What Qontrol does

Qontrol is a French SaaS company founded in 2018 by Michael Monerau, headquartered in Paris and operating as Articule SAS (SIREN 843409954). The company provides an Agentic GRC (Governance, Risk, and Compliance) platform purpose-built for virtual CISO (vCISO) consultants, managed service providers (MSPs), and managed security service providers (MSSPs) who deliver outsourced cybersecurity services to SMB and mid-cap clients. The platform also supports direct self-serve subscription by SMBs and mid-cap organizations that prefer to manage their cybersecurity posture internally.

Qontrol's product line is structured around two core offerings: Qontrol vCISO, a multi-tenant consultant cockpit for portfolio-wide client management, and Qontrol Pilot, the client-facing GRC workspace. The platform supports 15+ pre-loaded regulatory frameworks (ISO 27001, NIS2, DORA, CRA, TISAX, GDPR, SOC 2) with expert-grade methodology and cross-mapping calibrated for SMBs. AI capabilities, branded "Agentic GRC," leverage Anthropic Claude to execute mechanical tasks (assessments, compliance drafting, reporting), while consultants orchestrate and guarantee outputs. Additional modules include a User Diagnostic (3-minute daily employee cybersecurity journey with reported NPS > 4.6/5), Cyber Passport (public compliance showcase), External Surface Scan (pre-sales reconnaissance), and a template library for industrializing consulting methodology. Data is hosted on OVH France infrastructure for European sovereignty.

Qontrol generates revenue through a tiered subscription model: €20 per consultant per month for the cockpit, €69 per client per month for Pilot licenses (with preferential partner rates), and a €100 per month Premium AI add-on offering 5x the AI quota. Distribution is primarily partner-mediated: vCISO consultants and MSPs resell or embed Qontrol licenses into their service portfolios. The company raised €1.5 million in seed funding in April 2023 from Cyber Impact Ventures, AG2R LA MONDIALE, Bpifrance, and BNP Paribas, with a stated target of 150 clients and €1 million in ARR within 18 months of the round.

Name

Qontrol

Legal name

Articule SAS

Website

https://qontrol.io

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

1–10 employees

Short description

Qontrol is a French SaaS GRC platform that equips vCISO consultants, MSPs, and MSSPs to deliver compliance, risk analysis, and cybersecurity missions for SMB and mid-cap clients across 15+ regulatory frameworks.

Ownership category

akta.pro rank

Product category

Cybersecurity Governance, Risk, and Compliance (GRC) Software

NAICS

Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Compliance, GRC Workflow & Audit Automation Platforms (HDAEAHAL)

akta.pro secondary industries

Enterprise AI Governance, Risk & Compliance Platforms (Model Risk, Audit, Policies) (HDAEANAE), Compliance Technology, GRC Platforms & Controls Automation Advisory (BPAHAFAO)

Keywords

• GRC compliance software
• Virtual CISO platform
• Cybersecurity compliance management
• Multi-client cyber cockpit
• Risk assessment automation

Headquarters

HQ city

Paris

HQ country

France

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Consultant Platform Subscription: Consultants (vCISO, MSP, MSSP) pay a monthly subscription of €20 HT per consultant seat for the production cockpit. This includes multi-client management, pre-sale module, NFR Pilot license, and template library.
2. Client Pilot Licenses: Consultants purchase Qontrol Pilot licenses at preferential partner rates (starting from €69 HT per client per month) and resell/integrate into their own services at their chosen pricing. This creates a two-tier revenue model with volume-based partner pricing.
3. Premium AI Add-on: Premium option at €100 HT/month provides 5× the AI quota for consultants requiring intensive AI agent usage. Available as an add-on to the standard consultant subscription.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels6 records

Core offering

Qontrol is a SaaS-based Agentic GRC (Governance, Risk, and Compliance) platform that centralizes and accelerates cyber diagnostics, compliance assessments, and outsourced CISO missions for vCISO consultants, MSPs, and MSSPs serving SMB and mid-cap clients. Its two flagship products, Qontrol vCISO (consultant multi-client cockpit) and Qontrol Pilot (client-facing GRC workspace), combine 15+ pre-built regulatory frameworks, AI-powered agents that automate mechanical tasks, risk analysis, employee diagnostics, and a public Cyber Passport for client trust-building.

Product overview

Qontrol is a European cybersecurity GRC-as-a-Service platform structured around two primary products: Qontrol vCISO (the consultant-facing multi-client cockpit for vCISOs, MSPs, and cybersecurity consulting firms) and Qontrol Pilot (the client-facing GRC space for SMBs and mid-caps). The platform integrates compliance management (15+ frameworks including ISO 27001, NIS2, DORA, CRA, TISAX, GDPR), risk analysis, ISMS documentation, collaborative reporting, and AI-powered Agentic GRC features. Additional modules include User Diagnostic (employee cybersecurity awareness), Cyber Passport (public compliance showcase), External Surface Scan (pre-sales reconnaissance), and a template/resource library for industrializing consulting delivery. Pricing is tiered: €20/consultant/month for the cockpit plus €69/client/month for Pilot licenses, with optional AI Premium at €100/month for increased AI quota.

