Almond

What Almond does

Almond is an independent French cybersecurity group delivering end-to-end security and secure cloud/infrastructure services to large enterprises and public sector clients. Founded in 2006 and headquartered in Sèvres near Paris, the firm employs 450 cybersecurity experts across six French offices (Sèvres, Nantes, Rennes, Lyon, Strasbourg, Aix-en-Provence) and a Swiss headquarters in Geneva. Its service portfolio is organized around five functional pillars: anticipation (risk identification), protection (security hardening), detection (24/7 SOC monitoring via CWATCH), reaction (CERT/CWATCH incident response), and recovery (ROC, business continuity), complemented by security evaluations through the SEAL laboratory, cloud strategy and managed services, and training through the Almond Institute. The group was formed through the February 2023 acquisition of Amossys, which brought CESTI/ITSEF accreditation from ANSSI and now forms the basis of the SEAL Security Evaluation & Analysis Lab.

The company's technology stack combines proprietary assets with partner integrations. Core proprietary capabilities include the SEAL laboratory for security product evaluations (CSPN, Common Criteria, EUCC schemes), the M&NTIS adversary emulation and Cyber Range platform, the CWATCH managed SOC, and the ROC resilience operation center. Almond holds CESTI accreditation from ANSSI and was among the first French laboratories to obtain EUCC accreditation at Substantial and High assurance levels in October 2025. Partnerships extend the portfolio: Qevlar AI provides AI-powered threat detection, Red Sift adds email security and digital risk protection, and Memority contributes identity and access management consulting. Academic collaborations with CentraleSupélec, CNRS, Inria, and the PIRAT research group, including CIFRE doctoral programs, support technical recruitment and research.

Almond generates revenue through three streams: managed security services (SOC/CERT recurring contracts), professional services (security audits, penetration testing, PASSI and CESTI evaluations, consulting), and training (Almond Institute classroom, e-learning, coaching, Cyber Game). GTM is primarily direct enterprise field sales supplemented by public procurement frameworks (CANUT, RESAH, CAIH, GIGALIS) and technology partner channels. The company targets 80M€ revenue by 2026 with stated 15% annual growth, serving marquee clients including Vinci, BNP Paribas, Pernod Ricard, Société Générale, Saint-Gobain, Veolia, AG2R La Mondiale, France.tv, and PAI Partners.

Name

Almond

Legal name

Almond SAS

Website

https://almond.eu

Company type

Private

Founded year

2006

Operating status

Operating

Headcount range

251–500 employees

Short description

Almond is an independent French cybersecurity firm employing 450 experts across France and Switzerland, providing end-to-end security services (managed SOC, CERT incident response, security evaluations, cloud, training) to large enterprises and public sector clients. It holds CESTI and EUCC accreditations from ANSSI for security product certifications.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (5415), Computer Systems Design and Related Services (54151)

SIC

Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)

akta.pro secondary industries

Cybersecurity & Identity Consulting (BPAHAEAG), Application Security Engineering (DevSecOps, AppSec Remediation) (BPAEAFAI)

Keywords

• Cybersecurity consulting
• Managed security services
• Security evaluations
• Incident response services
• Secure cloud services

Headquarters

HQ city

Vigneux-sur-seine

HQ country

France

HQ region

Europe

Offices7 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Managed Security Services: Ongoing cybersecurity monitoring, SOC operations, and incident response provided as managed services with 24/7 coverage. Revenue generated through recurring service contracts with enterprise clients.
2. Security Evaluation & Consulting: Security audits, penetration testing, certification evaluations (CSPN, EUCC), and compliance consulting services. Includes ANSSI qualification support, PASSI audits, and software security evaluations conducted by CESTI.
3. Training & Awareness (Almond Institute): Cybersecurity training catalog including classroom training, e-learning (BYCE), coaching, awareness programs, and Cyber Game simulation exercises. Offers certification preparation and hands-on skill development.

Go-to-market motion3 records

Distribution channels3 records

Marketing channels5 records

Core offering

Almond provides comprehensive cybersecurity and secure cloud services to enterprises and public sector clients across France and Switzerland. Its offerings are structured around five pillars—anticipation (risk analysis, threat intelligence), protection (security architecture and hardening), detection (24/7 SOC monitoring via CWATCH), reaction (CERT incident response), and recovery (ROC cyber resilience)—alongside secure cloud strategy, engineering, and managed services. The portfolio also includes the Almond Institute for training and awareness, the SEAL laboratory for ANSSI-certified security product evaluations (CSPN, Critères Communs, EUCC), and the M&NTIS adversary emulation platform.

