Almond
Almond is an independent French cybersecurity firm employing 450 experts across France and Switzerland, providing end-to-end security services (managed SOC, CERT incident response, security evaluations, cloud, training) to large enterprises and public sector clients. It holds CESTI and EUCC accreditations from ANSSI for security product certifications.
- Company typePrivate
- Founded2006
- HeadquartersVigneux-sur-seine, France
- Headcount251–500
- GTM typeB2B
- OfferingServices
What Almond does
Almond is an independent French cybersecurity group delivering end-to-end security and secure cloud/infrastructure services to large enterprises and public sector clients. Founded in 2006 and headquartered in Sèvres near Paris, the firm employs 450 cybersecurity experts across six French offices (Sèvres, Nantes, Rennes, Lyon, Strasbourg, Aix-en-Provence) and a Swiss headquarters in Geneva. Its service portfolio is organized around five functional pillars: anticipation (risk identification), protection (security hardening), detection (24/7 SOC monitoring via CWATCH), reaction (CERT/CWATCH incident response), and recovery (ROC, business continuity), complemented by security evaluations through the SEAL laboratory, cloud strategy and managed services, and training through the Almond Institute. The group was formed through the February 2023 acquisition of Amossys, which brought CESTI/ITSEF accreditation from ANSSI and now forms the basis of the SEAL Security Evaluation & Analysis Lab.
The company's technology stack combines proprietary assets with partner integrations. Core proprietary capabilities include the SEAL laboratory for security product evaluations (CSPN, Common Criteria, EUCC schemes), the M&NTIS adversary emulation and Cyber Range platform, the CWATCH managed SOC, and the ROC resilience operation center. Almond holds CESTI accreditation from ANSSI and was among the first French laboratories to obtain EUCC accreditation at Substantial and High assurance levels in October 2025. Partnerships extend the portfolio: Qevlar AI provides AI-powered threat detection, Red Sift adds email security and digital risk protection, and Memority contributes identity and access management consulting. Academic collaborations with CentraleSupélec, CNRS, Inria, and the PIRAT research group, including CIFRE doctoral programs, support technical recruitment and research.
Almond generates revenue through three streams: managed security services (SOC/CERT recurring contracts), professional services (security audits, penetration testing, PASSI and CESTI evaluations, consulting), and training (Almond Institute classroom, e-learning, coaching, Cyber Game). GTM is primarily direct enterprise field sales supplemented by public procurement frameworks (CANUT, RESAH, CAIH, GIGALIS) and technology partner channels. The company targets 80M€ revenue by 2026 with stated 15% annual growth, serving marquee clients including Vinci, BNP Paribas, Pernod Ricard, Société Générale, Saint-Gobain, Veolia, AG2R La Mondiale, France.tv, and PAI Partners.
Almond firmographics
Firmographics- Name
- Almond
- Legal name
- Almond SAS
- Website
- https://almond.eu
- Company type
- Private
- Founded year
- 2006
- Operating status
- Operating
- Headcount range
- 251–500 employees
- Short description
- Almond is an independent French cybersecurity firm employing 450 experts across France and Switzerland, providing end-to-end security services (managed SOC, CERT incident response, security evaluations, cloud, training) to large enterprises and public sector clients. It holds CESTI and EUCC accreditations from ANSSI for security product certifications.
- Ownership category
- akta.pro rank
Almond industry classification
Industry- Product category
- Cybersecurity Services
- NAICS
- Computer Systems Design and Related Services (5415), Computer Systems Design and Related Services (54151)
- SIC
- Services-Engineering, Accounting, Research, Management (8700)
- akta.pro primary industry
- Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)
- akta.pro secondary industries
- Cybersecurity & Identity Consulting (BPAHAEAG), Application Security Engineering (DevSecOps, AppSec Remediation) (BPAEAFAI)
Keywords
Where Almond is headquartered
LocationHeadquarters
- HQ city
- Vigneux-sur-seine
- HQ country
- France
- HQ region
- Europe
Offices7 records
Markets served
Almond business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales
Revenue model
- Managed Security Services: Ongoing cybersecurity monitoring, SOC operations, and incident response provided as managed services with 24/7 coverage. Revenue generated through recurring service contracts with enterprise clients.