Differentiator

Problem solved

Functional benefit

Products and services

• Qontrol vCISO A multi-tenant SaaS cockpit for vCISO consultants, MSPs, and MSSPs that centralizes sales, cyber diagnostics, compliance assessments, risk analysis, documentation, and reporting across multiple client engagements. Sold per consultant seat at €20 HT/month with optional Premium AI add-on.
• Qontrol Pilot The client-facing GRC workspace delivered to end-user SMBs and mid-caps, covering compliance management across 15+ frameworks (ISO 27001, NIS2, DORA, CRA, TISAX, GDPR), risk analysis with before/after scoring, ISMS documentation, dynamic reporting with one-click PDF/DOCX export, collaborative client access, Cyber Passport, and task management. Sold via partner resellers from €69 HT/client/month or direct self-serve.

Quantifiable outcome

• 3 minutes/day for 10 days employee cybersecurity diagnostic with User NPS > 4.6/5
• +3 more outcomes

Named customers8 records

Segments1 record

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature9 records

Partnerships

Two partnerships are on record, tiered core.

• Les Trouvailles de Pat' (AG2R LA MONDIALE)coreGTM or Marketing Partner · 1 October 2024Qontrol was integrated into Les Trouvailles de Pat' platform, an initiative of AG2R LA MONDIALE that references and promotes innovative startups protecting businesses and improving quality of life at work. The partnership provides visibility to AG2R's 500,000+ business customers. Qontrol offers diagnostic tools, expert access, and the Cyber Passport to help SMEs build cybersecurity posture.
• CYBIAH (Campus Cyber)coreStrategic or Co-development PartnerPartnership with CYBIAH program at Campus Cyber for Paris-region enterprises and local authorities. Qontrol has delivered 150+ engagements through the program. The partnership enables CYBIAH consultants to operate at scale using Qontrol's multi-client platform with harmonized practices.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Vanta: Leading US-based automated compliance and GRC platform supporting frameworks including SOC 2, ISO 27001, HIPAA, and GDPR. Comparable to Qontrol as a SaaS GRC solution, but Vanta targets a broader enterprise segment with significantly more capital and global reach, competing for the same SMB compliance buyer.
• Drata: Automated compliance platform for SOC 2, ISO 27001, HIPAA, GDPR, and other frameworks. Direct competitor to Qontrol's compliance automation module, with strong traction among SaaS companies and expanding into Europe. Significantly larger scale and broader feature set.
• Secureframe: Compliance automation platform covering SOC 2, ISO 27001, HIPAA, PCI, and GDPR. Competes with Qontrol in the SMB/mid-cap compliance automation category and is expanding European presence. Similar GTM motion of partner/consultant enablement.
• OneTrust: Large-scale trust intelligence platform covering privacy, GRC, ethics, and ESG. Competes with Qontrol at the high end of the GRC market and has acquired compliance automation capabilities (e.g., Tugboat Logic). Relevant as a broader incumbent that could absorb the SMB GRC category.
• Tugboat Logic (OneTrust): SMB-focused GRC and compliance automation platform acquired by OneTrust. Directly comparable to Qontrol's SMB-focused positioning and feature set, particularly around SOC 2 and ISO 27001.

Emerging players

• Sprinto: Compliance automation platform focused on SaaS companies seeking SOC 2, ISO 27001, and GDPR. Comparable to Qontrol in framework coverage and SMB target segment, with stronger traction in India and growing European presence.
• Thoropass: Compliance platform combining automation with in-house auditor expertise for SOC 2, ISO 27001, and HIPAA. Comparable to Qontrol's blend of software + expert methodology, though focused primarily on the US market.
• Laika: Compliance and GRC platform for SaaS companies pursuing SOC 2, ISO 27001, and other certifications. Comparable in target customer (tech-enabled SMBs) and pricing model, though primarily US-focused.

Direct peers

• EGERIE: European (French-headquartered) GRC platform focused on cyber risk management and compliance for mid-market and enterprise organizations. Directly comparable to Qontrol as a European SMB-focused GRC platform with similar regulatory framework support.

Regional players

• CryptoSec (Cryptosec / SGS): European/UK-headquartered cybersecurity and compliance services firm. While primarily a services business rather than software platform, it is comparable as a competing provider of GRC and compliance advisory services to European SMBs and mid-caps in the same buyer segment.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/QontrolHQ
• Facebookfacebook.com/QontrolHQ

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds1 record

Investors4 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Qontrol