Product overview

Almond is a French cybersecurity company offering a comprehensive portfolio of security services organized around five core pillars: anticipation (risk identification and defense preparation), protection (security hardening and optimal defense), detection (early incident spotting), reaction (expert incident response), and recovery (operational restoration). The company provides Secure Cloud & Digital Technology services including strategy, engineering, and managed services. Through Almond Institute, it offers training, awareness, e-learning, coaching, and cyber game programs. The portfolio includes specialized offerings such as SEAL (Security Evaluation & Analysis Lab) combining CSPN, Common Criteria, and EUCC evaluation capabilities; CWATCH managed SOC services operating 24/7; ROC for cyber resilience; and M&NTIS Platform for adversary emulation and Cyber Range training.

Differentiator

Problem solved

Functional benefit

Brands

• Almond Institute: Training center offering cybersecurity awareness, training, e-learning, coaching, and Cyber Game programs
• SEAL
• CERT Almond CWATCH
• ROC

Products and services

• Cyber Security Services Comprehensive cybersecurity services for enterprises and public sector clients covering risk identification and defense preparation (anticipation), security hardening (protection), incident spotting (detection), expert incident response (reaction), and operational restoration (recovery).
• Secure Cloud & Digital Technology Cloud and digital technology services including strategy consulting, engineering implementation, and managed services for secure cloud operations, targeting organizations undergoing digital transformation with security requirements.
• Almond Institute Cybersecurity training center offering classroom courses, e-learning (BYCE), coaching, awareness programs, and Cyber Game simulation exercises for enterprises and individuals seeking to build security skills and certifications.
• SEAL (Security Evaluation & Analysis Lab) ANSSI-funded cybersecurity technical laboratory combining evaluation expertise for assessing security of software and network equipment through CSPN, Critères Communs, and EUCC certification schemes, available to software vendors and open-source projects.
• CWATCH (Managed SOC) 24/7 managed Security Operations Center providing continuous monitoring, threat detection, and incident response capabilities for enterprise clients, with international service centers enabling round-the-clock coverage.
• CESTI (Centre d'Évaluation de la Sécurité des Technologies de l'Information) ANSSI-accredited ITSEF/CESTI evaluation laboratory performing security product evaluations including CSPN, Critères Communs (Common Criteria), and EUCC certifications for software publishers and open-source projects.
• CERT (Computer Emergency Response Team) 24/7 Computer Emergency Response Team providing incident detection, analysis, and response services with guaranteed response times and coordinated disclosure capabilities for organizations experiencing security incidents.
• ROC (Resilience Operation Center) Operational center dedicated to cyber resilience combining anticipation, protection, detection, reaction, and recovery capabilities in a unified approach for enterprise clients requiring business continuity assurance.
• M&NTIS Platform Adversary emulation and Cyber Range platform enabling realistic attack campaigns to challenge SOC and CERT team procedures in immersive environments, supporting automated security evaluation through attack-path identification and validation.

Quantifiable outcome

• 80M€ projected revenue in 2026 with 15% annual growth
• +2 more outcomes

Named customers12 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability1 record

Feature4 records

Partnerships

Twelve partnerships are on record, tiered core and minor.

