EG Secure Solutions
Japanese web security company that makes SiteGuard.
EG Secure Solutions said on 14 October 2026 that attackers were exploiting a SiteGuard Server Edition flaw, and warned customers to preserve diagnostic data before updating.
Last refreshed: 22 October 2026 · Appears in 1 active topic
How did a security product become an attack route?
Timeline for EG Secure Solutions
Confirmed exploitation of its SiteGuard flaw
Cybersecurity: Threats and Defences: SiteGuard hit; Qilin posts Keio filesBackground
EG Secure Solutions is a Japanese web-security company based in Tokyo. Its work includes vulnerability assessments, consulting, training, monitoring and security products. The business traces its present company history to a specialist consultancy founded in 2008 and later combined with two related E-Guardian companies.
Its SiteGuard range provides web application firewalls. Such products inspect incoming requests and block recognised attacks before they reach the protected web application. Their position in the traffic path makes them a privileged security control: customers rely on the firewall itself to remain secure while it examines hostile traffic. EG sells SiteGuard Server Edition as the range's server-hosted product.
Attackers exploit EG's security product
EG Secure Solutions disclosed on 14 October 2026 that attackers were exploiting a flaw in SiteGuard Server Edition. The product is a web application firewall, designed to block hostile requests before they reach protected sites. JPCERT/CC issued an emergency alert after the vendor confirmed exploitation.
EG told operators to save diagnostic data before installing the update because patching could erase traces needed to investigate an attack. That left customers balancing two urgent tasks: closing a live route into a security product and preserving evidence of an earlier intrusion. The same report discussed Qilin ransomware but did not establish that Qilin exploited SiteGuard.
What does EG Secure Solutions do?
What SiteGuard flaw did EG Secure Solutions disclose?
Why must SiteGuard operators save diagnostic data before updating?
Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.