S2W
Seongnam, South Korea
Korean cyber threat intelligence and offensive research company
Threat huntingPenetration test…Vulnerability ma…
- records
- 1
- team
- 50-200
- founded
- 2018
Malware-profiling and NDR house that built KISA's cyber-security AI dataset for tracking APT groups.
L2Cross-referenced, highest level reached
1 cross-referenced
Verified against independent sources
No customer ratings yet. How L3 ratings work →
Routing your brief is free, providers fund the channel. Capped at three recipients.
SANDS Lab is a L2-verified AI-implementation provider based in Gwacheon, South Korea, delivering threat-hunting, blue-team. Ranked on proof, 1 verified records on the Trustgent index.
What they build
Threat intelligence and detection engineering firm based in Gwacheon (Gyeonggi-do), with roots going back to the mid-2000s. Portfolio covers CTX (threat intel platform with IoCs and actor profiles), MNX (network detection and response for IT/OT traffic) and MDX (ML-based APT malware detection). Delivered KISA's cyber-security AI dataset project profiling 130 attacker groups and botnet families, publicly presented at AVAR.
Quick facts
- HQ
- Gwacheon, South Korea
- Founded
- 2004
- Team
- 50-200
- Languages
- Korean, English
- Stack
- CTXMNXMDX
Capabilities
- Threat hunting
- Blue team & detection engineering
Industries served
- Financial services
- Government & public sector
Regulatory readiness
Cross-referenced against public registries where a public source exists (L2+). The check mark marks an attribute we have a source for, see the proof page.
About SANDS Lab
What does SANDS Lab build?
SANDS Lab is a L2-verified AI-implementation provider on Trustgent, delivering Threat hunting, Blue team & detection engineering.
Where is SANDS Lab based?
SANDS Lab is headquartered in Gwacheon, South Korea.
How is SANDS Lab verified on Trustgent?
SANDS Lab has an EARNED verification level of L2 on Trustgent, with 1 contributing verified records (most recent verification: 2026-07-07). Verification is independent of any subscription, plan tier is never a ranking input.
How is SANDS Lab ranked?
Rank is a pure function of three EARNED signals: verification level (dominant), record count, and recency. No plan, fee, spend, or paid placement is ever an input. See https://trustgent.com/how-we-rank.
Similar verified providers
Same capability, ranked plan-blind on earned verification.
PLAINBIT
Seongnam, South Korea
DFIR-first boutique, structured around retainers, compromise assessments and Active Directory security work.
Blue team & dete…Incident responseThreat hunting
- records
- 1
- team
- 10-50
- founded
- 2013
NAONWORKS
Seoul, South Korea
OT/ICS-focused blue team; runs the CEREBRO NDR line for industrial networks inside the AhnLab group.
Blue team & dete…Threat huntingSOC & MDR monito…
- records
- 1
- team
- 50-200
- founded
- 2007
Genians
Anyang, South Korea
North Korean APT tracking and endpoint hunt research from Anyang.
Threat huntingBlue team & dete…
- records
- 1
- team
- 200+
- founded
- 2005
NSHC
Seoul, South Korea
Korean-origin offensive security firm with regional offices
Penetration test…Red teamingThreat hunting
- records
- 1
- team
- 50-200
- founded
- 1999