NFLabs operates a three-business model: security training (purpleflair learning system), offensive outsourcing (penetration testing and hardening), and R&D. The tech stack—Python, AWS, Elasticsearch, Terraform, Docker—suggests a cloud-native platform approach. Active hiring leans heavily toward security roles over engineering, with mid-level and senior practitioners dominating—a pattern typical of services firms scaling delivery capacity faster than product development. Current project focus spans ML/LLM research for training, learning analytics, and CTF platform development, indicating an attempt to systematize what has likely been manual content creation and service delivery.
NFLabs, founded in 2019, provides cybersecurity training, penetration testing, and related services from Tokyo. The company runs three interconnected business units: a training program (purpleflair) that develops security engineers, an outsourcing arm that applies offensive security techniques to harden client defenses, and R&D operations that convert real-world insights into new training content and tools. The model creates a feedback loop: training produces skilled practitioners, outsourcing engagements generate domain knowledge, and R&D packages that knowledge into scalable products. Current challenges include process bottlenecks in content creation, acquiring new penetration testing work, and reducing time-to-competency for trainees—all problems typical of rapid scaling in services.
Python, AWS, Elasticsearch, Terraform, Docker, and Git form the core. Security-specific tools include TryHackMe, Kaggle, KQL, and Kali Linux. Infrastructure tooling spans Ansible, CloudFormation, and Packer.
Purpleflair learning platform development, ML/LLM research for training, CTF and hardening programs, and acquisition of new penetration testing engagements.
Other companies in the same industry, closest in size