SECURITY · KOMORI
Security report
To protect customer data, KOMORI stacks defenses at the edge, in transit, on the server, in the applications and in backups. This page shows how it works and how many attempts were actually stopped, using automatically collected figures.
Last updated: · refreshed automatically every hour
Last 30 days
- Server intrusion attempts blocked
- — Being set up
- Password-guessing attempts stopped at login
- 37 Runs of wrong passwords (272 failures) detected and throttled or paused
- Malicious requests blocked at the edge
- — Being set up
- Encrypted traffic (HTTPS)
- 100% TLS 1.3 and a valid certificate verified on every main domain
Collected since 2026-10-01. Items marked “Being set up” will show figures once collection starts.
Day by day
View as table
| Date | Login failures detected (per day) |
|---|---|
| 2026-10-27 | 3 |
| 2026-10-26 | 0 |
| 2026-10-25 | 4 |
| 2026-10-24 | 1 |
| 2026-10-23 | 3 |
| 2026-10-22 | 0 |
| 2026-10-21 | 3 |
| 2026-10-20 | 0 |
| 2026-10-19 | 1 |
| 2026-10-18 | 0 |
| 2026-10-17 | 7 |
| 2026-10-16 | 1 |
| 2026-10-15 | 4 |
| 2026-10-14 | 17 |
| 2026-10-13 | 0 |
| 2026-10-12 | 3 |
| 2026-10-11 | 1 |
| 2026-10-10 | 0 |
| 2026-10-09 | 4 |
| 2026-10-08 | 10 |
| 2026-10-07 | 13 |
| 2026-10-06 | 1 |
| 2026-10-05 | 12 |
| 2026-10-04 | 2 |
| 2026-10-03 | 1 |
| 2026-10-02 | 133 |
| 2026-10-01 | 48 |
| 2026-09-30 | 0 |
| 2026-09-29 | 0 |
| 2026-09-28 | 0 |
How our layered protection works
-
CDN and WAF (edge defense)
Every web request first passes through a global CDN that stops known attack patterns, malicious bots and volume attacks (DDoS) before they reach the server.
-
Encryption in transit
All services are HTTPS-only. Certificates renew automatically and are watched for expiry.
-
Automatic intrusion blocking
Failed server logins are watched continuously; persistent sources are automatically blocked at the firewall.
-
Login protection
Logins to KOREOS and other systems limit attempts: brute force is paused and slowed down without locking out legitimate users.
-
File and data isolation
Attachments are served only after a permission check. Each product and customer runs on separate applications and databases.
-
Malware protection
Uploaded files can never run as programs on the server. Automatic antivirus scanning of attachments is being rolled out; figures will appear here once it starts.
-
Daily off-site backup
Data is copied every day to a location outside the server (Google Drive) over an encrypted channel, so it can be restored after a failure.
-
24/7 monitoring
All services are monitored automatically; any failure alerts the team immediately, and every incident feeds improvements.
Hosting and responsibility
Our server runs in a data center in the United States (GeHost). Data management and security are designed and operated by KOMORI株式会社 in Japan, under its own responsibility.
No system is “100% unbreakable”. We review our protections continuously and publish these records to stay transparent. If you notice a vulnerability or suspicious behavior, please reach us through our contact page.