Erium
Erium is a French cybersecurity company offering BlackNoise AEV (Breach and Attack Simulation) and BlackNoise HRM (Human Risk Management) platforms for continuous enterprise cyber defence validation and human risk reduction, serving CISOs and SecOps teams in regulated industries across Europe and the Middle East.
- Company typePrivate
- Founded2011
- HeadquartersParis, France
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Erium does
Erium is a French cybersecurity company founded in 2011 and headquartered in Paris, with offices in Rennes (R&D), Bologna (Italy), and Doha (Qatar). The company develops two core platforms under the BlackNoise brand: BlackNoise AEV (Adversarial Exposure Validation), a Breach and Attack Simulation (BAS) platform that simulates more than 2,000 adversarial behaviors across endpoint and cloud environments (Linux, Windows, macOS, AWS, Azure) to measure MTTD/MTTR/MTTA metrics and automatically generate Sigma/Yara/Suricata detection rules; and BlackNoise HRM (Human Risk Management), an immersive cyber training and behavior measurement platform with native AI/LLM integration for generating bespoke training content. The two platforms share a REST API architecture for integration with SIEM/XDR/SOAR infrastructure and Learning Management Systems, and target enterprise CISOs and SecOps teams facing regulatory pressure from DORA, NIS2, TIBER-EU, and PCI DSS mandates.
Erium operates a subscription-based software model with both SaaS and on-premises deployment options, complemented by professional services including custom API connector development, proprietary adversarial behavior development, technical certification training, crisis exercise facilitation, and bespoke training programme design. The company sells primarily through direct enterprise sales with a structured MSSP and consultancy Partner Programme, supported by thought leadership through the annual BlackNoise Barometer and Annual Report. Its 200+ customer base spans banking (BPCE, Société Générale), retail (Carrefour), luxury goods (Hermès), industrial gases (Air Liquide), insurance (Malakoff Humanis), building services (EQUANS), e-commerce (Mirakl), flooring (Tarkett), and government (European Parliament, CVRIA).
The 50-person team is led by Chairman Florent Skrabacz, CEO Arnaud Le Men, CTO Pierre Texier, and COO Emilien Marimpouy. Erium participates in France 2030 national cybersecurity programmes (CYBAS consortium with BreacHunt, GATEWATCHER, HarfangLab, and Snowpack; CYBR-H with Anozr-way), joined the European Cyber Security Organisation (ECSO) in June 2023, and was selected as a Gartner Representative Vendor in the Market Guide for Adversarial Exposure Validation 2026.
Erium firmographics
Firmographics- Name
- Erium
- Legal name
- Erium SAS
- Website
- https://erium.fr
- Company type
- Private
- Founded year
- 2011
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Erium is a French cybersecurity company offering BlackNoise AEV (Breach and Attack Simulation) and BlackNoise HRM (Human Risk Management) platforms for continuous enterprise cyber defence validation and human risk reduction, serving CISOs and SecOps teams in regulated industries across Europe and the Middle East.
- Ownership category
- akta.pro rank
Erium industry classification
Industry- Product category
- Cybersecurity Validation Software
- NAICS
- Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151), Software Publishers (5132)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Attack Surface Management (EASM/CAASM) (HDADAHAC)
- akta.pro secondary industries
- Risk Management (ERM), Operational Risk & Business Continuity (BPAEAPAJ), Enterprise Risk Management (ERM) Advisory (BPAHAFAA)
Keywords
Where Erium is headquartered
LocationHeadquarters
- HQ city
- Paris
- HQ country
- France
- HQ region
- Europe
Offices4 records
Markets served
Erium business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Software Platform Subscriptions (SaaS/On-Premises): BlackNoise AEV and HRM platforms offered as subscription licenses with flexible deployment options (SaaS cloud or on-premises). Revenue generated through annual or multi-year subscription contracts based on platform usage and enterprise seat counts.
- Professional Services: Custom API connector development, on-premises integration, proprietary adversarial behaviour development, technical training certification programmes, bespoke training programme design, and live event facilitation services delivered by expert teams.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise Platform Licenses |
| Subscription | Multi-year contract | Partner Programme Subscriptions |
| Other | Multi-year contract | Professional Services |
Go-to-market motion1 record
Distribution channels5 records
Marketing channels7 records
Erium product offering
Product offeringCore offering
Erium develops and sells the BlackNoise cybersecurity readiness platform, composed of BlackNoise AEV (Adversarial Exposure Validation / Breach and Attack Simulation) and BlackNoise HRM (Human Risk Management / Cyber Investigation). The platforms continuously validate security defenses under simulated real-world attacks and quantify and reduce human cyber risk through immersive training, supported by adjacent services such as Cyber Culture, Cyber Crisis Exercises, and Attack Lab for SOC/CERT teams.
