TeamT5
Taipei-based threat intelligence firm tracking Asia-Pacific APT activity, offering ThreatVision intelligence, ThreatSonar endpoint threat hunting, and incident response.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
TeamT5 (Team T5, Inc.) is a Taipei-based cybersecurity company specialising in threat intelligence on advanced persistent threat groups operating in the Asia-Pacific region, particularly China-nexus actors. Founded in 2014 by Tsai Sung-ting, it combines an intelligence research team with commercial products and incident response services, and reports that roughly 40 percent of its clients are outside Taiwan, with a strong presence in Japan.
Its product line comprises ThreatVision, a subscription intelligence platform covering APT actors, malware and campaigns; ThreatSonar, an endpoint threat-hunting and compromise-assessment tool that analyses endpoint artefacts against TeamT5’s intelligence; ThreatSonar Plus for endpoint risk assessment; and ThreatSonar Anti-Ransomware. Researchers publish regularly on actors such as APT41 and BlackTech and on malware families like Pangolin8RAT.
In 2022 the company raised a Series A from JAFCO, ITOCHU and Macnica, which also act as distribution and service partners in Japan. In February 2026 CISA added a 2024 file-upload flaw in ThreatSonar Anti-Ransomware (CVE-2024-7694) to its Known Exploited Vulnerabilities catalogue; TeamT5 attributed the limited exploitation to Chinese APT groups it tracks and said affected customers had been patched in 2024.
Innovation Matrix Assessment
Steady stream of published APT research and a product line that has grown from intelligence feeds into endpoint hunting, risk assessment and anti-ransomware, though innovation is incremental rather than rapid.
Region-specific APT intelligence tied directly to an endpoint hunting tool and IR services gives Asia-Pacific SOCs actionable context that global vendors often lack; ITOCHU's CSIRT and CTC's MSS are named users.
Backed by JAFCO, ITOCHU and Macnica (2022 Series A), roughly 90 staff at that time, and a Frost & Sullivan regional award, but adoption is concentrated in Taiwan and Japan and funding amounts are undisclosed.
Specialised regional APT intelligence is valuable but follows an established threat-intelligence-plus-IR model rather than redefining the category.
Independent press (The Register, SecurityWeek) documents its APT attribution research and it is used by Japanese enterprises, but the exploitation of a flaw in its own ThreatSonar product, flagged by CISA, weighs against it.
Sustained China-nexus targeting of Taiwan, Japan and the wider region makes specialised Asia-Pacific threat intelligence likely to stay relevant over the next 3-5 years.
Why CISOs Should Care
CISOs with exposure to Taiwan, Japan or wider Asia-Pacific gain deep, locally sourced intelligence on China-nexus APTs plus tools and IR capacity to act on it.
What Makes It Different
It pairs in-house Asia-Pacific APT research with its own endpoint hunting product, so intelligence feeds directly into compromise assessment rather than being sold as a standalone feed.
The Matrix Verdict
62/100 — INCREMENTAL INNOVATOR
Scores 37/60 (62/100), placing TeamT5 in the Incremental tier. It is a respected regional specialist with credible research and strategic Japanese backing, but limited geographic reach and the exploited ThreatSonar vulnerability keep it below the Meaningful tier.
Editorial Note: Claims vs. Verified Findings
The 500+ organisations figure and product effectiveness claims come from TeamT5's own website; independent evidence includes the ITOCHU-disclosed 2022 investment, press coverage of its APT research, a Frost & Sullivan award and CISA's KEV listing of CVE-2024-7694.
Sources
Alternatives to TeamT5
Synack Inc
A penetration-testing-as-a-service platform pairing a vetted researcher community with AI-driven attack surface discovery for continuous security validation.
Horizon3.ai
Autonomous penetration testing company whose NodeZero platform self-attacks networks without persistent agents, aiming to replace annual manual pentests…
Unknown Cyber Inc.
CISO ReviewedMalware genomics platform using automated deep static analysis and code-lineage comparison to identify unseen malware, variants, and supply-chain…
Cogent Security
Agentic AI platform that autonomously triages, investigates, and remediates vulnerabilities as a force multiplier for security teams.
Airlock Digital
Application allowlisting (deny-by-default) platform that blocks unapproved executables, scripts, and processes to prevent ransomware and malware execution.
Vannevar Labs
A Palo Alto defense-AI company processing foreign-language and open-source intelligence under a $40M DoD contract, alongside peers like…