- Security Evaluation & Consulting: Security audits, penetration testing, certification evaluations (CSPN, EUCC), and compliance consulting services. Includes ANSSI qualification support, PASSI audits, and software security evaluations conducted by CESTI.
- Training & Awareness (Almond Institute): Cybersecurity training catalog including classroom training, e-learning (BYCE), coaching, awareness programs, and Cyber Game simulation exercises. Offers certification preparation and hands-on skill development.
Go-to-market motion3 records
Distribution channels3 records
Marketing channels5 records
Almond product offering
Product offeringCore offering
Almond provides comprehensive cybersecurity and secure cloud services to enterprises and public sector clients across France and Switzerland. Its offerings are structured around five pillars—anticipation (risk analysis, threat intelligence), protection (security architecture and hardening), detection (24/7 SOC monitoring via CWATCH), reaction (CERT incident response), and recovery (ROC cyber resilience)—alongside secure cloud strategy, engineering, and managed services. The portfolio also includes the Almond Institute for training and awareness, the SEAL laboratory for ANSSI-certified security product evaluations (CSPN, Critères Communs, EUCC), and the M&NTIS adversary emulation platform.
Product overview
Almond is a French cybersecurity company offering a comprehensive portfolio of security services organized around five core pillars: anticipation (risk identification and defense preparation), protection (security hardening and optimal defense), detection (early incident spotting), reaction (expert incident response), and recovery (operational restoration). The company provides Secure Cloud & Digital Technology services including strategy, engineering, and managed services. Through Almond Institute, it offers training, awareness, e-learning, coaching, and cyber game programs. The portfolio includes specialized offerings such as SEAL (Security Evaluation & Analysis Lab) combining CSPN, Common Criteria, and EUCC evaluation capabilities; CWATCH managed SOC services operating 24/7; ROC for cyber resilience; and M&NTIS Platform for adversary emulation and Cyber Range training.
Differentiator
Problem solved
Functional benefit
Brands
- Almond Institute: Training center offering cybersecurity awareness, training, e-learning, coaching, and Cyber Game programs
- SEAL
- CERT Almond CWATCH
- ROC
Products and services
- Cyber Security Services Comprehensive cybersecurity services for enterprises and public sector clients covering risk identification and defense preparation (anticipation), security hardening (protection), incident spotting (detection), expert incident response (reaction), and operational restoration (recovery).
- Secure Cloud & Digital Technology Cloud and digital technology services including strategy consulting, engineering implementation, and managed services for secure cloud operations, targeting organizations undergoing digital transformation with security requirements.
- Almond Institute Cybersecurity training center offering classroom courses, e-learning (BYCE), coaching, awareness programs, and Cyber Game simulation exercises for enterprises and individuals seeking to build security skills and certifications.
- SEAL (Security Evaluation & Analysis Lab) ANSSI-funded cybersecurity technical laboratory combining evaluation expertise for assessing security of software and network equipment through CSPN, Critères Communs, and EUCC certification schemes, available to software vendors and open-source projects.
- CWATCH (Managed SOC) 24/7 managed Security Operations Center providing continuous monitoring, threat detection, and incident response capabilities for enterprise clients, with international service centers enabling round-the-clock coverage.
- CESTI (Centre d'Évaluation de la Sécurité des Technologies de l'Information) ANSSI-accredited ITSEF/CESTI evaluation laboratory performing security product evaluations including CSPN, Critères Communs (Common Criteria), and EUCC certifications for software publishers and open-source projects.
