Acceis

What Acceis does

Acceis is a French cybersecurity services firm headquartered in Rennes (12 rue du Bourg Nouveau, 35000) with a secondary office in Paris (140 bis rue de Rennes, 75006). Founded in 2015, the company delivers a 360-degree portfolio of technical and organizational cybersecurity services to enterprise, government, software-publisher, industrial, healthcare, and defense clients across France. Its seven service lines are security audits (source code, architecture, penetration testing), qualified PASSI audits, CESTI evaluations, consulting and governance (including SMSI/ISMS implementation), CSPN certification support, ISO 27001 and HDS certification support, and security awareness and training. Two ANSSI-issued credentials — PASSI qualification and CESTI approval — position Acceis within a small group of French firms authorized to perform ANSSI-recognized audits and product security evaluations.

The offering is human-delivered expert services rather than a software product; Acceis does not publish an API, SDK, or platform. Its differentiators are the dual ANSSI credentials, ongoing in-house research and technical publication (CTF write-ups, vulnerability writeups on its blog and GitHub), event sponsorship and participation (BreizhCTF, Barbhack, Insomni'hack), and its regional roots in Brittany, described as France's cybersecurity cradle. Notable named customers include Alcatel Lucent, Biocoop, CHT Troyes, Bouygues Energies, Bodet Software, Euro Information, Eiffage Clemessy, DGFIP, IdNow, Groupe Le Duff, and Foliateam.

Revenue is generated on a professional-services basis with project-based, quote-driven pricing; no rate cards or revenue figures are publicly disclosed. The firm markets through technical content, LinkedIn, Twitter/X, and GitHub, and is a member of Alliance Confiance Numérique. No external funding rounds, M&A activity, leadership changes, or corporate restructuring are recorded in the available data, and the company operates as an independent private firm.

Name

Acceis

Legal name

ACCEIS

Website

https://acceis.fr

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

11–50 employees

Short description

Acceis is a French cybersecurity services firm (Rennes, Paris) offering penetration testing, PASSI/CESTI-qualified audits, Red Team operations, governance consulting, and CSPN/ISO 27001/HDS certification support to enterprise, government, and software publisher clients across France.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (54151), Other Computer Related Services (541519)

SIC

Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG)

akta.pro secondary industries

Penetration Testing, Red Team & Ethical Hacking (EDAOAIAH), Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) (BPAKADAC), Security Awareness, Training & Compliance Attestation (HDADAIAJ), Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing) (EDABAFAF)

Keywords

• Penetration testing services
• Security audit services
• Cybersecurity consulting
• Red team operations
• Security certification support

Headquarters

HQ city

Rennes

HQ country

France

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Security Auditing Services: Professional services revenue from security audits including penetration testing, source code audits, architecture audits, and Red Team operations. Services are delivered by certified cybersecurity experts to enterprise clients.
2. Cybersecurity Consulting: Governance, risk management, and compliance consulting services including SMSI implementation (ISO 27001), security governance, and regulatory compliance
3. CSPN Certification Support: Certification preparation and evaluation services for CSPN (Certification de Sécurité de Premier Niveau) leading to ANSSI security certification
4. Security Training and Awareness: Employee cybersecurity awareness training, phishing simulations, password audits, and skills transfer programs

Go-to-market motion1 record

Distribution channels1 record

Marketing channels6 records

Core offering

Acceis delivers expert-led cybersecurity services covering the full project lifecycle: technical security audits (penetration testing, source code audits, architecture audits, configuration audits, Red Team operations), ANSSI-qualified PASSI audits and ANSSI-accredited CESTI evaluations for CSPN certification, security governance and ISMS/SMSI consulting for ISO 27001, certification support including ISO 27001 and HDS, and security awareness training including phishing simulations. Services are delivered by certified cybersecurity experts to enterprise and government clients in France.

Product overview

ACCEIS is a cybersecurity services company offering a comprehensive 360-degree portfolio of technical and organizational security services. The company operates primarily through seven interconnected service lines: Audits de sécurité (penetration testing, Red Team, code and architecture audits), Conseil & Gouvernance (security consulting and ISMS implementation), Certification CSPN (first-level security certification support), Certification de sécurité (ISO 27001/HDS certifications), Sensibilisation et formation (security awareness training and OSINT), and two specialized ANSSI-qualified services (PASSI audit services and CESTI evaluation services for CSPN). The company does not offer a software product but provides expert human-driven cybersecurity services across security assessment, governance, and certification domains, with offices in Rennes and Paris.

