What EXCUBE does

EXCUBE is an independent French cybersecurity consulting firm founded in 2018 by Cyril Guillet and Julien Coulet, headquartered in Lyon (55 Avenue René Cassin, 69009) with a regional office in Paris (104 boulevard Sébastopol, 75003). The firm is registered as a Société par Actions Simplifiée (SAS) under RCS Lyon number 838 808 236 with a share capital of €8,904, and is led day-to-day by Director General Frédéric Priem.

The company's offering is organized into four service pillars: Cyber Gouvernance (GRC advisory across ISO 27001, NIS2, HDS, SOC2, DORA, GRC tool selection, and part-time RSSI delegation), Cyber Défense (SOC strategy, MSSP and tooling RFPs, Purple Team, detection/response capability audits), Cyber Résilience (BIA, PCA/PRA, backup strategy, IT failover testing, crisis management exercises), and Expertise Audit (pentests, Red Team, social engineering, OSINT, configuration, architecture and cloud security posture audits). The core technology is a risk-based and compliance-driven consulting methodology delivered by human consultants — EXCUBE has no proprietary software product, no SDK, no API, and no AI/ML component in its stack. Methodologies follow a cadrage → BUILD → RUN engagement model.

Commercially, EXCUBE generates revenue through professional services engagements on either fixed-price (au forfait) or staff-augmentation (en régie / délégation de profils) terms. GTM is enterprise field sales targeting DSI, RSSI, and purchasing decision-makers at grands comptes, ETIs, and large SMEs across banking, insurance, healthcare, industrial, defense, utilities, and public-sector verticals. Named clients include Michelin, Biomérieux, Veolia, APRR, Région Auvergne-Rhône-Alpes, Ramsay Santé, Econocom, Grant Thornton, Aésio Mutuelle, Adenes, Vallourec, Infomil, Fillet Allard, and Teamwork. The firm explicitly markets its independence from publishers and MSSPs as a differentiator. Marketing relies on organic LinkedIn, a topic-segmented blog/resource center, and client logo social proof. Pricing is quote-based and not publicly disclosed; the only public rate proxies are internal consultant salary bands (€43K–€70K depending on role and city).

Name

EXCUBE

Legal name

EXCUBE

Website

https://excube.fr

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

11–50 employees

Short description

EXCUBE is an independent French cybersecurity consulting firm, founded 2018, with offices in Lyon and Paris, 31 consultants, and 80+ active enterprise clients served across governance, SOC, resilience, and audit practices.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Other Scientific and Technical Consulting Services (54169), Other Computer Related Services (541519)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)

akta.pro secondary industries

Cybersecurity & Identity Consulting (BPAHAEAG), Security Governance, Risk & Compliance (GRC) Advisory (BPAKADAG), Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH)

Keywords

• Cybersecurity consulting
• GRC advisory
• SOC consulting
• Penetration testing
• Cyber resilience

Headquarters

HQ city

Lyon

HQ country

France

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Others

Revenue model

1. Consulting and Advisory Services: EXCUBE generates revenue through professional services engagements, including fixed-price project deliveries (au forfait) and staff augmentation/managed service contracts (en régie / délégation de profils). The firm also offers part-time RSSI services (RSSI à temps partiel). Engagement models include both BUILD (implementation) and RUN (operational support) phases.

Pricing tiers

Go-to-market motion2 records

Distribution channels1 record

Marketing channels4 records

Core offering

EXCUBE is an independent cybersecurity consulting firm delivering advisory services across four pillars: Cyber Gouvernance (GRC, ISO 27001, NIS2, DORA, HDS compliance, RSSI delegation), Cyber Défense (SOC strategy, MSSP selection, Purple Team), Cyber Résilience (BCP/DR, BIA, crisis management), and Expertise Audit (pentests, Red Team, configuration audits). All services are delivered by consultants via fixed-price projects or staff augmentation, with no proprietary software product.