Product overview
Erium offers a dual-platform cybersecurity readiness solution: BlackNoise AEV (Adversarial Exposure Validation) for automated breach and attack simulation testing of security infrastructure, and BlackNoise HRM (Human Risk Management / Cyber Investigation) for managing human cyber risk through immersive training and behavioral measurement. Both platforms share a common REST API architecture for integration with SIEM/XDR/SOAR and LMS systems. The platforms are complemented by Professional Services for integration and customization, Cyber Culture Services for awareness training, Cyber Crisis Exercise services for preparedness testing, and Attack Lab services for SOC/CERT team training. The company operates with 15 years of expertise, 200+ customers, and 50+ experts across Paris, Rennes, Bologna, and Doha offices.
Differentiator
Problem solved
Functional benefit
Brands
- BlackNoise AEV: Breach and Attack Simulation (BAS) platform for adversarial exposure validation, security validation, and compliance testing supporting TIBER-EU, DORA, NIS2 requirements.
- BlackNoise HRM
- Cyber Investigation
Products and services
- BlackNoise AEV BlackNoise AEV (Adversarial Exposure Validation) is a Breach and Attack Simulation platform that continuously tests security defenses by simulating more than 2,000 adversarial behaviors across APT, ransomware, and data breach scenarios on Linux, Windows, macOS, AWS, and Azure environments. It generates automated detection rules in Sigma/Yara/Suricata formats, measures MTTD/MTTR/MTTA, and produces evidence packs for TLPT, DORA, NIS2, and TIBER-EU compliance.
- BlackNoise HRM (Cyber Investigation) BlackNoise HRM (Human Risk Management) is an immersive learning and behavioral measurement platform that delivers narrative-based cyber investigations, multilingual e-learning, expert courses linked to AEV results, and AI/LLM-driven generation of bespoke training content. It supports LMS integration and achieves 97% user satisfaction.
- Professional Services Custom integration, deployment, and training services for BlackNoise platforms. Includes custom API connector development, on-premises deployment, proprietary adversarial behavior development, technical certification training (DFIR, Investigation, Cyber Skills, Data/IoC Analysis), and bespoke training programme design.
- Cyber Culture Services Services for building organizational cyber culture including immersive e-learning, cyber events, hack demonstrations, and vishing attack training, delivered using the BlackNoise HRM platform and reported to achieve 97% user satisfaction.
- Cyber Crisis Exercise Crisis preparedness services including realistic attack scenario exercises (ransomware, wiper, APT, systemic blackouts) for decision-makers and technical teams. Features the Cyb3r Pøpular Army simulated attacking unit, bespoke Visual Management Tools, adaptive technical intensity, and skills retention programs built on BlackNoise AEV and HRM.
- Attack Lab SOC and CERT team training under realistic adversarial conditions. Deploys complex Purple Team threats including APTs, ransomware, cloud compromises, and insider threats. Includes Threat-Led Penetration Testing (TLPT) for TIBER-EU, DORA, NIS2, and PCI DSS compliance with factual MTTD/MTTR scoring.
Quantifiable outcome
- Detection rate improvement through continuous BAS validation
- +3 more outcomes
Companies that use Erium
Customer profileNamed customers11 records
Segments5 records
Ideal customer profiles4 records
Erium technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration9 records
AI capability4 records
Feature6 records
Erium partnerships and signals
Strategic signalPartnerships
13 partnerships are on record, tiered core and minor.
- ECSO (European Cyber Security Organisation)coreErium officially joined ECSO on June 16, 2023 at its General Assembly in Brussels. ECSO is a non-profit organization founded in 2016 that brings together nearly 290 European cybersecurity market players.
- BreacHuntcoreBreacHunt is part of the CYBAS consortium alongside Erium, BlackNoise, GATEWATCHER, HarfangLab, and Snowpack, supported by France 2030. This national cybersecurity acceleration programme focuses on advancing Breach and Attack Simulation capabilities in Europe.
- GATEWATCHERcorePart of the CYBAS consortium under France 2030 national cybersecurity acceleration programme. GATEWATCHER contributes advanced EDR capabilities to the European cyber defence ecosystem.
- HarfangLabcorePart of the CYBAS consortium under France 2030 national cybersecurity acceleration programme. HarfangLab provides endpoint detection capabilities integrated with BlackNoise AEV.
- SnowpackcorePart of the CYBAS consortium under France 2030 national cybersecurity acceleration programme focusing on advanced threat detection capabilities.
- Anozr-waycorePart of the CYBR-H consortium under France 2030, focused on human risk management innovation alongside Erium's BlackNoise HRM platform.
- HexatrustcoreErium is a member of Hexatrust, a network of European cybersecurity companies collaborating on technology and business ecosystem development.
- National Cyber CampuscoreErium is a member of the National Cyber Campus, contributing to France's national cybersecurity ecosystem and innovation initiatives.
- Security Conference (Assises de la Sécurité)coreErium is a member of the Security Conference (Assises de la Sécurité), France's premier cybersecurity conference and industry body.
- InCyber ForumcoreErium is a member of InCyber Forum, Europe's largest cybersecurity event, and was awarded the InCyber Forum Jury Prize.
