What Synetis does

Synetis is a French pure-player cybersecurity consulting and expertise firm founded in 2010 and headquartered in Paris, with a secondary office in Rennes. Operating as SYNETIS SAS, the company employs approximately 400 consultants and serves roughly 1,000 clients, reporting €75M in annual revenue. Founders Remi Fournier (General Manager) and Eric Derouet (President) lead a co-founder-controlled, privately-held structure with no disclosed institutional investors or parent company. The firm is anchored in regulated French cybersecurity, holding PASSI LPMA qualification from ANSSI for high-level security audits and pursuing PRIS qualification for its CERT incident-response practice.

The company delivers a full-service cybersecurity portfolio organized into five practice areas: Audit SSI (architecture, source code, configuration, password, organizational, and PASSI-qualified audits, plus penetration testing and Red/Purple Team exercises); Cyberdefense (CERT incident response, 24/7 SOC, and Cyber Threat Intelligence); Governance, Risk and Compliance; Digital Identity (Access Management, CIAM, IGA, PAM); and Operational Security (certificate management, Microsoft ecosystem security, hybrid infrastructure protection, and sovereign SI construction). Core technology capabilities include an in-house CERT, a 24/7 SOC with MSSP and co-management options, and CTI capabilities leveraging a core partnership with Sekoia. The firm is also a certified implementation partner for SailPoint IdentityNow and recommends Yubikey for MFA deployments.

Commercially, Synetis runs a B2B direct enterprise field-sales model with a 24/7 incident-response hotline, supported by content marketing across LinkedIn, YouTube, a podcast, CERT threat reports, and white papers. Revenue is generated through professional services engagements, managed security services, and cybersecurity training. Primary customers are French enterprises, with specific focus on Operators of Vital Importance (OIV) subject to French Military Programming Law cybersecurity obligations, and organizations navigating NIS2 and LPM compliance requirements. Geographic footprint is concentrated in Europe, primarily France.

Name

Synetis

Legal name

SYNETIS SAS

Website

https://synetis.com

Company type

Private

Founded year

2010

Operating status

Operating

Headcount range

101–250 employees

Short description

Synetis is a French pure-player cybersecurity consulting firm headquartered in Paris with ~400 employees and €75M in revenue. It delivers audit, cyberdefense (CERT, SOC, CTI), GRC, IAM, and operational security services to 1,000+ enterprise clients, holding PASSI qualification from ANSSI.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Management Consulting Services (54161), Other Computer Related Services (541519)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

Keywords

• Cybersecurity consulting services
• Security audit services
• Incident response services
• Managed security operations
• Identity access management

Headquarters

HQ city

Paris

HQ country

France

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Cybersecurity Consulting Services: Professional consulting services for security audits, cyber defense, governance, risk and compliance, digital identity, and operational security
2. Managed Security Services: Ongoing managed security services including SOC operations, incident response, and threat monitoring
3. Training Services: Cybersecurity training programs to develop technical expertise of client teams

Go-to-market motion1 record

Distribution channels1 record

Marketing channels6 records

Core offering

Synetis is a French pure-player cybersecurity consulting firm that sells security audits (including PASSI-qualified audits), cyber defense services (CERT incident response, 24/7 SOC monitoring, and Cyber Threat Intelligence), governance/risk/compliance consulting, digital identity solutions (Access Management, CIAM, IGA, PAM), operational security services (certificate management, Microsoft/Active Directory security), and cybersecurity training to enterprise and government clients. Approximately 400 employees deliver these services from offices in Paris and Rennes to more than 1,000 clients, generating roughly €75 million in annual revenue.

Product overview

Synetis is a pure-player French cybersecurity consulting and expertise firm offering a comprehensive portfolio of services organized into five main practice areas: Audit SSI (security auditing including penetration testing and Red Team), Cyberdéfense (defensive security including CERT incident response, SOC monitoring, and CTI), Gouvernance Risques et Conformité (GRC consulting for governance and compliance), Identité Numérique (IAM including Access Management, CIAM, IGA, and PAM), and Sécurité Opérationnelle (operational security including certificate management and infrastructure protection). The firm also provides cybersecurity training. Services are delivered by specialized consultants through consulting engagements, managed services (MSSP), and operational support, with expertise areas including Microsoft ecosystem security, Active Directory resilience, automated certificate management, and cloud security. The company operates primarily in France with offices in Paris and Rennes.