Differentiator

Problem solved

Functional benefit

Products and services

• Audits de sécurité (Security Audits) Technical security audit service covering source code audits, architecture audits, configuration audits, penetration testing (pentest), and Red Team assessments. It evaluates the security posture of applications, networks, and information systems using offensive security techniques. Targeted at enterprise organizations seeking a comprehensive state-of-the-art security assessment.
• Conseil & Gouvernance (Security Consulting and Governance) Security consulting and governance service supporting CISO (RSSI) and CIO (DSI) teams with information security management system (ISMS/SMSI) implementation, risk and compliance management, threat assessment, and vulnerability detection. Aimed at organizations needing ongoing security governance and ISO 27001-aligned management practices.
• Certification CSPN Evaluation and preparation service that helps organizations obtain the ANSSI first-level security certification (CSPN) for their products, supporting them through security target drafting and the evaluation process. Targeted at software publishers and product teams seeking CSPN compliance.
• Certification de sécurité (ISO 27001 / HDS) Security certification service providing evaluation and certification support for ISO 27001 information security management systems and HDS (Hébergeur de Données de Santé) hosting of healthcare data. Designed for organizations seeking formal certification of their ISMS or health data hosting activities.
• Sensibilisation et formation (Security Awareness and Training) Security awareness and training program including phishing simulations, password audits, OSINT (Open Source Intelligence) training, and skills-transfer programs for CISOs and security administrators. Designed to raise organizational security maturity and reduce human-factor risk.
• Audits qualifiés PASSI (PASSI Qualified Security Audits) ANSSI-qualified security audit service covering intrusion testing, source code audits, configuration audits, architecture audits, and organizational and physical security audits under the PASSI (Prestataire d'Audit en Sécurité des Systèmes d'Information) framework. Aimed at clients requiring audits whose results carry ANSSI-recognized regulatory weight.
• CESTI - Évaluations de sécurité (CESTI Security Evaluations) Accredited security evaluation service performed under the CESTI (Centre d'Évaluation de la Sécurité des Technologies de l'Information) framework, the official channel for conducting evaluations required to obtain CSPN certification. Targeted at software vendors and integrators preparing products for CSPN submission.

Named customers11 records

Segments6 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

One partnership is on record.

• Alliance Confiance Numérique (ACN)minorStrategic or Co-development PartnerACCEIS is a member of Alliance Confiance Numérique, a cybersecurity industry alliance in France. This membership provides networking and collaboration opportunities within the French cybersecurity ecosystem.

Scale indicators1 record

Recent moves5 records

Expansion highlights5 records

Direct peers

• Advens: French cybersecurity pure-play providing audits, SOC/MSSP, GRC and offensive security services. Comparable as a France-headquartered mid-sized cybersecurity services competitor serving enterprise and public-sector clients across similar service lines.
• Synacktiv: French offensive-security specialist offering penetration testing, Red Team, code audits and security evaluations. Closest direct peer: PASSI-qualified, CESTI-accredited, headquartered in France with a comparable boutique services model targeting the same regulated client base.
• XMCO: French cybersecurity consultancy delivering pentests, security audits, Red Team and advisory services. Direct comparable: similar boutique French services model focused on offensive security and compliance work for enterprise clients.

Emerging players

• Sekoia.io: French cybersecurity SaaS provider offering an XDR/SIEM platform with associated threat intel and managed services. Adjacent competitor: serves overlapping enterprise clients but with a product-led model rather than pure services.

Broad incumbents

• Wavestone: French-origin consulting firm with a strong cybersecurity and digital trust practice. Comparable on advisory, GRC and security transformation work for large French enterprises, albeit with a broader management consulting footprint.
• Thales (Cybersecurity & Digital Identity): Major French defense and cybersecurity conglomerate offering security consulting, audits and certification services alongside broader product portfolio. Competes for large government, defense and OIV cyber mandates where ACCEIS also operates.
• Orange Cyberdefense: Cybersecurity arm of Orange, one of France's largest MSSPs and security consultancies. Overlaps with ACCEIS on penetration testing, audits and CERT services but operates at much larger scale with managed services as a core offering.
• Devoteam (Cyber): European IT consultancy with a dedicated cybersecurity practice covering GRC, audits and offensive security. Comparable in targeting French enterprise and regulated clients, though with a much broader technology consulting footprint.
• Sopra Steria (Cybersecurity): European IT services group with a French cybersecurity unit delivering audits, SOC and compliance services. Competes in regulated sectors and large public-sector tenders where ACCEIS also operates.
• Capgemini (Cybersecurity): Global IT services leader with a dedicated French cybersecurity practice covering audits, GRC, IAM and managed detection. Competes on large enterprise transformation programs that often include the audit scope ACCEIS bids for.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/acceis
• GitHubgithub.com/acceis
• LinkedInlinkedin.com/company/acceis

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Acceis