• Red SiftcoreTechnology or Integration · 11 May 2026Almond integrates Red Sift solutions into its cybersecurity offerings, enhancing the portfolio with email security and digital resilience capabilities.
• IRISPACE (Institut régional de l'innovation spatiale)coreStrategic or Co-development Partner · 18 March 2026Co-founding member of 'Cyber & Spatial' working group with the Pole d'Excellence Cyber. Addresses cybersecurity challenges for space infrastructure and satellite systems. Includes Airbus Defense & Space, Gatewatcher, Sopra Steria, YesWeHack, IMT Atlantique, universities.
• Pôle d'Excellence CybercoreStrategic or Co-development Partner · 18 March 2026Association under French Ministry of Armed Forces and Brittany Region. Almond participates in 'Cyber & Spatial' working group co-piloted by Antoine Hautin (Almond). Develops cybersecurity ecosystem for training, research, and business innovation.
• PIRAT Research Group (CentraleSupélec, CNRS, Inria, Université de Rennes/IRISA)minorStrategic or Co-development Partner · 24 February 2026Academic research collaboration for Attack-Defense workshop co-organized in Rennes. Includes CIFRE doctoral program with Manuel Poisson working on automated security evaluation using twins for attack path identification.
• ANSSIcoreStrategic or Co-development Partner · 14 October 2025French cybersecurity agency funding and sponsoring security evaluations of open-source software. Almond's SEAL laboratory conducts audits under ANSSI's open-source security program. Joint publication of HashiCorp Vault audit report.
• Skill-YouminorChannel Partner/ Reseller/ Distributor · 30 September 2025Partnership for operational cybersecurity training targeting the Swiss market. Launches enterprise cybersecurity training programs for Swiss organizations.
• MemoritycoreStrategic or Co-development Partner · 3 April 2025Strategic partnership for digital identity management consulting. Combined expertise in identity and access management (IAM) to address growing client needs in this domain.
• Pure OceanminorGTM or Marketing Partner · 20 March 2025Sponsorship and support for sailing competitions through Thomas de Dinechin skipper (Almond for Pure Ocean). Associates sporting performance with environmental commitment through marine ecosystem protection projects.
• Qevlar AIcoreTechnology or Integration · 17 March 2025Strategic alliance to integrate AI capabilities into Almond's cybersecurity operations, enhancing threat detection and response through artificial intelligence.
• Tranquil ITminorImplementation/ SI/ Consulting Partner · 22 January 2024Almond/Amossys CESTI conducted CSPN certification renewal for Tranquil IT's WAPT software. Collaboration demonstrates expertise in security evaluations and certification processes.
• CANUTcoreChannel Partner/ Reseller/ DistributorCentral purchasing body for digital and telecom services. Provides framework agreements enabling public sector clients to procure Almond's cybersecurity services with pre-negotiated terms and reduced procurement complexity.
• RESAH, CAIH, GIGALIScoreChannel Partner/ Reseller/ DistributorAdditional central purchasing bodies providing cybersecurity procurement frameworks for healthcare and public sector organizations in France.

Scale indicators7 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Orange Cyberdefense: The MSSP arm of Orange, Orange Cyberdefense is the largest French pure-play cybersecurity services provider, with managed SOC, CERT, threat intelligence, and consulting services directly overlapping Almond's CWATCH, CERT, and consulting lines.
• Advens: French cybersecurity pure-play (formerly devoted to managed detection and response, SOC, and security advisory) that directly competes with Almond for mid-market and large French enterprise SOC and consulting mandates.
• Wallix: French-listed cybersecurity vendor focused on privileged access management and identity security, complementary in part but overlapping with Almond's newly created IAM Center of Expertise and broader enterprise identity go-to-market.

Broad incumbents

• Thales: Global defense and digital security group whose cybersecurity division offers SOC, IAM, data protection, and consulting services; competes with Almond in regulated French/European enterprise and defense-sector accounts.
• Capgemini: Global IT services group with a large cybersecurity practice spanning managed security, GRC, and identity — Almond's pre-sales director Guillaume Tournadre himself spent 25 years at Capgemini, illustrating the direct overlap in services and accounts.
• Sopra Steria: Major European IT services firm with a dedicated cybersecurity division, co-member with Almond of the Pôle d'Excellence Cyber 'Cyber & Spatial' working group, and direct competitor in French public-sector and regulated-industry SOC/consulting deals.
• Atos: European IT services incumbent with a sizable cybersecurity practice (managed security, MDR, identity, compliance) that competes with Almond for large French and pan-European enterprise and public-sector engagements.
• Devoteam: French-headquartered IT and digital transformation consultancy with a dedicated cybersecurity practice covering cloud security, identity, and managed services; competes with Almond across mid-market and enterprise advisory mandates.

Emerging players

• YesWeHack: French bug-bounty and vulnerability disclosure platform that co-leads the 'Cyber & Spatial' working group with Almond; adjacent rather than directly competitive, but competes for offensive-security budget within the same French enterprise accounts.
• Sekoia.io: French XDR / cybersecurity platform vendor with strong SOC tooling roots; competes indirectly with Almond's CWATCH managed SOC offering where French enterprises choose between outsourcing to Almond and consuming Sekoia's detection platform in-house.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/almond_consult
• YouTubeyoutube.com/@almond-eu
• LinkedInlinkedin.com/company/almond-eu
• Instagraminstagram.com/almond_eu

Compliance12 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Subsidiaries2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Almond