- CERT (Computer Emergency Response Team) 24/7 Computer Emergency Response Team providing incident detection, analysis, and response services with guaranteed response times and coordinated disclosure capabilities for organizations experiencing security incidents.
- ROC (Resilience Operation Center) Operational center dedicated to cyber resilience combining anticipation, protection, detection, reaction, and recovery capabilities in a unified approach for enterprise clients requiring business continuity assurance.
- M&NTIS Platform Adversary emulation and Cyber Range platform enabling realistic attack campaigns to challenge SOC and CERT team procedures in immersive environments, supporting automated security evaluation through attack-path identification and validation.
Quantifiable outcome
- 80M€ projected revenue in 2026 with 15% annual growth
- +2 more outcomes
Companies that use Almond
Customer profileNamed customers12 records
Segments3 records
Ideal customer profiles3 records
Almond technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration2 records
AI capability1 record
Feature4 records
Almond partnerships and signals
Strategic signalPartnerships
Twelve partnerships are on record, tiered core and minor.
- Red SiftcoreAlmond integrates Red Sift solutions into its cybersecurity offerings, enhancing the portfolio with email security and digital resilience capabilities.
- IRISPACE (Institut régional de l'innovation spatiale)coreCo-founding member of 'Cyber & Spatial' working group with the Pole d'Excellence Cyber. Addresses cybersecurity challenges for space infrastructure and satellite systems. Includes Airbus Defense & Space, Gatewatcher, Sopra Steria, YesWeHack, IMT Atlantique, universities.
- Pôle d'Excellence CybercoreAssociation under French Ministry of Armed Forces and Brittany Region. Almond participates in 'Cyber & Spatial' working group co-piloted by Antoine Hautin (Almond). Develops cybersecurity ecosystem for training, research, and business innovation.
- PIRAT Research Group (CentraleSupélec, CNRS, Inria, Université de Rennes/IRISA)minorAcademic research collaboration for Attack-Defense workshop co-organized in Rennes. Includes CIFRE doctoral program with Manuel Poisson working on automated security evaluation using twins for attack path identification.
- ANSSIcoreFrench cybersecurity agency funding and sponsoring security evaluations of open-source software. Almond's SEAL laboratory conducts audits under ANSSI's open-source security program. Joint publication of HashiCorp Vault audit report.
- Skill-YouminorPartnership for operational cybersecurity training targeting the Swiss market. Launches enterprise cybersecurity training programs for Swiss organizations.
- MemoritycoreStrategic partnership for digital identity management consulting. Combined expertise in identity and access management (IAM) to address growing client needs in this domain.
- Pure OceanminorSponsorship and support for sailing competitions through Thomas de Dinechin skipper (Almond for Pure Ocean). Associates sporting performance with environmental commitment through marine ecosystem protection projects.
- Qevlar AIcoreStrategic alliance to integrate AI capabilities into Almond's cybersecurity operations, enhancing threat detection and response through artificial intelligence.
- Tranquil ITminorAlmond/Amossys CESTI conducted CSPN certification renewal for Tranquil IT's WAPT software. Collaboration demonstrates expertise in security evaluations and certification processes.
- CANUTcoreCentral purchasing body for digital and telecom services. Provides framework agreements enabling public sector clients to procure Almond's cybersecurity services with pre-negotiated terms and reduced procurement complexity.
- RESAH, CAIH, GIGALIScoreAdditional central purchasing bodies providing cybersecurity procurement frameworks for healthcare and public sector organizations in France.
Scale indicators7 records
Recent moves7 records
Expansion highlights6 records
Almond competitors and assessment
Company assessmentDirect peers
- Orange Cyberdefense: The MSSP arm of Orange, Orange Cyberdefense is the largest French pure-play cybersecurity services provider, with managed SOC, CERT, threat intelligence, and consulting services directly overlapping Almond's CWATCH, CERT, and consulting lines.
