GMO Cyber Attack Net Diagnosis ASM Now Includes Cyber Risk Insurance and Free Incident Response by Default [GMO Cybersecurity by Yelae]

GMO Cybersecurity by Yelae Co., Ltd. (President and CEO: Makita Makoto; hereinafter 'GMO Cybersecurity by Yelae'), a member of the GMO Internet Group (※1), will begin on July 15, 2026, to include by default two key benefits with its Attack Surface Management (ASM) tool 'GMO Cyber Attack Net Diagnosis ASM'—a solution that automatically inventories and visualizes externally exposed IT assets. These benefits are cyber risk insurance provided by Tokio Marine & Nichido Fire Insurance Co., Ltd., and up to three days of initial incident response support from GMO Cybersecurity by Yelae’s dedicated incident response team—all at no additional cost or registration. This marks the first time in Japan (※4) that cyber risk insurance and initial response support have been permanently bundled as standard features with a domestic ASM tool (※3).

This initiative enables organizations—regardless of whether they have dedicated security personnel—to access a one-stop solution for risk visibility during normal operations and for emergency response and compensation when incidents occur.

(※1) GMO Cybersecurity by Yelae Co., Ltd. is a consolidated subsidiary of GMO Internet Group, Inc.

(※2) Attack Surface refers to efforts to collect and analyze information on IT assets such as servers and network devices exposed to the internet, in order to detect and assess vulnerabilities that could be exploited for unauthorized access.

(※3) The bundled cyber risk insurance is based on a master insurance contract between GMO Cybersecurity by Yelae Co., Ltd. and Tokio Marine & Nichido Fire Insurance Co., Ltd. The program may be discontinued depending on claim ratios or other factors.

(※4) As of June 2026, based on internal research

【Background and Purpose】

Cyberattacks are becoming increasingly severe regardless of company size. According to the National Police Agency’s report 'Current Cyber Threats in Reiwa 7' (※5), over half of the organizations affected by ransomware attacks incurred recovery costs exceeding 10 million yen in total.

However, there are structural challenges in preparing for such incidents. Only a limited number of organizations—those with sufficient budget and specialized staff—can fully arrange cyber insurance, secure experts upon incident, and maintain continuous risk visibility. Organizations without dedicated security staff are more likely to find themselves in a situation where they do not know 'who to consult' when an incident occurs, potentially leading to escalation of damage. The fact that essential 'incident preparedness' is not equally accessible due to resource disparities creates risks for society as a whole.

To address this gap, GMO Cybersecurity by Yelae will provide all users of 'GMO Cyber Attack Net Diagnosis ASM' with bundled cyber risk insurance and initial incident response support at no additional cost or registration. We aim to provide an integrated environment where any organization—regardless of expertise—can manage risk visibility in normal times and access emergency response and compensation when needed, thereby expanding the breadth of cyber preparedness.

(※5) National Police Agency, 'Current Cyber Threats in Reiwa 7' https://www.npa.go.jp/publications/statistics/cybersecurity/data/R7/R07_cyber_jousei.pdf

【Details of the Two Standard-Bundled Benefits】

Cyber Risk Insurance (※6)

Cyber risk insurance provided by Tokio Marine & Nichido Fire Insurance Co., Ltd. will be automatically included. No additional procedures are required from customers. The insurance covers incident response and compensation costs up to a maximum of 1 million yen.

Coverage of Cyber Risk Insurance (Payment limit: 1 million yen; Total policy limit: 200 million yen)

Cyberattack Response Costs

External outsourcing and consulting fees for system isolation and attack verification, and investigation costs for identifying root causes and impact scope (including forensic analysis and evidence preservation)

Various Consultation Costs

① Computer system recovery costs (data restoration, equipment repair, etc.), legal consultation fees, etc. ② Compensation payments: Legal compensation, litigation costs, cooperation expenses, etc.

(※6) This outlines the bundled insurance. Actual eligibility for payment is governed by the standard policy terms and special clauses of the cyber risk insurance contract separately established between GMO Cybersecurity by Yelae Co., Ltd. and Tokio Marine & Nichido Fire Insurance Co., Ltd.

Initial Incident Response (Up to 3 Days)

In the event of a security incident, GMO Cybersecurity by Yelae’s expert team will provide up to three days of free initial response support. The team will quickly assess the impact scope and response strategy of the incident and provide specific recommendations for subsequent actions. The three-day initial response is provided as a free labor allowance. Any costs exceeding this period or transitioning directly into full incident investigation may be covered by the cyber risk insurance, subject to the policy terms and claim conditions.

【Future Outlook】

Shinya Tsuda, General Manager, Product & Service Division

Since its launch in 2023, 'GMO Cyber Attack Net Diagnosis ASM' has supported many customers by helping them inventory externally exposed IT assets and visualize risks, thereby enhancing preparedness against cyberattacks. However, no matter how robust the defenses, it is impossible to reduce the risk of cyber incidents to zero. Cybersecurity is no longer limited to specialized firms—it has become a critical management issue for all organizations.

By now including cyber risk insurance for all users and standardizing initial incident response, we have established a comprehensive support system that integrates risk visibility during normal operations with emergency preparedness. We will continue to protect our customers from cyber threats and contribute to a safer, more secure internet society.

【About 'GMO Cyber Attack Net Diagnosis ASM'】 (https://product.gmo-cybersecurity.com/net-de-shindan/lp_enterprise/)

'GMO Cyber Attack Net Diagnosis ASM' is a security platform designed for simple and intuitive use. While leveraging its strengths as a domestic ASM tool in 'IT asset inventory and risk visualization,' it goes beyond traditional ASM by aiming to simplify complex security operations and visualize 'what to prioritize for protection.' The platform guides users—regardless of their cybersecurity knowledge—to instantly identify the most critical actions they should take.

【About GMO Cybersecurity by Yelae】 (https://gmo-cybersecurity.com/)

GMO Cybersecurity by Yelae is a professional cybersecurity company composed of Japan’s largest team of white-hat hackers. Guided by our corporate philosophy of 'protecting the belief to help people,' we provide comprehensive services including penetration testing, vulnerability assessment, incident response, and security consulting to protect organizations from evolving cyber threats.