What OGO does

OGO Security SAS is a Paris-based cybersecurity vendor founded in 2018 by CEO Olivier Arous, operating a proprietary AI-driven Web Application and API Protection (WAAP) platform marketed under the .OGO brand. The platform replaces traditional static-rule WAFs with a behavioral AI engine that learns per-application baselines, detects anomalies and zero-day threats in real time, and claims a false positive rate of 0.0001%. The unified solution bundles WAF, API security (OWASP API Top 10), anti-DDoS (up to 60 Gbps absorption), bot mitigation, and an integrated global CDN delivered through a strategic Orange Wholesale partnership providing 200+ Points of Presence and 200 Tbps of capacity. Deployment options include SaaS (15-minute activation via DNS redirect), On-Premise, and Sovereign Cloud via Outscale CloudGouv, with HDS, RGPD, NIS2, and SecNumCloud compliance enabling sales to regulated French and European buyers.

The company serves 1,000+ customers concentrated in France with initial DACH expansion, targeting government agencies, healthcare institutions, insurance and financial services, publishing, and industrial verticals. Go-to-market combines direct enterprise field sales, a freemium self-serve SaaS motion, a partner program for resellers and integrators (including ITrust and TIMETOACT Group's Synaigy), and managed security services as a subscription add-on. The core revenue model is recurring WAAP subscription, supplemented by managed services and consulting/training professional services; pricing is quote-based with no public tiers. Infrastructure runs exclusively on OVHcloud, Scaleway, and Outscale CloudGouv, reinforcing the company's positioning as a 100% European sovereign alternative immune to the US Cloud Act.

OGO has operated without disclosed institutional venture funding, relying on early validation through the 2018 French Ministry i-Lab competition, the 2019 Orange Fab accelerator, and the France Cybersécurité label. Headcount of 11–50 employees, a registered share capital of €323,770, and a sustained cadence of monthly product releases through 2026 indicate a capital-efficient, organically grown specialist rather than a venture-scaled platform.

Name

OGO

Legal name

OGO SECURITY SAS

Website

https://ogosecurity.com

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

11–50 employees

Short description

OGO Security is a Paris-based French cybersecurity vendor founded in 2018 that sells an AI-driven Web Application and API Protection (WAAP) platform to government, healthcare, insurance, and enterprise customers across France and Europe, emphasizing sovereign European infrastructure and behavioral AI without static rules.

Ownership category

akta.pro rank

Product category

Application Security Software

NAICS

Security Systems Services (56162)

SIC

Services-Computer Programming Services (7371)

akta.pro primary industry

Web Application Security (WAF, RASP) (HDADACAA)

akta.pro secondary industry

Intrusion Prevention/Detection Systems (IPS/IDS) (HDADABAH)

Keywords

• AI-powered WAAP
• Web application firewall
• API protection
• DDoS mitigation
• Bot management

Headquarters

HQ city

Paris

HQ country

France

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Infrastructure, Personnel, Marketing or Sales, Operations

Revenue model

1. WAAP Subscription (SaaS / On-Premise / Sovereign Cloud): Recurring subscription revenue from WAAP licenses sold on a per-site or per-application basis. Offered in three deployment modes (SaaS, On-Premise, Sovereign Cloud) to serve different customer sovereignty and infrastructure preferences. Subscription includes AI-based protection, CDN integration, dashboard, and 90-day logs.
2. Managed Security Services: Managed services option where OGO Security proactively monitors and manages customer security, including weekly trend analysis meetings and incident response. Offered as an add-on to the base WAAP subscription for customers seeking outsourced security operations.
3. Consulting and Training: Professional services including cybersecurity consulting and training, offered alongside the core WAAP product. Addresses customer needs for advisory support and skill development.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels8 records

Core offering

OGO Security develops and sells .OGO Security, an AI-powered Web Application and API Protection (WAAP) platform that combines behavioral artificial intelligence, integrated global CDN, WAF, API security, anti-DDoS, and bot mitigation in a unified solution. The platform is offered via SaaS, on-premise, and sovereign cloud deployments, with optional managed security services and consulting/training professional services.

Product overview

OGO Security offers .OGO Security as a unified, AI-powered WAAP (Web Application and API Protection) platform that combines WAF, API Security, Anti-DDoS, and Bot Mitigation into a single product. The core .OGO Security WAAP product is enhanced by optional managed services (Managed Security Service) and professional services (Consulting and Training). Customers manage their protection through the .OGO Dashboard interface. The platform supports SaaS, on-premise, and sovereign cloud deployment modes and is available in both French and English.

Differentiator

Problem solved

Functional benefit

Products and services

• .OGO Security WAAP Next-generation Web Application and API Protection (WAAP) platform using behavioral AI to protect web applications, sites, and APIs from threats including zero-day attacks. Combines WAF, API security, DDoS protection, and bot mitigation in a unified platform with near-zero false positives. Offered in SaaS, on-premise, and sovereign cloud deployment modes.
• Managed Security Service Managed security service offering where OGO Security analysts perform proactive monitoring, weekly trend analysis, and managed incident response for customer applications, including creation of virtual patches and AI parameter tuning to minimize false positives. Sold as an add-on to the WAAP subscription.
• Consulting and Training Professional services including cybersecurity consulting and training to help organizations assess their web security posture, comply with regulations such as RGPD, NIS2, and HDS, and optimize use of the WAAP platform. Offered as standalone engagements.