- Advens: French cybersecurity pure-play (formerly devoted to managed detection and response, SOC, and security advisory) that directly competes with Almond for mid-market and large French enterprise SOC and consulting mandates.
- Wallix: French-listed cybersecurity vendor focused on privileged access management and identity security, complementary in part but overlapping with Almond's newly created IAM Center of Expertise and broader enterprise identity go-to-market.
Broad incumbents
- Thales: Global defense and digital security group whose cybersecurity division offers SOC, IAM, data protection, and consulting services; competes with Almond in regulated French/European enterprise and defense-sector accounts.
- Capgemini: Global IT services group with a large cybersecurity practice spanning managed security, GRC, and identity — Almond's pre-sales director Guillaume Tournadre himself spent 25 years at Capgemini, illustrating the direct overlap in services and accounts.
- Sopra Steria: Major European IT services firm with a dedicated cybersecurity division, co-member with Almond of the Pôle d'Excellence Cyber 'Cyber & Spatial' working group, and direct competitor in French public-sector and regulated-industry SOC/consulting deals.
- Atos: European IT services incumbent with a sizable cybersecurity practice (managed security, MDR, identity, compliance) that competes with Almond for large French and pan-European enterprise and public-sector engagements.
- Devoteam: French-headquartered IT and digital transformation consultancy with a dedicated cybersecurity practice covering cloud security, identity, and managed services; competes with Almond across mid-market and enterprise advisory mandates.
Emerging players
- YesWeHack: French bug-bounty and vulnerability disclosure platform that co-leads the 'Cyber & Spatial' working group with Almond; adjacent rather than directly competitive, but competes for offensive-security budget within the same French enterprise accounts.
- Sekoia.io: French XDR / cybersecurity platform vendor with strong SOC tooling roots; competes indirectly with Almond's CWATCH managed SOC offering where French enterprises choose between outsourcing to Almond and consuming Sekoia's detection platform in-house.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Almond social profiles
Digital presenceAlmond compliance and trust
Trust signalCompliance12 records
Almond financial estimates
Financial estimateRevenue estimate
Valuation estimate
Almond leadership team
Management profileNumber of profiles
Profiles1 record
Almond subsidiaries and ownership
Company hierarchySubsidiaries2 records
Almond funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Almond M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Almond
What does Almond do?
Almond provides comprehensive cybersecurity and secure cloud services to enterprises and public sector clients across France and Switzerland. Its offerings are structured around five pillars—anticipation (risk analysis, threat intelligence), protection (security architecture and hardening), detection (24/7 SOC monitoring via CWATCH), reaction (CERT incident response), and recovery (ROC cyber resilience)—alongside secure cloud strategy, engineering, and managed services. The portfolio also includes the Almond Institute for training and awareness, the SEAL laboratory for ANSSI-certified security product evaluations (CSPN, Critères Communs, EUCC), and the M&NTIS adversary emulation platform.
Is Almond a public or private company?
Almond is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Almond founded?
Almond was founded in 2006. It employs 251 to 500 people.
Where is Almond based?
Almond is headquartered in Vigneux-sur-seine, France, in the Europe region.
How does Almond make money?
Three revenue lines are on record. Managed Security Services are the primary driver. The others are security Evaluation & Consulting and training & Awareness (Almond Institute).
Who are Almond's main competitors?
Direct peers on record are Orange Cyberdefense, Advens and Wallix. Broad incumbents are Thales, Capgemini, Sopra Steria, Atos and Devoteam. Emerging players are YesWeHack and Sekoia.io.
Does Almond have an API?
No public API is recorded for Almond.
What industry is Almond in?
Almond's product category is Cybersecurity Services. Its primary akta.pro industry code is BPAEADAG, Network Security Managed Services (Firewall/IDS/IPS/SASE), with a secondary code of BPAHAEAG, Cybersecurity & Identity Consulting. Its NAICS code is 5415 and its SIC code is 8700.