Company — about AlienGate

[ Company ]

Built by people who attack systems for a living

AlienGate is made by CyberCrew, a Tokyo security firm whose white-hat hackers run penetration tests, red team exercises and dark web monitoring for financial institutions, government infrastructure and healthcare across Japan.

Tokyo

place

Apr 2025

Established

S-Pool

TSE Prime · 2471

025-0020

METI registration

[ Why we exist ]

We build defence by thinking like attackers

Most security tooling is written from the defender's side of the wall. Ours is written by people who spend their week getting over it.

We are the third eye on your digital assets

As an independent security partner, we show how attackers see your systems and surface the risk before it is used against you. From penetration testing and cloud audits to dark web monitoring, everything we build starts from the attacker's perspective.

Our mission is to uncover the risk before the attack begins.

01 · INITIATIVE

Take the first move

Security that only reacts is not security. We identify risk before an attacker chooses a target.

02 · TRANSPARENCY

Findings you can act on

Measures a customer cannot understand are not protection. We show the investigation, the root cause, and the fix.

03 · EFFECTIVENESS

Improvements, not reports

We deliver usable security rather than theoretical knowledge, measured by what changed after the assessment.et.

[ About CyberCrew ]

The company behind AlienGate

CyberCrew Inc. is an offensive security firm in Akihabara, Tokyo. Its white-hat hackers reproduce real attacks through penetration testing, red team exercises and dark web monitoring, and AlienGate is the platform that grew out of that work.

Visit cyber.spool.co.jp

OFFENSIVE SECURITY

Attack-driven, one stop

Web, mobile, cloud, network and LLM penetration tests, scenario-based and red team exercises, social engineering, vulnerability assessment and dark web monitoring, aligned with OWASP and ASVS.

TRACK RECORD

Researchers, not just testers

Engineers holding OSCP, CEH Master and CRTS, a team ranked first in international CTF competitions, and CVEs discovered and published for open-source software such as Bagisto and libtpms.

REGISTERED & LISTED

Registered with METI, backed by S-Pool

Penetration testing and vulnerability assessment are registered under METI's Information Security Service Standards. CyberCrew is a wholly owned subsidiary of S-Pool Co., Ltd., listed on the Tokyo Stock Exchange Prime Market.

TÜV Rheinland ISO/IEC 27001:2022 certification mark

ISO/IEC 27001:2022 certified information security management system, accredited by ISMS-AC and certified by TÜV Rheinland.

METI Information Security Service Standards registration mark

Registered under METI's Information Security Service Standards (025-0020): penetration testing and vulnerability assessment services.

[ How we hold your data ]

We hold the data you'd least like leaked

So our own controls are a product surface, not a compliance afterthought. Full documentation is available under NDA.

Secrets hashed on ingest

Plaintext credentials are hashed the moment they enter the pipeline. Analysts see matches and metadata, never a usable secret.

ENFORCED PLATFORM-WIDE

Workspace isolation

Every object belongs to exactly one workspace. API keys never reach across boundaries — critical for MSSPs running many clients.and metadata, never a usable secret.

ARCHITECTURAL, NOT POLICY

Domain verification required

Identity monitoring only runs on domains you control. You cannot search an address that isn't yours.

ENFORCED AT SIGNUP

Independently assessed

Our own infrastructure is penetration tested by the same standards we apply to customers, under a multi-layer review process.

DOUBLE-CHECK VERIFIED

GIAC GXPN

OSCP+

OSCP

OSWP

CPENT

HTB OFFSHORE

eMAPT

eCPPT

CEH MASTER

GIAC GXPN

OSCP+

OSCP

OSWP

CPENT

HTB OFFSHORE

eMAPT

eCPPT

CEH MASTER

GIAC GXPN

OSCP+

OSCP

OSWP

CPENT

HTB OFFSHORE

eMAPT

eCPPT

CEH MASTER

GIAC GXPN

OSCP+

OSCP

OSWP

CPENT

HTB OFFSHORE

eMAPT

eCPPT

CEH MASTER

[ Partners & resellers ]

Delivered through partners, trusted by enterprises

CyberCrew is one of ten group businesses under S-Pool Co., Ltd., listed on the Tokyo Stock Exchange Prime Market.

[ Faq ]

Frequently asked questions

Everything you need to know about the product and billing.

Simply sign up with your email and enter your company domain. You can start with a free breach check immediately, and expand to continuous monitoring when ready.

No. AlienGate supports DAST beyond OWASP Top 10, providing comprehensive coverage including network vulnerability scanning capable of detecting 15,000+ CVEs.

AlienGate provides screenshots, port/service details, technology detection, and credential exposure context—giving you the proof needed to validate risks and justify remediation priorities.

Yes. The Investigations feature turns alerts into trackable cases with assigned owners, status tracking, and evidence collection. Reports can be generated for executives and compliance teams.

AI accelerates operations with automated risk scoring, smart summaries of findings, and next-action guidance—helping teams focus on what matters most without manual triage.

Find out what's already out there. It takes about forty seconds.

Run a free exposure check on your domain. If it comes back clean, you've lost a minute. If it doesn't, you've found out before someone else did.

Run a free exposure check

Book a demo