Français
Nederlands
DeutschSolutions
Solutions to fix what the audit uncovers
Identifying a gap is not enough. We deploy and support tools chosen for their auditability and controlled cost, each linked to the requirement it helps meet.
Which tool for which gap?
The gaps our audits find most often, the tool that fixes them and the requirement of the NIS2 Directive (Article 21(2)) it contributes to.
| What the audit finds | Solution | NIS2 requirement (Art. 21(2)) |
|---|---|---|
| Shared administrator accounts, untracked supplier access | Vauban | (i) access control policies; (j) multi-factor authentication |
| Patches applied late, known vulnerabilities left open | Action1 | (e) vulnerability handling |
| Low staff awareness, no phishing metrics | OutKept | (g) cyber hygiene and cybersecurity training |
| No network threat detection, no proof that defences work | VEEZO | (b) incident handling: detection and response |
| Security alerts unmonitored at night and at weekends, no response capability | SOC as a Service | (b) incident handling: detection and response |
| Management's phones exposed, suspected spyware | Mobile security and spyware detection | (b) incident handling: contribution to detection |
Mappings taken from each solution's page. A tool contributes to a requirement; compliance also depends on its configuration, the procedures and how they are applied.
Our solutions
-
New
SOC as a Service
24/7 monitoring and response, operated in France
Analysts based in France monitor your workstations, servers, email and accounts day and night, with incident response included. Designed for SMEs, mid-sized companies, municipalities, public social welfare centres and public services.
-
New
Mobile security and spyware detection
Check-up, continuous protection and investigation, on iPhone and Android
Security analysis, threat detection and monitoring of your smartphones, interpreted by a digital forensics expert. Check-up €899 excl. VAT, protection from €89 excl. VAT per month.
-
Partner
VEEZO
Sovereign network cybersecurity, automated and managed
VEEZO continuously checks that your defences work, alerts, attests and blocks network threats, with no agents or in-house SOC team. Two offers, Auditor and Officer, and a strong contribution to NIS2, CyFun and ISO 27001 detection and response.
-
Partner
Vauban
Open-source privileged access management (PAM) bastion
Controls, records and monitors administrator and contractor access to servers, workstations and industrial equipment. Directly addresses the privileged access requirements of NIS2, ISO 27001 and CyFun.
-
Partner
Action1
Cloud patch management and vulnerability remediation
A lightweight agent on every device installs Windows and third-party updates within deadlines set by severity, and shows what is still exposed. A direct answer to the NIS2 vulnerability handling requirement.
-
Partner
OutKept
Phishing simulations and staff awareness
Test emails written by local ethical phishers, automated campaigns, a report button and more than 100 training items. Measurable indicators for the NIS2 and CyFun training requirement.
What these tools do not cover
Tools do not deliver compliance on their own. Policies and risk analysis (a), backup management (c), cryptography (h) or multi-factor authentication beyond privileged access (j) call for other measures. The action plan from our audit sets out what to put in place, with your teams and suppliers.