning cyber resilience, we will provide practical support that enables low-cost and rapid product security enhancement for manufacturing companies that lack human resources and expertise. Furthermore, we plan to expand functions in the future, such as SBOM management and visualization, and vulnerability monitoring and analysis support using AI, to promote the automation and efficiency of product security operations in small and medium-sized manufacturing companies.

■Background
In recent years, regulations and industry guidelines in various countries and regions, including the EU Cyber Resilience Act (CRA) ^*1, have been strengthened, and their scope has expanded from individual products to the entire supply chain. As a result, even small and medium-sized manufacturers that do not directly export overseas are now required to comply with security requirements and establish vulnerability management systems through their trading partners, making product security ^*2 a critical business issue.
However, for small and medium-sized manufacturing companies, securing specialized personnel, accumulating security knowledge and know-how, and securing budgets are difficult, making it challenging to implement regulatory compliance and develop systems in-house.
In response to this situation, Macnica, Japan's largest semiconductor trading company with a broad customer base in the manufacturing industry and a track record in product implementation and operational support consulting cultivated through its cybersecurity business, and GMO Cybersecurity by Ierae, which possesses advanced expertise in product security, entered into a partnership in August 2025. Together, they have been considering and developing practical support methods that can be implemented in the field, enabling product security activities, including the establishment of PSIRTs ^*3, to be realized quickly and at low cost.

■ About "monosec360"
"monosec360" is a product security support service platform for small and medium-sized manufacturers, which templates and tools the best practices accumulated by the expert consultants of both companies while supporting corporate product security. It systematically organizes educational content, templates for system construction, practical support tools, and information distribution according to the four phases of product security activities: "LEARN," "BUILD," "PRACTICE," and "IMPROVE," and provides them as a package on the web.

<Overview of monosec360>

<Features>
1. Providing best practices based on extensive support experience.
The knowledge and best practices cultivated through product security support have been systematized into templates, procedures, and educational content, supporting the rapid establishment of product security and PSIRTs, including compliance with IEC 62443*4 and CRA.

2. Streamlining and standardizing product security operations
The platform streamlines and standardizes processes such as maturity assessment, threat analysis, issue management, and PSIRT personnel training, supporting the elimination of reliance on individual expertise and promoting continuous activities.

3. Ongoing support from consultation services and consultants
Our expert consultants provide support for practical challenges such as vulnerability management, incident response, and legal compliance, offering hands-on assistance based on their practical experience.

By utilizing this platform, companies can efficiently establish product security systems and consistently manage everything from regulatory compliance to vulnerability management and continuous improvement. By reducing reliance on individual expertise and building a system that can continuously respond to changing regulations and cyber threats, it supports improved product reliability and business continuity.

■Future developments
Going forward, "monosec360" will further enhance its content and functions, including SBOM management and visualization capabilities and vulnerability risk assessment functions, to strengthen product security support and contribute to the business continuity and enhanced competitiveness of domestic manufacturers.

■ Comment from Hikohiro Hayashi, Board Director and CGO of GMO Cybersecurity by Ierae Co., Ltd.
We are very pleased to announce that, in collaboration with Macnica, a leader in the product security field, we are now able to launch "monosec360," a product security support service platform for small and medium-sized manufacturing companies.
With the proliferation of IoT and the increasing complexity of supply chains, cyber threats have become more sophisticated than ever before, as virtually every product is connected to the internet. In particular, with strengthening regulations in various countries, including Europe's Cyber Resilience Act (CRA), security measures that cover the entire product lifecycle, from upstream development to downstream post-shipment, have become a critical management issue for businesses to continue operations. However, many small and medium-sized enterprises (SMEs) that support Japan's manufacturing industry face difficulties in building such systems on their own due to a lack of specialized personnel and know-how.
This service organically combines Macnica 's outstanding technical expertise and extensive network of manufacturing customers with the Company world-class threat analysis capabilities from an attacker's perspective, provided by our top-level white-hat hackers, and our wealth of practical consulting know-how. By platforming the knowledge we have previously provided individually as "monosec360," we strongly support the construction of a practical and sustainable product security system, even from scratch.
Through this service, we will work together to accelerate our customers' innovation in a more secure way, contribute to strengthening the international competitiveness of Japanese manufacturing, and improve the safety and security of the entire digital society both domestically and internationally. Please look forward to the future that this powerful collaboration will create.

■ Comment from Yusuke Kobayashi, President of Macnica, Inc.
We are very pleased to announce that we have partnered with GMO Cybersecurity by Ierae to launch the product security support platform "monosec360".
While the importance of product security is increasing, many manufacturing companies face challenges in determining where to begin and how to continue implementing measures such as establishing a PSIRT system, implementing secure development processes, vulnerability management, and incident response. Small and medium-sized manufacturers, in particular, often lack specialized personnel and know-how, leading to efforts becoming dependent on individuals and making continuous operation difficult.
"monosec360" is a platform that combines Macnica 's deep understanding of the design and development sites in the manufacturing industry, cultivated over many years through its semiconductor business, with the practical knowledge of product security accumulated through supporting numerous clients as a consultant, and provides advanced security technology from GMO Cybersecurity by Ierae. It provides comprehensive support from education and training, system building, secure development, vulnerability management and incident response, to continuous improvement, enabling the early launch of highly effective product security activities.
By combining Macnica 's deep expertise in the manufacturing industry with GMO Cybersecurity by Ierae's advanced security technology, we will contribute to the widespread adoption and establishment of a product security infrastructure that supports Japanese manufacturing.

*1: EU Cyber Resilience Act (CRA): A regulation concerning cybersecurity enacted by the European Union (EU). It mandates that products containing digital elements comply with security requirements from the design and development stages.
*2: Product Security: Organizational, process, and technological initiatives to protect products and customers from cyberattacks and vulnerabilities throughout all stages of product planning, development, shipping, operation, and maintenance.
*3: PSIRT (Product Security Incident Response Team): A general term for organizations and teams that respond to vulnerabilities inherent in products and security incidents related to products. They are responsible for managing and responding to product security risks.
*4: IEC 62443: An international standard for cybersecurity of industrial automation and control systems (IACS). It defines security requirements for development processes, system design, operation management, and product components, aiming to ensure security throughout the entire product lifecycle. It is one of the representative standards referenced in CRA compliance.

[Click here for product details]
URL: h ttps://www.macnica.co.jp/business/security/manufacturers/iotsecconsulting/index.html

[For product inquiries, please contact us here]
Macnica, Security Consulting Department
E-mail: securityconsulting@macnica.co.jp

*Company names and product names mentioned in the text are trademarks or registered trademarks of each company.
*The information published in the news release (including product price, specifications, etc.) is current as of the date of announcement. Please note that the information may be subject to change without prior notice.