What is LAC's biggest risk?

LAC's biggest risk is its own parent company. KDDI acquired LAC for 24.6 billion yen as of 2024-11-07 and is openly building AI automation through WAKONX aimed at the same tier-1 alert triage work LAC sells to clients, a dynamic flagged as a building giant threat in the July 2026 assessment.

Is LAC in financial trouble?

There are no signs of acute financial trouble, but profit has softened. Consolidated net income fell from 2,665 million yen in fiscal year 2022 to 1,925 million yen in fiscal year ended 2024-03-31, and LAC delisted from the Tokyo Stock Exchange on 2025-02-25 after KDDI took it private.

Who are LAC's biggest competitors?

LAC's main rivals are domestic Japanese firms NTT Security Holdings and NRI Secure, which compete directly for the same SOC and incident response contracts. Foreign firms like IBM, Cisco, and Secureworks are largely blocked from this market by language, trust, and regulatory barriers. The more unusual competitive pressure comes from within LAC's own corporate family: parent KDDI launched its WAKONX AI platform in May 2024, aimed at automating the tier-1 monitoring work that forms much of LAC's revenue.

Is LAC at risk from AI?

Partly. KDDI's WAKONX platform, launched in May 2024, is aimed at automating tier-1 alert triage, which forms the bulk of LAC's current monitoring revenue, and this is marked as a building threat in the July 2026 assessment. LAC's shield is its roughly 25 years of accumulated Japanese threat data and deep client trust, which is harder to automate away quickly, but the pressure is coming from inside its own corporate family rather than an outside AI vendor.

Is LAC a strong or weak player compared to other cybersecurity companies?

LAC has several durable strengths: roughly 25 years of accumulated Japanese threat data, long-tenured staff (12-year average tenure and 3.9% turnover as of 2025-03-31), and joint venture ties with NRI Secure and KDDI dating to 2022 that keep it embedded in domestic cloud security and zero-trust projects. Its weaker spot is competitive pressure from domestic rivals NTT Security Holdings and NRI Secure, compounded by its own parent KDDI's push to automate tier-1 monitoring work through the WAKONX platform launched in May 2024.

What should I watch to see if LAC is doing well?

Two dated markers matter here: whether LAC's consolidated employee count stays above 2,000 in KDDI's segment disclosures through fiscal year ending 2027-03, and whether KDDI issues a resolution or material update on its affiliate accounting scandal affecting fiscal year 2025 results, expected by 2026-12. A March 2026 checkpoint on KDDI's investigative committee report and LAC's traction in new Global services is also flagged as worth tracking.

Cybersecurity companies · subsidiary of KDDI Corporation · Japan

LAC Co., Ltd.

lac.co.jp ↗

LAC runs Japan's JSOC security monitoring and incident response, now a KDDI subsidiary.

Hard to displace

Assessed 30 July 2026 · Evidence as of 30 July 2026

Strong structural protection; the business model survives ai pressure.

On the recordSince 30 July 2026 · Checkable from Q1 FY2026 (mid-2026) · Every call on the record Checkpoint: KDDI's next segment-level financial disclosure showing whether LAC runs as a growth unit or a cost line

The call

LAC's incident-response trust and JSOC telemetry keep it useful to KDDI, but its routine monitoring work sits exposed to AI-driven SOC tools while integration into KDDI plays out.

LAC Co., Ltd. is a 30-year-old Japanese company that responds to computer security breaches and monitors networks for large organizations. It is hard to replace quickly because companies need a real person to approve and handle serious breaches (the law requires it), and LAC knows how to handle Japan's specific systems and has deep trust with government agencies. However, new AI-powered security tools from companies like CrowdStrike can now do much of the routine monitoring work that LAC's people used to do by hand, which could reduce the hours LAC can charge customers. The biggest unknown is whether LAC's new parent company, KDDI, will let it run on its own and grow, or fold it into a generic division where it loses focus and top talent leaves.

Why

AI pressure: CrowdStrike Falcon and similar AI-driven SIEM/XDR platforms. AI triage and log correlation tools cut billable hours in routine Tier-1 alert monitoring, squeezing LAC's commodity SOC work. Could AI do the core job? Only partly.

Bigger players: NTT Security and NRI Secure. Domestic rivals with deep pockets and their own SOC platforms compete for the same Japanese enterprise and government contracts. Could a giant copy it? Probably.

What protects it. Regulatory and liability rules require human sign-off on breach response, and LAC holds 3,000+ incident engagements of local telemetry.

What would change this call

KDDI's next 2-3 fiscal segment reports show LAC as named growth unit vs folded into generic business solutions line. Reveals whether KDDI is investing in LAC's specialist capability or absorbing it as a cost center.
Senior JSOC or Cyber Emergency Center engineers publicly exit or move to rivals like NRI Secure or MBSD within 12 months. Would indicate integration friction eroding the human-expertise moat that underpins LAC's incident-response trust.
LAC or KDDI announce a proprietary generative-AI security product built on LAC's incident telemetry. Would show LAC converting its data moat into a defensible AI-era product rather than losing ground to CrowdStrike Falcon.

