TOKYO – In a strategic move designed to redefine the landscape of corporate digital defense, Fujitsu Limited announced on September 28, 2026, the launch of a comprehensive cybersecurity service aimed at transitioning organizations from reactive post-incident response to proactive threat mitigation. Effective September 25, 2026, the service integrates dark web intelligence, attack surface management, and elite-level threat hunting, marking a significant evolution in how critical infrastructure operators in Japan—and eventually globally—protect their digital assets.
This initiative arrives at a pivotal moment. As cyber threats grow in sophistication, the Japanese government has accelerated its "active cyber defense" agenda, urging private sector enterprises to identify and neutralize threats before they manifest into catastrophic breaches. Fujitsu’s new offering serves as a bridge between high-level policy and on-the-ground operational security.
The Strategic Imperative: Why Proactive Defense Matters
For decades, the cybersecurity industry operated under a "perimeter defense" model—building walls and reacting when those walls were breached. However, the rise of advanced persistent threats (APTs), ransomware-as-a-service, and AI-driven social engineering has rendered traditional reactive measures insufficient.
The Changing Threat Landscape
The modern enterprise is no longer defined by a static network. With the proliferation of cloud computing, remote work, and interconnected Internet of Things (IoT) devices, the "attack surface"—the total sum of vulnerabilities accessible to an attacker—has expanded exponentially. Fujitsu’s new service addresses three specific gaps that have historically plagued critical infrastructure operators:
- Visibility into the Shadows: Traditional monitoring focuses on internal traffic. It fails to see the reconnaissance being conducted on the dark web, where hackers trade credentials and discuss vulnerabilities before an attack is launched.
- Asset Sprawl: Many organizations are unaware of what assets they have exposed to the public internet, leaving "forgotten" servers or unpatched applications as open doors for intruders.
- The "Silent" Breach: Sophisticated attackers often bypass automated security alerts by operating within authorized user accounts or using legitimate administrative tools. Identifying these "low-and-slow" intrusions requires human-led, proactive threat hunting.
Chronology of Development
The path to this service launch was not sudden; it represents the culmination of a multi-year shift in Fujitsu’s security posture.
- Early 2025: Fujitsu begins evaluating the integration of external threat intelligence platforms to supplement its existing managed security operations.
- Q4 2025: Negotiations with KELA Co., Ltd. commence, focusing on the integration of advanced dark web monitoring and attack surface management tools.
- Q1 2026: Pilot programs are conducted with select partners in the energy and transportation sectors to test the efficacy of combining automated intelligence with human-led "threat hunting."
- September 25, 2026: The service officially goes live, providing a unified dashboard for clients to visualize risks.
- October 2026 (Forthcoming): Integration with the newly established "Cyber Security Nerve Center," which will serve as the central hub for incident analysis and response.
Technical Architecture: Three Pillars of Defense
Fujitsu’s new service is built upon three functional pillars, designed to be modular yet deeply interconnected.
1. Dark Web Intelligence (The Early Warning System)
By leveraging an MSSP & Reseller Agreement with KELA Co., Ltd., Fujitsu now provides customers with visibility into the "underground" internet. This includes monitoring for leaked corporate credentials, mentions of the company in hacker forums, and the sale of access points to the company’s internal network. By identifying these indicators early, Fujitsu can prompt password resets or infrastructure patching before an attacker has the chance to exploit the information.
2. Attack Surface Management (The Asset Audit)
The service employs continuous scanning technology to identify what an attacker sees when they look at a client’s digital perimeter. This goes beyond simple vulnerability scanning. It prioritizes risks based on actual exploitability. If a server has a vulnerability but is not reachable from the internet, it is ranked lower; if it is exposed and the vulnerability is currently being exploited in the wild, it is flagged for immediate remediation.
3. Elite Threat Hunting (The Human Element)
Perhaps the most distinctive component is the deployment of Fujitsu’s Uvance Wayfinders—a team of white-hat hackers. Unlike automated tools that look for known patterns, these experts use their knowledge of how attackers actually think. They comb through cloud audit logs and system data to find anomalies that don’t trigger standard alerts. This is crucial for detecting "living off the land" attacks, where adversaries use the system’s own administrative tools to perform malicious activities.
Supporting Data and Industry Context
The necessity for this service is underscored by the current economic and geopolitical climate. As of the fiscal year ending March 31, 2026, Fujitsu reported consolidated revenues of 3.5 trillion yen (US$23 billion). As Japan’s leading digital services provider, Fujitsu’s insights into the threat landscape are informed by a vast array of telemetry data from its diverse customer base.
Industry data suggests that the "dwell time"—the amount of time an attacker spends inside a network before being detected—remains a critical failure point for most organizations. By shortening the time from initial reconnaissance to discovery, Fujitsu aims to reduce the dwell time from months to mere hours or days.
Official Perspectives and Government Alignment
Fujitsu’s move is explicitly designed to support the Japanese government’s "Active Cyber Defense" framework. Government officials have repeatedly emphasized that waiting for an attack to occur is a strategic vulnerability.
"The goal is not merely to block attacks, but to dismantle the infrastructure used by adversaries," a Fujitsu spokesperson noted. By providing enterprises with the tools to see what the attackers see, Fujitsu is democratizing the capabilities that were previously reserved for national intelligence agencies.
The collaboration with KELA represents a significant commitment to third-party expertise. By integrating KELA’s specialized threat intelligence into the Fujitsu ecosystem, the service ensures that the data is not just "noise" but actionable intelligence that correlates with the customer’s specific threat profile.
Implications for the Future
The launch of this service suggests a fundamental shift in the business model of Managed Security Service Providers (MSSPs). Security is no longer a commodity purchase—a firewall here, an antivirus subscription there—but a continuous operational capability.
Resilience as a Competitive Advantage
For critical infrastructure providers, the implications are profound. In sectors like power generation, water supply, and financial services, downtime is not just a financial cost; it is a public safety issue. Fujitsu’s proactive approach allows these organizations to demonstrate "cyber resilience" to regulators and stakeholders, proving that they are taking every possible step to mitigate risks before they manifest.
The Path to Automation
Fujitsu has signaled that this is only the beginning. The company plans to use the data gathered from these initial engagements to train AI models that will further automate the analysis of dark web signals and the remediation of vulnerabilities. By October 2026, the activation of the "Cyber Security Nerve Center" will further centralize these capabilities, allowing for a faster, more coordinated response to threats across the entire Fujitsu customer ecosystem.
Conclusion
As the digital and physical worlds become increasingly indistinguishable, the "Cyber Security Nerve Center" and the new threat hunting service position Fujitsu as a central guardian of Japan’s critical infrastructure. By combining the scale of a global technology leader with the precision of white-hat hackers and the deep visibility of dark web monitoring, Fujitsu is setting a new standard for what it means to be truly "defended" in the modern era.
The message to the market is clear: the era of reactive security is over. In the face of an increasingly hostile digital environment, the only sustainable defense is one that is built on constant, proactive vigilance.
