TVING rebuilds security architecture based on Zero Trust

Sep 23, 2026, 09:36 am

TVING is rebuilding its security architecture based on the "Zero Trust" principle, which fundamentally trusts no access. The platform is strengthening access and privilege management across its apps, web services, and cloud environments, while also considering the introduction of artificial intelligence (AI)-driven security monitoring and a bug bounty program.

TVING announced on the 23rd that it has established four core principles—strict access verification, least privilege, assumption of breach, and continuous verification—and is progressively applying them across its overall service and cloud infrastructure.

First, the company implemented authentication token verification across all segments of its app and web services and enforced mandatory updates for legacy app versions. It is also reviewing the adoption of technology to detect and block tampered applications.

System access privileges have been refined by job role, with controls tightened by managing the scope and validity periods of authorizations. Assuming the likelihood of actual breaches, the company is also reviewing contingency incident response systems and procedures for various scenarios.

In its cloud environment, TVING built a system that detects abnormal activities in real time and sends alerts upon unauthorized or irregular access. Moving forward, it plans to expand the scope of mock penetration testing and vulnerability assessments to cloud accounts and privilege domains.

Follow-up security investments will also continue. The company is evaluating credential management tools, source code analysis, and vulnerability management solutions, while also reviewing a bug bounty program where external security researchers discover and report vulnerabilities. It additionally aims to enhance real-time response capabilities by applying AI-powered security threat detection and prevention technologies.

Security measures for customer data and core systems have been upgraded as well. TVING migrated secrets and sensitive information contained in code to a dedicated management system and built an automated mechanism to intercept them at the source code repository stage. Next-generation endpoint detection and response (EDR) solutions were rolled out to all employee PCs.

App signing keys and digital rights management (DRM) keys were replaced. Furthermore, the company upgraded its login and session verification architecture and transitioned its password storage mechanism to a bcrypt-based algorithm.

A TVING official said, "Placing customer data protection as our highest priority, we are continuously reviewing our security systems and strengthening security standards so that they translate into concrete actions. We will further advance our Zero Trust-based access and privilege controls as well as our breach response systems, and continue investing in next-generation security technologies, including AI-based threat detection."

Son Kang-hoon

#TVING