Differentiator

Problem solved

Functional benefit

Products and services

• Audit SSI (Security Audit) Comprehensive security audit practice covering architecture audits, source code audits, configuration audits, password audits, organizational and physical audits, and PASSI-qualified audits for ANSSI compliance. Targeted at French enterprises and OIV operators needing regulatory-grade assessments of their information systems.
• Red Team & Purple Team Offensive security simulation services in which a Red Team emulates real-world attackers while a Purple Team combines offensive and defensive perspectives to test and improve the client's security posture. Targeted at enterprise security teams seeking realistic adversary emulation.
• Social Engineering Security awareness and resistance testing service that evaluates and strengthens organizational resilience against human-based attack vectors such as phishing, vishing, and physical social engineering. Targeted at enterprises seeking to harden their human security layer.
• Tests d'Intrusion (Penetration Testing) Penetration testing services covering external, internal, mobile, and hardware environments to identify and validate vulnerabilities in client environments. Targeted at enterprises needing adversarial validation of their security controls.
• CERT Synetis (Incident Response) Computer Emergency Response Team (CERT) providing incident response services for confirmed or suspected cyberattacks, with 24/7 availability via dedicated hotline. The CERT is in the process of obtaining PRIS (Prestataires de Réponse aux Incidents de Sécurité) qualification from ANSSI. Targeted at enterprises and OIV operators needing qualified incident response.
• SOC (Security Operations Center) Managed Security Operations Center offering 24/7 monitoring, detection, and analysis of security threats using Sekoia's CTI platform and the Sekoia Forwarder log-collection infrastructure. Offered as a fully managed MSSP or as co-management with the client's internal team. Targeted at enterprises needing continuous security monitoring without building their own SOC.
• CTI (Cyber Threat Intelligence) Cyber Threat Intelligence service that transforms threat information into strategic advantage for clients, providing IOC (Indicators of Compromise) feeds and strategic threat landscape analysis. Integrated with Sekoia's intelligence platform and CERT-FR reporting. Targeted at SOCs, CISOs, and strategic decision-makers needing actionable threat context.
• Gouvernance, Risques et Conformité (GRC) Governance, Risk, and Compliance consulting practice covering governance framework setup (including part-time CISO/RSSI), operational cyber transformation (maturity diagnostics, crisis management), and compliance of critical information systems under LPM, NIS2, and other regulatory frameworks. Targeted at regulated French enterprises and OIV operators.
• Identité Numérique (Digital Identity / IAM) Digital identity practice covering Access Management (AM), Customer Identity and Access Management (CIAM), Identity Governance and Administration (IGA), and Privileged Access Management (PAM), delivered as Conseil (strategy), Réalisation (deployment) and Opération (run). Synetis is a certified implementation partner for SailPoint IdentityNow. Targeted at enterprises deploying or operating IAM platforms.
• Sécurité Opérationnelle (Operational Security) Operational security practice covering digital certificate and cryptographic media management, Microsoft ecosystem security (Active Directory, O365, Azure), hybrid infrastructure and data protection, and construction of sensitive or sovereign information systems. Targeted at enterprises needing to harden foundational IT infrastructure and ensure digital trust.
• Formations (Cybersecurity Training) Cybersecurity training programs that develop technical expertise and best practices for client teams across offensive, defensive, identity, and operational security domains. Targeted at enterprises seeking to upskill IT and security staff internally.

Quantifiable outcome

• Over 1,000 clients served
• +1 more outcomes

Named customers2 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability3 records

Feature4 records

Partnerships

Two partnerships are on record, tiered core and minor.

• SekoiacoreTechnology or IntegrationCTI (Cyber Threat Intelligence) solution provider used by SOC team. All SOC clients benefit from Sekoia Intelligence for enhanced threat detection. The partnership includes Sekoia Forwarder for log collection infrastructure.
• WelcomeToTheJungleminorImplementation/ SI/ Consulting PartnerRecruitment platform partner used for job applications and candidate management. Synetis uses this platform for their hiring process evaluation.

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Regional players

• WALLIX: WALLIX is a French cybersecurity vendor specializing in Privileged Access Management and identity security. While Synetis is a services firm and WALLIX is product-led, they overlap in France and in PAM/IAM opportunities for OIV and regulated enterprise clients.

Direct peers

• Orange Cyberdefense: Orange Cyberdefense is the MSSP/SOC arm of Orange, headquartered in France with pan-European reach. It directly competes with Synetis in 24/7 SOC monitoring, incident response, threat intelligence, and security advisory for large French enterprises and OIV operators.
• Wavestone: Wavestone is a French-origin consulting firm with a sizable cybersecurity practice spanning audit, GRC, identity, and cyber defense. It is a direct comparable on PASSI-qualified audits, regulatory cyber compliance, and IAM transformation work delivered to French enterprises and OIVs.
• NVISO Security: NVISO is a European cybersecurity services firm specializing in SOC, incident response, security assessments, and CTI. It directly competes with Synetis on managed detection-and-response engagements and on pentest/red-team work for enterprise clients across Europe.
• Almond (formerly Oppida/Almond Consulting): Almond is a French cybersecurity pure-player offering audit (PASSI-qualified), GRC, integration, and managed security services. Headquartered in France with similar mid-size positioning, it directly overlaps Synetis in audit, SOC, and identity management consulting.

Broad incumbents

• Devoteam: Devoteam is a European digital consulting firm with a dedicated cybersecurity practice covering cloud security, IAM, and managed security services. Headquartered in France with broad EU presence, it overlaps with Synetis on GRC, identity, and cloud security consulting at larger enterprise accounts.
• Capgemini Engineering Cybersecurity: Capgemini is a global IT services leader with a significant cybersecurity practice delivering managed SOC, GRC, identity, and industrial security services. It competes for large multi-region enterprise contracts that are adjacent to Synetis' French-centric mandate.
• Thales Cybersecurity: Thales operates a major cybersecurity and digital identity business serving defense, government, and OIV operators worldwide. It is a broader incumbent competing with Synetis on sovereign systems, identity management, and mission-critical cybersecurity projects.
• Sopra Steria: Sopra Steria is a large European IT services group with a sizable cybersecurity practice covering GRC, IAM, managed security, and sovereign cloud. It competes with Synetis on large French public-sector and OIV mandates but as part of a much broader digital transformation portfolio.

Others

• Sekoia.io: Sekoia is a French/European CTI and XDR platform provider that supplies threat intelligence feeds and Sekoia Forwarder integration to Synetis' SOC. It is referenced as a strategic technology partner rather than a direct competitor, enabling Synetis' SOC service offering.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/@Synetis.
• LinkedInlinkedin.com/company/synetis
• Xx.com/SYNETIS

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles9 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Synetis