Rakuten Mobile became Japan’s first Cloudflare MSSP partner. The announcement moved through the trade press with minimal attention. It deserves more.
The model is specific: Rakuten Mobile will resell and deliver Cloudflare’s Zero Trust and network security stack to enterprise and SMB customers. This is not a white-label arrangement. Rakuten Mobile is taking on the delivery responsibility — implementation, configuration, ongoing management. For a company whose primary identity is as Japan’s fourth mobile network operator, that is a meaningful commitment.
Why it matters: Japan’s SMB security market is genuinely underserved by the existing partner landscape. The large SIers (NEC, Fujitsu, Hitachi) have minimum engagement sizes that effectively exclude the SMB tier. The pure-play managed security providers are priced for enterprise. The SMB market buys through relationships it already has, and those relationships are most often with its telco — for connectivity, for cloud, and increasingly for security bundled with those services.
Cloudflare’s Zero Trust architecture is well-suited to this distribution model. The technology is cloud-native, relatively fast to deploy, and does not require deep on-site professional services to implement at the SMB level. The commercial model — consumption-based, scaling with the customer — fits the telco bundling approach.
The honest caveat: Rakuten Mobile is not a security company. The depth of the MSSP delivery — the ability to investigate incidents, tune policies, respond to threats — is unproven at this stage. The partnership is an infrastructure play at its core: Rakuten Mobile provides the customer relationships and billing infrastructure, Cloudflare provides the technology. The security operations layer between the two parties is where the model will succeed or fail.
Watch the delivery model as it scales. If Rakuten Mobile builds genuine security operations capability around this partnership, it represents a new delivery channel for the SMB segment that the existing Japan security ecosystem has not successfully served. If the partnership remains a resale arrangement without security operations depth, it will underdeliver against the expectations its announcement sets.
Either way, the telco-led Zero Trust play is a signal about where Japan’s MSSP market is heading. KDDI and SoftBank are watching this closely.