Quantifiable outcome

• False positive rate reduced to 0.0001% (1 in 1 million requests), eliminating manual alert triage
• +4 more outcomes

Named customers10 records

Segments6 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature9 records

Partnerships

Six partnerships are on record, tiered minor and core.

• ITrustminorChannel Partner/ Reseller/ Distributor · 1 June 2026ITrust was announced as a new partner of OGO Security in June 2026. ITrust is a cybersecurity company that resells or integrates OGO's WAAP solution as part of its managed security offering.
• Orange WholesalecoreTechnology or IntegrationStrategic CDN partnership with Orange Wholesale, a division of Orange SA. OGO Security integrates Orange Wholesale's global Content Delivery Network (200+ Points of Presence, 200 Tbps capacity) directly into its WAAP platform. This partnership provides DDoS absorption (up to 60 Gbps per attack), content acceleration, and sub-5ms latency for OGO-protected applications. The combined WAAP + CDN offering is marketed as a unified solution emphasizing both security and performance.
• OVHcloudcoreTechnology or IntegrationOVHcloud is a critical infrastructure partner providing cloud hosting for OGO Security's websites, email services, and cloud infrastructure. OGO's data is exclusively hosted on OVH and Scaleway servers in France, ensuring full data sovereignty and GDPR compliance.
• ScalewaycoreTechnology or IntegrationScaleway provides cloud hosting for OGO Security's infrastructure. Combined with OVHcloud, Scaleway ensures OGO's data remains exclusively in France under European jurisdiction.
• TIMETOACT GroupminorStrategic or Co-development PartnerSynaigy, part of the TIMETOACT Group (8 companies, 600+ employees, 13 sites in Europe), selected OGO Security's sovereign WAF for its cybersecurity needs. TIMETOACT Group's ecosystem of 8 digital services companies provides a potential channel for OGO's expansion in the DACH region.
• Outscale (CloudGouv)coreTechnology or IntegrationOutscale CloudGouv is a sovereign French cloud (SecNumCloud certified) used for OGO Shield cluster deployment, providing an additional sovereign infrastructure option for government and regulated customers.

Scale indicators6 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Cloudflare: Cloudflare is the global WAAP/WAF/DDoS/bot-management category leader. It competes head-on with OGO in French and European deals — though OGO differentiates on sovereignty and Cloud Act immunity, both vendors offer overlapping web and API protection capabilities targeting enterprise and public-sector buyers.
• Akamai (App & API Protector): Akamai's App & API Protector combines WAF, API security, DDoS protection, and bot mitigation on a globally distributed edge platform. It is one of the closest direct competitors to OGO in EMEA enterprise and government accounts, where Akamai's existing CDN infrastructure is a comparable moat to OGO's Orange Wholesale partnership.
• F5 (Distributed Cloud WAAP / NGINX App Protect): F5's WAAP portfolio (Distributed Cloud WAAP, NGINX App Protect) targets enterprise web and API protection with comparable feature scope to OGO. It competes directly in regulated European accounts where F5's incumbency and integration with existing F5 BIG-IP deployments present a switching-cost hurdle.
• Imperva (now Thales): Imperva provides enterprise WAF, API security, and bot management that directly overlaps with OGO's WAAP offering. Following the Thales acquisition, Imperva has particular relevance because Thales is also listed as an OGO customer — making it both a peer and a potential channel/competitive channel conflict.
• Radware: Radware offers WAF, API protection, DDoS, and bot management solutions with a strong enterprise EMEA footprint. It competes with OGO on the same enterprise and government RFPs where behavioral detection and managed services are decision criteria.

Emerging players

• Fastly (Next-Gen WAF / Compute@Edge): Fastly's Next-Gen WAF (built on Signal Sciences) and edge compute platform compete with OGO in modern API- and DevOps-centric accounts. While smaller in WAAP than Cloudflare/Akamai, Fastly is an emerging alternative for performance-sensitive European enterprises.
• Barracuda WAF / Barracuda Application Protection: Barracuda's WAF and Application Protection products compete in the mid-market and SMB segments where OGO's self-serve SaaS and free trial also target. Overlap is partial but real in European accounts where Barracuda bundles security into broader infrastructure offerings.
• Wallarm: Wallarm specializes in API security (including OWASP API Top 10 and BOLA) and modern WAAP, with strong positioning in API-first workloads. It overlaps with OGO on API protection and is a credible emerging alternative for European enterprises prioritizing API-layer security.

Broad incumbents

• AWS WAF: AWS WAF is the default bundled WAAP option inside the AWS ecosystem and competes with OGO on price and integration for cloud-native workloads. While lacking OGO's sovereign positioning, AWS's reach makes it the principal broad incumbent OGO must displace — or co-exist with — in European accounts.
• Microsoft Azure Web Application Firewall: Azure WAF is bundled with Azure Front Door and Application Gateway and competes with OGO for enterprises standardizing on Microsoft infrastructure. As with AWS, Azure's scale and bundling pressure OGO on price, though Azure is also a current OGO infrastructure partner.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks1 record

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/ogo-security
• Xx.com/ogosecurity

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about OGO