china-isi.com

What It Is

Guangdong Nanfang Information Security Industry Base Co., Ltd. positions itself as a “builder of next-generation foundational information security capabilities for the data intelligence era.” Its product portfolio spans zero-trust access, threat cloud isolation, SOAR automated response, data asset mapping, data security monitoring, commercial cryptography chips, IPSec VPN gateways/terminals, intelligent cryptographic keys, IC cards, and more. Overall, it looks more like a comprehensive security vendor for government, enterprise, industrial, and electronic port scenarios than a single-purpose SaaS tool.

Core Capabilities

The zero-trust access platform is built around identity authentication and dynamic trust. It supports dynamic port authorization, network invisibility for business systems, single sign-on, multi-factor authentication, fine-grained resource control, and comprehensive auditing, and can integrate with protocols such as CAS, OAuth2, OIDC, SAML, LDAP, and Radius. The threat cloud isolation platform is based on remote browser isolation technology, reducing the user’s browser to essentially a “display screen.” By isolating scripts, APIs, cookies, and enabling browsing of sensitive files without local download, it aims to reduce risks such as exploit attacks, crawlers, tampering, and data leakage. The SOAR platform ingests alerts from SOC/SIEM/situational awareness systems and improves response efficiency through playbook orchestration, AI bots, virtual war rooms, and integration with the capabilities of 350+ products.

Pricing and Compliance

The official website does not disclose pricing, licensing metrics, hardware model pricing, or service SLAs, so it appears to follow a typical project-based quotation model. On the compliance side, the commercial-cryptography IPSec VPN gateway is stated to comply with the State Cryptography Administration’s IPSec VPN technical specifications and to have passed national commercial cryptography qualification certification. Its chips, intelligent cryptographic keys, and IC cards support Chinese commercial cryptographic algorithms such as SM1/SM2/SM3/SM4, and the materials mention multiple testing specifications as well as standards including PBOC, ISO7816, and GB35114. The company also offers consulting for MLPS compliance, commercial cryptography application upgrades, and data security compliance.

Pros and Cons

Its strengths are a broad product line that can cover multiple needs, including remote work, website isolation and protection, security operations automation, data classification and grading, and commercial-cryptography private networks. It also provides relatively detailed coverage of localized scenarios such as Chinese cryptography, electronic ports, and industrial communications. The main drawbacks are that publicly available materials are mostly product introductions, with limited performance specifications, deployment topology, case studies, pricing, or after-sales commitments. Some of the scraped content for the data security section is incomplete, so real-world maturity should be verified through a POC.

Who It’s For and Access from China

It is better suited to government agencies, state-owned enterprises, energy, transportation and municipal organizations, industrial manufacturers, multi-branch groups, electronic ports, and organizations with MLPS or commercial cryptography requirements. The website uses a domestically registered Chinese domain, with Guangzhou phone and email contact details, so access from China is expected to work directly. Payment methods are not disclosed. For horizontal comparison, domestic alternatives such as Qi-Anxin, Sangfor, Venustech, NSFOCUS, DBAPP Security, and Topsec may be worth considering.