Independent European Cybersecurity Provider: Sovereign MDR, Offensive Security and CERT

Founded in 2000 by Alexandre Fayeulle and now led by chief executive David Buhan, the French firm has grown into an independent European cybersecurity provider with roughly 600 experts working from offices across France, Spain, Italy, Germany, Quebec and Tahiti. Its customers are organisations that depend heavily on digital infrastructure, with dedicated practices for healthcare, public services and Industry 4.0 manufacturing. The business became a mission-driven company in May 2024 and holds B Corp certification.

The core managed offering, mySOC, is presented as an open XDR platform that orchestrates a customer's existing security stack rather than replacing it. It ingests metadata, logs and alerts from networks, endpoints, workstations and cloud environments, normalises them, and enriches the result with in-house threat intelligence such as indicators of compromise and malicious IP addresses. Machine-learning models then correlate behaviours to surface malicious activity, analysts triage alerts around the clock, and remediation can be automated through mySOC SOAR playbooks. Deployment is either fully managed or bring-your-own-stack.

European digital sovereignty is the main positioning lever: a made-in-Europe SOC triad pairing HarfangLab EDR, Gatewatcher NDR and a SIEM layer, with audit-proof storage in European data centres and explicit protection against third-country access under legislation such as the Cloud Act. Beyond monitoring, the company runs a PASSI-qualified offensive security practice of about 100 auditors delivering some 1,200 engagements a year, plus a CERT for incident response and crisis management; Germany's BSI recognises it as a qualified APT response provider.