INFORMATION

Pressrelease

Announced KUSANAGI Security Edition – Strengthened Security with Phased OS and Middleware Updates and More.

Prime Strategy Co., Ltd. (hereafter, Prime Strategy) has announced the development and launch of “KUSANAGI Security Edition” (tentative name, hereafter “KUSANAGI SE”). This security-focused operating environment is designed to maintain a consistent security posture, streamline the update process, and enhance enterprise security efficiency with flexible, efficient operations.

Background to Development

The intensification of cyberattacks has made security a major societal issue.

Websites are no exception, as they face constant threats from external attacks. If incidents such as personal information leaks or phishing site redirection occur, it can not only harm a company’s reputation and brand but also severely impact business continuity due to service downtime and result in enormous mitigation costs. This poses significant challenges to the company’s operations.

The Growing Importance of Updates

With the rise in targeted attacks exploiting newly disclosed vulnerabilities and the increasingly shorter window between vulnerability disclosures and attack initiation, the importance of regular updates is greater than ever.

Rising Costs and Operational Strain from Security Measures

Implementing comprehensive security measures has become an open-ended challenge. Establishing unified operational guidelines and determining appropriate responses to individual threats are complex tasks. Excessive security measures can lead to increased costs and responding to alerts from multiple security and reporting tools, alongside update-related tasks, can place a significant burden on resources. Issues such as security fatigue and procedural degradation have also surfaced.

In day-to-day operations, substantial resources and effort are dedicated to handling alerts from various security and reporting tools and addressing vulnerabilities through updates. Ironically, the very security measures intended to protect companies and customers are increasingly straining business operations.

In response, we have decided to leverage the expertise gained from our experience with CMS operations and automation to address these challenges by offering a new edition of KUSANAGI: the “KUSANAGI Security Edition” (tentative name, hereinafter referred to as “KUSANAGI SE”). This edition will provide:

  • Maintaining a consistent security posture
  • Streamlined update processes
  • Support for efficient and flexible operations

Development Policies

KUSANAGI SE aims to be the standard choice for companies facing security and operational challenges in CMS and web systems, as well as for SIers and production companies providing infrastructure support.

Automated Updates – Reducing Operational Costs

The most critical aspect of security operations is updates. Safely managing updates requires specialized knowledge and resources. KUSANAGI SE will reduce costs by offering automatic updates for the OS, middleware, and other components. We plan to automate updates with minimal impact on applications, along with AI-driven testing and rollback features.

Delivering consistent security performance – Multi-Cloud and Multi-OS

Many companies operate websites and systems across different environments. To support BCP measures, KUSANAGI SE will establish unified security standards across multiple platforms. We also plan to expand support to include Red Hat-based Linux for on-premises environments.

Supporting Efficient and Flexible Operations

We will enhance the security audit feature of “KUSANAGI Analyze,” previously available in KUSANAGI Business Edition, to provide efficient reporting with clear recommendations. Our WordPress audit will help ensure secure operations.

Additionally, we will offer alert functionality and provide APIs to integrate easily with existing workflows and reporting tools. We will also explore collaboration with external security tools, such as WAFs, for easier implementation.

Main features

In addition to KUSANAGI’s standard security features*, the following functions are scheduled to be provided.

  • Security Tools
    • Malware and Antivirus Protection Features
    • Bot Mitigation
  • Security Operations
    • Automatic Updates for Middleware and OS (Testing and Rollback)
  • Auditing and Reporting
    • General Audits / WordPress-Specific Audits
    • Reports (Recommendations for Mitigation)
    • API, Email Notifications, PDF Downloads, etc.
  • Vulnerability Management
    • Provision of RPM Vulnerability Information
  • Standard security features of KUSANAGI*
    • The latest version of middleware is provided from the KUSANAGI repository
    • WAF
    • SELinux support
    • TLS 1.3 support
    • Disable TLS 1.1 and below
    • DoS attack protection

In the case of malware and antivirus protection features, which can place a significant load on servers, we will configure malware scans based on server specifications to reduce this load. We will support operations with recommended settings for scan intervals, customization options, and reports via email or API.

The IP restriction and Basic Authentication configuration features will allow for easy setup of IP restrictions and Basic Authentication for the WordPress admin panel and document root. This will help minimize configuration file errors and facilitate operational management by supporting restriction settings based on IP lists.

Roadmap, Other

We plan to start offering KUSANAGI SE from a major public cloud in December 2024. We also plan to offer it for “Private Offers” and on-premise environments.

* There are no plans to offer upgrades from the current Business/Premium Edition. We do plan to offer migration functions.

License fee: To be determined. We are planning a fee structure based on VMs.
Support: Dedicated installation and operation support will be provided. (Starting in Japan)
New Offerings in the Platform:Contact us

The Ultra-fast CMS platform “KUSANAGI” 

KUSANAGI is a fast and secure virtual machine image developed and provided by Prime Strategy. KUSANAGI is available in 203 regions in 37 countries, on 28 major domestic and international platforms (as of Semtember 2024), with a cumulative total of over 90,000 units in operation (as of July 2024).

https://kusanagi.tokyo/en

About Prime Strategy

Prime Strategy, Co., Ltd. is a software developer providing web acceleration solutions. We have locations in Tokyo and New York.

Company Name Prime Strategy Co., Ltd.
(Tokyo Stock Exchange Standard Market 5250)
Main Office Sumitomo Fudosan Ichibancho Bldg. 1F, 8, Ichiban-cho, Chiyoda-ku, Tokyo Japan 102-0082
Service Details KUSANAGI Stack Business
・Management service
・Website acceleration service
・System integration service

KUSANAGI Stack Development and Provision
・Ultra-fast CMS platform “KUSANAGI”
・Web Acceleration Engine ”WEXAL® Page Speed Technology®”
・Strategic AI “ONIMARU® David”
URL https://www.prime-strategy.co.jp/en/

Press Contacts  

Prime Strategy Co., Ltd.
Sumitomo Fudosan Ichibancho Bldg. 1F, 8, Ichiban-cho, Chiyoda-ku, Tokyo Japan 102-0082
Phone: 81-3-6551-2995 / Fax: 81-3-6551-2941
Mail : pr@prime-strategy.co.jp

*Company and product titles mentioned in this press release are trademarks or registered trademarks of their respective companies.

If you have any questions or concerns,
please feel free to contact us using our contact form.