Cybersecurity defence companies in France

Open-source cyber threat intelligence and adversarial exposure validation platforms used by 6,000+ organisations worldwide, from national intelligence agencies to global enterprises.

OpenCTI

Open-source cyber threat intelligence platform that collects, correlates and operationalises threat data using the STIX 2.1 standard. It connects to 300+ intelligence feeds and security tools, maps threats to MITRE ATT&CK and provides automation and agentic AI to cut enrichment time from hours to seconds. Available as a self-hosted community edition and a licensed enterprise edition with advanced access controls, AI features and SaaS hosting.

OpenAEV

Open-source adversarial exposure validation platform that simulates realistic attack scenarios to test an organisation's technical controls, processes and people. Scenarios are built from threat intelligence and MITRE ATT&CK mappings, covering everything from atomic breach simulations to full crisis tabletop exercises across CISO, IT, legal and executive teams. Integrates with 30+ security tools including SIEM, EDR and XDR platforms.

Builds endpoint detection and response software for European enterprises and government agencies, with cloud and on-premises deployment options certified by ANSSI and the German BSI.

Builds sovereign European video intelligence software that detects threats, anomalies and security incidents in real time for defence, law enforcement and critical infrastructure operators.

Provides offensive and defensive cybersecurity services and software protection tools for software manufacturers, government agencies and defence organisations.

Builds post-quantum cryptography software that helps governments, financial institutions and critical infrastructure operators inventory their cryptographic assets and migrate to quantum-resistant encryption.

Develops network firewalls, endpoint protection and data encryption products for European defence, government and critical infrastructure organisations, as a subsidiary of Airbus CyberSecurity.

SNxr1200

Extra-ruggedised encryption firewall designed for embedding in military vehicles, aircraft and spacecraft operating in critical environments with TEMPEST classification.

SNi10 Industrial Firewall

Compact DIN-rail firewall for industrial OT environments, providing network segmentation and intrusion prevention for SCADA and industrial control systems.

SN-XL Series (SN6200)

High-performance enterprise firewall with modular interface slots delivering up to 80 Gbps throughput, ANSSI-qualified for protecting NIS2 Essential and Important Entities.

Network detection and response platform providing deep packet inspection for military networks and critical national infrastructure.

NDR Platform

AI-powered network detection and response platform combining static, heuristic, and machine learning engines to detect known and zero-day threats in real time across IT, OT, and cloud environments.

Decision Center

Central intelligence module that consolidates detection outputs into a decision framework, evaluating threats on technical severity, intent, and business impact with AI-driven SOC assistant and actionable recommendations.

Deep Visibility

Advanced network monitoring module providing real-time application-level visibility with bandwidth analysis, flow classification, and traffic mapping for complete digital infrastructure understanding.

Extended detection and response (XDR) cybersecurity platform protecting enterprise and defence endpoints against advanced threats.

TEHTRIS XDR AI Platform

Unified cybersecurity console that orchestrates EDR, SIEM, MTD, NTA, Honeypots, and DNS Firewall modules into a single AI-powered detection and response platform, deployed in under 24 hours for enterprises with 100,000+ endpoints.

EDR OPTIMUS

Endpoint detection and response agent with built-in NGAV using Deep Learning neural networks that detects unknown threats and performs 24/7 automatic remediation using only 1-3% CPU and 90 MB RAM.

SOAR

Security orchestration and automation engine with no-code playbook builder that interconnects TEHTRIS modules and third-party tools like Zscaler and Proofpoint for hyperautomated incident response.

Open-source collaborative cybersecurity engine using crowd-sourced threat intelligence to block malicious activity in real time.

Integrated circuit reverse engineering and hardware security lab specializing in backdoor detection, data extraction from black-box chips, and IC forensics. Serves government and defence supply chain security through its ChipJuice software and Le Lab facility in Sophia Antipolis.

French behavioural intelligence company building autonomous network self-awareness software for local knowledge accumulation and resilient data determinacy.

Predictive attack intelligence using behavioral AI. Advanced threat detection and prevention for critical infrastructure protection.

ChapsVision develops data-processing, cyber and intelligence platforms used for sovereign investigation, security and defence decision-support workflows.

AI-powered malware analysis and cyber threat detection platform specializing in rapid automated binary analysis.

ANSSI-certified encrypted messaging app used by the French Ministry of Armed Forces and RAID special police unit. Mandated by the French Prime Minister's office in 2023 as the replacement for WhatsApp across government.

Mobile security platform protecting enterprise and defence mobile device fleets against advanced mobile threats and data leakage.

Builds a SOC platform combining extended detection and response (XDR) with cyber threat intelligence for European enterprises and government organisations.

Sekoia Defend

An open XDR and SIEM platform that collects and correlates security data from endpoints, networks and cloud environments. It combines built-in threat intelligence, SIGMA-based correlation rules, retro-hunting and SOAR automation playbooks to detect and respond to attacks. Named a Leader in the Frost Radar for XDR in 2023.

Sekoia Intelligence

A cyber threat intelligence platform fed by 299 sources and 150+ exclusive trackers monitoring attacker infrastructure daily. It produces indicators of compromise in STIX 2.1 format and provides finished intelligence on threat actors, malware families and attack campaigns, available via API or natively integrated with Sekoia Defend.

European cybersecurity startup specializing in internet invisibility technology through their VIPN (Virtual & Invisible Private Network) system, making users, devices, and data invisible to prevent cyber attacks.