ArkSec
Beijing-based cloud-native security vendor providing container, Kubernetes, and network micro-segmentation protection for hybrid-cloud enterprises.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
ArkSec (formerly branded Yakeyun) is a Beijing-headquartered cloud-native security vendor founded in 2014. Its platform groups capabilities into three areas: traffic situation management (a cloud-native vTap and sandbox for east-west traffic visibility), workload protection (container image scanning, Kubernetes cluster hardening, cloud-native WAF, and edge-computing security), and network security (business micro-isolation/micro-segmentation to contain lateral movement). The combination targets the same workload-and-posture problem that Western CNAPP and CWPP vendors address, but built for China’s domestic cloud and hybrid-infrastructure stack.
What differentiates ArkSec is less technical novelty than market focus: it has built out a reasonably complete cloud-native security stack for Chinese enterprises in sectors like automotive manufacturing, new-energy vehicles, and telecom operators, where Western CNAPP vendors have limited local presence. Disclosed funding is small (roughly $1.5-10 million depending on the source, backed by MiraclePlus, Infotech Ventures, and InnoAngel Fund), and public documentation of its product and leadership is thin and occasionally contradictory across business-intelligence aggregators, which limits independent verification of its claims.
Innovation Matrix Assessment
The product line (container scanning, K8s hardening, cloud WAF, micro-isolation) has been built out incrementally since 2014 with no documented major technical breakthroughs in recent years.
Bundles workload protection and network segmentation in one platform, which is operationally useful for hybrid-cloud teams, though no independent efficiency data was found.
Disclosed funding is minimal (roughly $1.5-10M across unclear rounds per CB Insights/Preqin) with only two named customers (National Grid, SAIC Motor) in aggregator data and no recent funding news.
Its feature set largely mirrors established CNAPP/CWPP players (e.g., ARMO, Aqua) rather than introducing a structurally new approach to cloud security.
No independent test results, breach case studies, or analyst recognition were found; claims rest on vendor and aggregator profiles rather than verified outcomes.
Cloud-native workload and Kubernetes security remain durable needs in China's expanding cloud and auto-tech sectors, though competition from larger, better-funded CNAPP vendors is intense.
Why CISOs Should Care
For CISOs operating in or supplying China's cloud/manufacturing ecosystem, ArkSec offers a locally-built alternative for container, Kubernetes, and network segmentation coverage where Western CNAPP vendors have limited presence.
What Makes It Different
Rather than a single novel technique, ArkSec differentiates by bundling traffic visibility, workload protection, and micro-segmentation into one regionally-focused platform built for China's domestic cloud stack.
The Matrix Verdict
38/100 — EMERGING / UNRANKED
ArkSec sits as an Emerging/Unranked entry (well below 50/100): it is a real, operating cloud-native security vendor with a decade of history and a credible if narrow product set, but thin funding, no independent efficacy evidence, and a feature set that largely tracks rather than leads the CNAPP category.
Editorial Note: Claims vs. Verified Findings
Customer names (National Grid, SAIC Motor) and funding totals come from third-party business-intelligence aggregators (CB Insights, Preqin) that disagree with each other on leadership and funding figures; no independent case study, analyst report, or test result was found to corroborate vendor claims.
Sources
Alternatives to ArkSec
Wiz
Agentless, graph-based cloud security platform that maps multi-cloud risk end-to-end, now owned by Google after a record $32B…
Chainguard
Provides hardened, minimal, continuously-rebuilt container images and software packages to eliminate vulnerabilities before they reach production.
Second Front Systems
A Wilmington, DE defense-tech company whose Game Warden platform deploys commercial SaaS into DoD classified networks in 90…
Sysdig
The company behind Falco, the CNCF's runtime security standard, offering an eBPF/kernel-level CNAPP built on live syscall-based threat…
Microsoft Defender for Cloud
Microsoft's built-in cloud-native application protection platform, unifying CSPM, workload protection, and DevOps security natively across Azure, AWS, and…
Obsidian Security
Obsidian Security provides a SaaS security posture management (SSPM) platform that detects identity-centric threats and misconfigurations across enterprise…