CyberIndexBeta

SOMMA, Inc. (주식회사 쏘마)

Vendor

SOMMA is a South Korean company in the Pangyo technology district, south of Seoul, and what it sells is closer to an analyst's toolkit than to an antivirus product. Its business is threat hunting: looking for an intruder already inside a network rather than blocking one at the door. Its three products divide that work. MONSTER is the managed threat-hunting platform, collecting endpoint data and automating the analysis and response around it. CHEIRON is an adversary emulator that runs simulated APT behaviour against an organisation to see what its defences notice. ANY-OFFICE covers endpoint monitoring for remote workers. For this index the distinction is worth keeping in view: a hunting platform is bought to find what prevention missed, and it is not measured by the detection laboratories that score preventive products, so its rows here describe capability rather than test results.

Country
South Korea
Headquarters
Seongnam, South Korea
Year Established
2016
Employees
—
Customers
—
Users
500 users (2021)Vendor states: 주식회사 쏘마 | SOMMA, INC.
Revenue
—
Status
Active

Support locations

Support in 1 country

South Korea
Headquarters · Seongnam, South Korea Support location Country with support
Asia1 country
South Korea · Seongnam

Where the vendor offers local support — a support centre, an office it lists, or a local support line (shown as the country alone) — from the vendor’s own site. Partners and resellers are not counted.

Products

ProductCategoryMarketPlatform & VersionFree / Paid
MONSTEREnterprise AntimalwareEnterpriseCloudPaid

Certifications

—

Recent test results

MITRE ATT&CK Evaluations

Recent changes

  • 2026-10-21Users: 500 users (2021, from 주식회사 쏘마 | SOMMA, INC.)
  • 2026-10-21Users: 500 users (2021, from LLM estimation)
  • 2026-10-20Users: 5000 users (2026, from LLM estimation)
  • 2026-10-20Price: paid MONSTER
  • 2026-10-18Support location: Seongnam, KR
  • 2026-10-14Runs on Cloud MONSTER
  • 2026-10-12New MITRE ATT&CK Evaluations (Enterprise) result MONSTER
  • 2026-09-23Central Management Console: built in MONSTER
  • 2026-09-23Behavioral Detection: built in MONSTER
  • 2026-09-22Listed in Enterprise Antimalware MONSTER
  • 2026-09-19New vendor listed
  • 2026-09-19Sold to: Enterprise MONSTER
  • 2026-09-19New product listed MONSTER

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.