sandj.co.jp

What It Is

S&J株式会社 is a Japanese cybersecurity service provider that aims to reduce the risk of major security incidents through incident response experience and in-house technology. Its services cover outsourced SOC operations, endpoint protection, Active Directory monitoring, Microsoft 365 E5 monitoring, alert analysis for Darktrace/CrowdStrike/ApexOne/MDE, BlueVoyant supply-chain risk monitoring, security assessments, consulting, and emergency incident response.

Core Capabilities

Its core offering is 24/7/365 monitoring by a Japan-based SOC. The outsourced SOC service does more than simply forward alerts: it ingests security device logs, access logs, and event logs into a SIEM for correlation analysis, then provides assessment of impact scope, risk, and recommended remediation. Deployment options include its in-house SOC Engine cloud, Splunk in the cloud or on-premises, and Microsoft Sentinel. AD monitoring relies on its proprietary AD Agent and targets AD attack techniques such as DCSync, DCShadow, Golden Ticket, Pass the Hash, and BloodHound, while also supporting patch status checks; disabling certain remote accounts is available as an option. KeepEye is its Japan-made EDR, offering an agent, cloud-based AI, a management console, 24/7/365 monitoring, isolation, daily/monthly reports, and managed whitelisting.

Pricing and Compliance

No standard pricing is disclosed, so procurement is generally quote-based. KeepEye specifies a minimum license count of 50 devices, and detailed investigations are a paid option. On the compliance side, its SOCアウトソーシング service conforms to Japan’s Ministry of Economy, Trade and Industry “Information Security Service Standards,” with registration number 018-0045-40, which is an important endorsement for procurement by Japanese enterprises.

Pros and Cons

Its strengths are a complete service chain, a local SOC, Japanese-language support, incident response experience, and close integration with its own products. It can also operate existing assets from Microsoft, Darktrace, CrowdStrike, Trend Micro, and others. The limitations are also clear: pricing is not transparent; KeepEye supports Japanese only, does not support Linux/macOS, and does not yet support IPv6; some response capabilities require optional add-ons, and overseas use needs to be confirmed separately.

Who It’s For and Access from China

It is better suited to mid-sized and large enterprises, government agencies, and organizations with CSIRT requirements that operate in Japan and need an outsourced SOC or want to strengthen AD/M365/endpoint monitoring. The source text does not specify access from mainland China, payment methods, data residency, or cross-border support, so these remain unknown. Chinese users may want to compare it with local MSSPs, Microsoft security services, CrowdStrike/Trend Micro MDR, or domestic compliance-oriented SOC services.