- Cyber Centre of ExcellencecoreErium is a member of the Cyber Centre of Excellence, contributing to cybersecurity excellence initiatives and standards development.
- France Cyber 2030coreErium is qualified for France Cyber 2030, the national cybersecurity innovation and acceleration programme.
- Forum des CompétencesminorErium collaborates annually with the Forum des Compétences to produce white papers on cyber awareness challenges and acculturation initiatives.
Scale indicators5 records
Recent moves6 records
Expansion highlights6 records
Erium competitors and assessment
Company assessmentBroad incumbents
- CrowdStrike: CrowdStrike is a broad cybersecurity incumbent whose Falcon platform now bundles exposure validation (Falcon Validine / Breach Prevention) capabilities overlapping with Erium's BAS offering, while also being a security stack that BlackNoise AEV integrates into.
- Palo Alto Networks: Palo Alto Networks is a broad cybersecurity platform incumbent offering BAS/CAASM-adjacent capabilities through Cortex and Prisma — representing both a competitive threat and an integration/partner opportunity for Erium's BlackNoise AEV.
Emerging players
- XM Cyber: XM Cyber provides attack path management and exposure validation, sitting adjacent to Erium's BAS/CAASM positioning. Comparable buyer profile (CISO/SecOps) with partial product overlap.
Direct peers
- SafeBreach: SafeBreach is a direct BAS competitor offering breach and attack simulation with a similar playbook-based approach. Targets the same enterprise security buyer with continuous validation against MITRE ATT&CK and ransomware scenarios.
- Hoxhunt: Hoxhunt is an enterprise security awareness and human risk management platform focused on behavioural change and measurable outcomes — directly competing with Erium's BlackNoise HRM for enterprise security culture budgets.
- KnowBe4: KnowBe4 is the largest dedicated security awareness and human risk management platform, directly comparable to Erium's BlackNoise HRM in addressing the human cyber risk vector through training and behavioural measurement.
- Pentera: Pentera is a leading automated security validation vendor, competing head-to-head with Erium's BlackNoise AEV in the enterprise BAS market. Both target CISO/SecOps buyers with continuous validation against real-world attack scenarios.
- Picus Security: Picus Security is a direct competitor in the Breach and Attack Simulation market, offering continuous security validation and Attack Path Scenarios across endpoint, network, and cloud — closely overlapping with Erium's BlackNoise AEV positioning and target buyer (CISOs/SecOps).
- AttackIQ: AttackIQ is a foundational BAS platform and one of the most established players in the category, offering continuous security validation tied to MITRE ATT&CK. Directly competes with Erium's BlackNoise AEV for enterprise SecOps budgets.
- Cymulate: Cymulate provides exposure validation across BAS, ASM, and continuous automated red teaming — directly overlapping with Erium's BlackNoise AEV. Strong competitor with broader exposure management scope and broader market reach.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Erium social profiles
Digital presenceErium compliance and trust
Trust signalCompliance7 records
Erium financial estimates
Financial estimateRevenue estimate
Valuation estimate
Erium leadership team
Management profileNumber of profiles
Profiles4 records
Erium funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Erium M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Erium
What does Erium do?
Erium develops and sells the BlackNoise cybersecurity readiness platform, composed of BlackNoise AEV (Adversarial Exposure Validation / Breach and Attack Simulation) and BlackNoise HRM (Human Risk Management / Cyber Investigation). The platforms continuously validate security defenses under simulated real-world attacks and quantify and reduce human cyber risk through immersive training, supported by adjacent services such as Cyber Culture, Cyber Crisis Exercises, and Attack Lab for SOC/CERT teams.
Is Erium a public or private company?
Erium is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Erium founded?
Erium was founded in 2011. It employs 11 to 50 people.
Where is Erium based?
Erium is headquartered in Paris, France, in the Europe region.
How does Erium make money?
Two revenue lines are on record. Software Platform Subscriptions (SaaS/On-Premises) is the primary driver. The others are professional Services.
Who are Erium's main competitors?
Broad incumbents on record are CrowdStrike and Palo Alto Networks. XM Cyber is listed as an emerging player. Direct peers are SafeBreach, Hoxhunt, KnowBe4, Pentera, Picus Security, AttackIQ and Cymulate.
Does Erium have an API?
Yes. Both BlackNoise platforms expose REST APIs for integration. BlackNoise AEV provides a comprehensive REST API for full automation, allowing results to be delivered to SIEM/XDR/SOAR systems. BlackNoise HRM offers a CyberInvestigation API for integrating with LMS and data processing/AI tools. API libraries and connector catalogues are accessible from the platform consoles. Developer documentation is at doc.blacknoise.co.
What industry is Erium in?
Erium's product category is Cybersecurity Validation Software. Its primary akta.pro industry code is HDADAHAC, Attack Surface Management (EASM/CAASM), with a secondary code of BPAEAPAJ, Risk Management (ERM), Operational Risk & Business Continuity. Its NAICS code is 561621 and its SIC code is 7373.