LG Uplus has achieved a significant milestone as its integrated account management service, AlphaKey, becomes the first domestic Identity as a Service (IDaaS) to receive the Cloud Security Assurance Program (CSAP) standard rating for Software as a Service (SaaS).
The CSAP certification, established under Article 23-2 of the Cloud Computing Promotion and User Protection Act, is a system where the Korea Internet & Security Agency (KISA) verifies that cloud service providers meet information security standards.
This certification is a crucial requirement for providing cloud services to the public sector.
With this achievement, AlphaKey is now positioned to expand its services to government agencies, public institutions, and state-owned enterprises.
Launched in 2025, AlphaKey is LG Uplus’s cloud-based integrated account management service, designed to strengthen account and access rights management for corporate clients.
It consolidates employee account information and access rights across various systems and SaaS applications, allowing users to access multiple business services with a single account.
The service helps organizations proactively address security threats by detecting anomalies such as unusual logins or access rights abuse in real-time.
AlphaKey offers Single Sign-On (SSO) functionality, enabling employees to work more efficiently without the need to manage separate identifications (IDs) and passwords for different business tools.
Notably, AlphaKey enhances security by implementing homomorphic encryption, which allows data processing while encrypted, significantly reducing the risk of account information breaches.
The service also utilizes post-quantum cryptography (PQC) based authentication technology, ensuring the protection of sensitive information and critical business assets even in quantum computing environments.
LG Uplus plans to leverage this CSAP certification to intensify its focus on the public sector market.
The company is currently developing an AlphaKey version optimized for public cloud environments and is conducting free proof-of-concept (PoC) trials with several public institutions. Based on these trial results, LG Uplus aims to refine the service and officially launch the public sector version of AlphaKey as early as the first quarter of next year.
Park Sung-yul, Executive Vice President of the Enterprise Business Innovation Group at LG Uplus, stated that AlphaKey is a security SaaS developed in-house by a domestic telecom operator, showcasing LG Uplus’s accumulated security expertise and service internalization capabilities. The CSAP certification officially recognizes AlphaKey’s security and reliability, and it’s committed to establishing it as a trusted service in the public sector.
In a related move, LG Uplus recently acquired Pagonetworks, a company specializing in Managed Detection and Response (MDR) services, to bolster its enterprise security business. By integrating Pagonetworks’ threat detection and response technologies, LG Uplus aims to enhance its corporate security capabilities and expand its integrated security services, including cloud security offerings such as Uplus SASE, in conjunction with existing business-to-business (B2B) security solutions like AlphaKey.
