CyberIndexBeta

MONSTER

SOMMAEnterprise Antimalware (primary)Compare with others in Enterprise Antimalware

Product

Cloud-based endpoint threat-hunting platform with real-time endpoint agents for detection, root-cause tracking and response. Among the capabilities recorded for it are behavioral detection and central management console. The stated market is Enterprise. It is SOMMA's entry in the enterprise antimalware category.

Current Version
Cloud · no version
Product Page
somma.kr
Market
Enterprise
Licence
Paid
Price
Paid · price unknown
Record Created
2026-09-19
Last Updated
2026-10-20

Vendor

SOMMA is a South Korean company in the Pangyo technology district, south of Seoul, and what it sells is closer to an analyst's toolkit than to an antivirus product. Its business is threat hunting: looking for an intruder already inside a network rather than blocking one at the door. Its three products divide that work. MONSTER is the managed threat-hunting platform, collecting endpoint data and automating the analysis and response around it. CHEIRON is an adversary emulator that runs simulated APT behaviour against an organisation to see what its defences notice. ANY-OFFICE covers endpoint monitoring for remote workers. For this index the distinction is worth keeping in view: a hunting platform is bought to find what prevention missed, and it is not measured by the detection laboratories that score preventive products, so its rows here describe capability rather than test results. Vendor page →

Website
somma.kr
Country
South Korea
Headquarters
Seongnam, South Korea
Year Established
2016
Customers
Not known
Users
500 users
Revenue
Not known

Platforms

Cloudnative

Target Market

Enterprise primary

Capabilities

Malware DetectionkeyNot known
Ransomware ProtectionkeyNot known
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic DetectionNot known
Device ControlNot known
Vulnerability ShieldingNot known
Central Management Consolenative

10 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPaidnot statedno recurring chargeNot known

Versions

Not known

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

MITRE ATT&CK Evaluations (Enterprise)

2023-09-20lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

MITRE ATT&CK Evaluations (Enterprise)MITRE ATT&CK Evaluations — Enterprise 2023 (Turla)2023-09-20
Technique-level detection: 23.8%Any detection: 58.7%Attack sub-steps evaluated: 143

Certifications

Not known

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-20Pricing plan addedPrice: paidevidence
  • 2026-10-14Platform addedRuns on Cloudevidence
  • 2026-10-12Test result addedNew MITRE ATT&CK Evaluations (Enterprise) resultevidence
  • 2026-09-23Capability addedCentral Management Console: built inevidence
  • 2026-09-23Capability addedBehavioral Detection: built inevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-19Product createdNew product listedevidence
  • 2026-09-19Product updatedSold to: Enterpriseevidence
Something wrong? Suggest a correction →

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.