Key numbers

FY2025 consolidated revenue about ¥56.9 billion (2025-03-31)
KDDI tender offer valued LAC at about ¥24.6 billion (2024-11-07)
About 2,295 employees consolidated (2025-03-31)

Named risks

KDDI could restructure LAC into a generic managed-service cost center, eroding specialist R&D. Severity: high
AI-driven SIEM/XDR platforms compressing billable hours in routine Tier-1 SOC monitoring. Severity: medium
Reduced external financial visibility now that LAC reports only inside KDDI's consolidated filings. Severity: medium
Senior JSOC and Cyber Emergency Center engineer attrition during KDDI cultural integration. Severity: medium
Domestic peers like NRI Secure and MBSD face no foreign-platform trust barrier and can undercut on price. Severity: low

Rivals, as read in July 2026

Rival	Direction	Evidence
CrowdStrike	contesting	Falcon AI Security and next-gen SIEM updates targeting AI-agent visibility, March-April 2026
NRI Secure	contesting	Domestic MSSP peer and former LAC shareholder (10.10% stake as of Sept 2024)
Trend Micro	contesting	Larger incumbent security vendor active in Japan alongside NTT Security cooperation, 2024
Mitsui Bussan Secure Directions	contesting	Mitsui-backed domestic security consulting and MSSP rival to LAC
Macnica	losing to	Larger domestic security distributor with about 5,071 employees as of March 2025

Questions people ask

What is LAC's biggest risk?: LAC's biggest risk is its own parent company. KDDI acquired LAC for 24.6 billion yen as of 2024-11-07 and is openly building AI automation through WAKONX aimed at the same tier-1 alert triage work LAC sells to clients, a dynamic flagged as a building giant threat in the July 2026 assessment.
Is LAC in financial trouble?: There are no signs of acute financial trouble, but profit has softened. Consolidated net income fell from 2,665 million yen in fiscal year 2022 to 1,925 million yen in fiscal year ended 2024-03-31, and LAC delisted from the Tokyo Stock Exchange on 2025-02-25 after KDDI took it private.
Who are LAC's biggest competitors?: LAC's main rivals are domestic Japanese firms NTT Security Holdings and NRI Secure, which compete directly for the same SOC and incident response contracts. Foreign firms like IBM, Cisco, and Secureworks are largely blocked from this market by language, trust, and regulatory barriers. The more unusual competitive pressure comes from within LAC's own corporate family: parent KDDI launched its WAKONX AI platform in May 2024, aimed at automating the tier-1 monitoring work that forms much of LAC's revenue.
Is LAC at risk from AI?: Partly. KDDI's WAKONX platform, launched in May 2024, is aimed at automating tier-1 alert triage, which forms the bulk of LAC's current monitoring revenue, and this is marked as a building threat in the July 2026 assessment. LAC's shield is its roughly 25 years of accumulated Japanese threat data and deep client trust, which is harder to automate away quickly, but the pressure is coming from inside its own corporate family rather than an outside AI vendor.
Is LAC a strong or weak player compared to other cybersecurity companies?: LAC has several durable strengths: roughly 25 years of accumulated Japanese threat data, long-tenured staff (12-year average tenure and 3.9% turnover as of 2025-03-31), and joint venture ties with NRI Secure and KDDI dating to 2022 that keep it embedded in domestic cloud security and zero-trust projects. Its weaker spot is competitive pressure from domestic rivals NTT Security Holdings and NRI Secure, compounded by its own parent KDDI's push to automate tier-1 monitoring work through the WAKONX platform launched in May 2024.
What should I watch to see if LAC is doing well?: Two dated markers matter here: whether LAC's consolidated employee count stays above 2,000 in KDDI's segment disclosures through fiscal year ending 2027-03, and whether KDDI issues a resolution or material update on its affiliate accounting scandal affecting fiscal year 2025 results, expected by 2026-12. A March 2026 checkpoint on KDDI's investigative committee report and LAC's traction in new Global services is also flagged as worth tracking.

Timeline

2026-07-17LAC launches Security Pack for Microsoft 365 and publishes Security Insight Issue 16
2026-03-04LAC and KDDI open inquiries for Global Security Posture Assessment and Global Incident Response
2025-07-25LAC and KDDI begin full-fledged global rollout with English-language inquiry desk
2025-02-21Formal Notice of Delisting of LAC shares from Tokyo Stock Exchange issued
2025-01-22LAC becomes wholly-owned consolidated subsidiary of KDDI
2024-11-07LAC agrees to KDDI tender offer valued at approximately 24.6 billion yen
2024-08-27LAC launches Security Vulnerability Advisory Service by Snyk

Head to head

LAC Co., Ltd. vs NRI SecureTechnologies LAC Co., Ltd. vs NTT Security

Revision history

30 July 2026

First assessed. Hard to displace. The text above is fixed as of this date and is not edited afterwards.

In the same band

Palo Alto Networks AhnLab Moxa