Product overview

EXCUBE is an independent cybersecurity consulting firm offering four interconnected service pillars: Cyber Gouvernance (GRC and compliance advisory for ISO 27001, NIS2, HDS, SOC2, DORA), Cyber Défense (SOC strategy, MSSP consultation, Purple Team, and detection/response), Cyber Résilience (BCP/DR, crisis management, BIA), and Expertise Audit (pentests, Red Team, Purple Team, security audits). The company operates as a pure consulting practice with no software products; all services are delivered by human consultants through engagement models including fixed-price projects and staff augmentation.

Differentiator

Problem solved

Functional benefit

Products and services

• Cyber Gouvernance GRC (Governance, Risk, and Compliance) consulting services for enterprises and mid-market firms, covering ISO 27001, NIS2, HDS, SOC2, DORA compliance projects, RSSI (CISO) delegation including part-time services, SSI governance structuring, and GRC tooling strategy and selection (Tenacy, Drata, CisoAssistant). Delivered via fixed-price projects or staff augmentation.
• Cyber Défense SOC (Security Operations Center) consulting services including SOC strategy definition, MSSP and tooling vendor consultation and selection, BUILD phase project oversight, Purple Team assessments, and audits of detection and response capabilities. EXCUBE accompanies ~20 SOC clients per year on Cyber Defense topics.
• Cyber Résilience Business continuity and IT recovery services including Business Impact Analysis (BIA), continuity planning (PCA/PRA), backup strategy definition, IT failover testing, crisis management, crisis exercise organization, and defense plans. Designed to help organizations build or strengthen cyber resilience and crisis response.
• Expertise Audit Technical cybersecurity audits including Red Team exercises, social engineering campaigns, Purple Team assessments, pentests (web apps, internal networks, exposed infrastructure, mobile), OSINT, configuration audits, architecture audits, and cloud security posture assessments. Deliverables include prioritized and budgeted recommendations aligned to business risks.

Quantifiable outcome

• Serving ~20 clients per year on Cyber Defense/SOC topics
• +1 more outcomes

Named customers14 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Scale indicators6 records

Recent moves7 records

Expansion highlights5 records

Direct peers

• Wavestone: French-headquartered independent consultancy with a major cybersecurity and risk practice serving large French and European enterprises. Closest scale-comparable pure-play peer to EXCUBE, competing for the same GRC, SOC and cyber resilience mandates.
• Advens: Pure-play French cybersecurity services firm (formerly Sopra Steria Cybersecurity) specializing in SOC, GRC, identity, and managed detection. Direct competitor in the French mid- and large-enterprise cyber consulting market that EXCUBE targets.
• HeadMind Partners: French pure-play cybersecurity and digital trust consulting firm. Direct competitor in GRC, cyber risk, identity, and SOC advisory for French mid-market and large enterprises.
• CS GROUP: French digital systems integrator with a strong cybersecurity and mission-critical systems practice. Competes with EXCUBE on cyber resilience, audit, and security architecture mandates in defense, aerospace and critical infrastructure.
• XMCO (Fiducial Cyberdefense): French cybersecurity services firm specializing in offensive security (pentests, Red Team) and security advisory. Overlaps directly with EXCUBE's Expertise Audit pillar and broader cyber consulting.

Broad incumbents

• Devoteam: European IT and digital transformation consultancy with a sizable cybersecurity practice (Devoteam Cyber). Competes with EXCUBE on cloud security, GRC and cyber defense advisory across French enterprise accounts.
• Sopra Steria: Large European IT services group with significant cybersecurity capabilities across GRC, SOC and managed services. A broader incumbent competing for the same CAC40 and public-sector cyber mandates as EXCUBE.
• Capgemini: Global IT and consulting leader with a dedicated cybersecurity practice offering GRC, SOC transformation and managed cyber services. Competes with EXCUBE on large enterprise cyber transformation and compliance mandates in France.
• Orange Cyberdefense: Telco-backed managed security services provider with a large French cyber consulting arm. Competes with EXCUBE in SOC strategy, MSSP selection, detection-and-response audits, and resilience mandates.
• Accenture Cybersecurity: Global consulting giant with a large cybersecurity practice serving CAC40 and global enterprises. Competes with EXCUBE on large-scale cyber transformation, GRC and managed defense programs in France.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInfr.linkedin.com/company/excube
• Xx.com/excube1

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about EXCUBE