SCASSI

Name

SCASSI

Legal name

SCASSI CONSEIL

Website

https://scassi.com

Company type

Private

Founded year

2005

Operating status

Operating

Headcount range

11–50 employees

Ownership category

akta.pro rank

Product category

Critical Systems Cybersecurity Services

NAICS

Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151)

akta.pro primary industry

Control System Cybersecurity for OT (ICS Security, Monitoring, Hardening) (IMAGABAL)

akta.pro secondary industry

Industrial Control System (ICS) & SCADA Security (HDADAJAA)

Keywords

• Critical systems cybersecurity
• OT/ICS penetration testing
• Embedded systems security
• Cyber risk analysis
• Information security consulting

Headquarters

HQ city

Labège

HQ country

France

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Others

Revenue model

1. PASSI-LPM Audits: Project-based security audit engagements certified by ANSSI across five product lines (organizational, physical, architecture, configuration, source code) sold to Operators of Vital Importance and exposed entities under the French Military Programming Act.
2. Information Security Consulting (Conseil SSI): Project-based advisory engagements including outsourced CISO, certification support (ISO 27001, RGS, SecNumCloud, IGI 1300), security governance, secure architecture design, and cyber crisis management preparation.
3. Risk Analysis Services: Engagements delivering risk analysis using EBIOS RM, ISO 27005, and TARA methodologies, including full risk analysis, product/embedded TARA, and rapid 'flash' risk analysis for time-critical decisions.
4. Managed Security Services (SIEM): Recurring managed services including deployment and operation of SIEM platforms for continuous proactive monitoring of critical infrastructure.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels4 records

Core offering

SCASSI provides certified cybersecurity auditing, penetration testing, and risk analysis services for critical, embedded, OT/ICS, and industrial systems. Offerings span PASSI-LPM audits (ANSSI-certified across all five product lines), specialized OT/ICS Red Team exercises, EBIOS RM / ISO 27005 / TARA risk analysis, and sovereign information security consulting including outsourced CISO and cyber crisis management. Clients include Operators of Vital Importance, defense ministries, OIVs, and regulated enterprises in automotive, aeronautics, banking, and aerospace.

Product overview

SCASSI is a cybersecurity consulting firm offering a portfolio of three interconnected core services tailored for critical, embedded, and industrial systems: Audit & Penetration Testing (PASSI-LPM Audit), Cyber Risk Analysis & Management, and SSI Consulting (Information Security Consulting). The PASSI-LPM Audit service provides certified penetration testing and security audits across all five ANSSI product lines, covering organizational, physical, architecture, configuration, and source code audits, plus Red Team exercises. The Cyber Risk Analysis & Management service delivers risk analysis using EBIOS RM, ISO 27005, TARA, and IEC 62443 methodologies, including embedded product risk analysis and quick flash risk analysis for critical decisions. The SSI Consulting service complements these with secure architecture design, security certification support (PACS under ANSSI qualification), IS governance, outsourced CISO, and cyber crisis management preparation. Together, these three services cover the full security lifecycle for organizations operating Operators of Vital Importance (OVI/OVIs), embedded system providers, and industrial operators, organized internally into sector-specific skill centers (Automotive & Land Transport, Aeronautics & Aviation, Banking Finance & Insurance, Defense & Aerospace). Since May 2024, SCASSI has operated as a wholly owned subsidiary of the Squad Group, while retaining its dedicated service portfolio and PASSI/PACS qualifications.

Differentiator

Problem solved

Functional benefit

Brands

• SquadXpert: The cybersecurity blog associated with the Squad Group and referenced from the SCASSI site as "The SquadXpert Blog".

Products and services

• Audit & Penetration Testing (PASSI-LPM Audit) Comprehensive cybersecurity audits and penetration testing for critical, embedded, and industrial systems. SCASSI is certified by ANSSI under PASSI RGS and PASSI LPM across all five product lines and delivers specialized Red Team exercises for OT/ICS and embedded environments, plus web, mobile, internal network, OT/ICS, IoT, and PACS audits.
• Cyber Risk Analysis & Management Risk analysis and management service for critical, embedded, and industrial systems across the entire lifecycle. Uses EBIOS RM, ISO 27005, ISO/SAE 21434, IEC 62443, and DO-326A frameworks, offering Information System Risk Analysis, embedded Product Risk Analysis (TARA integrated into SDLC), and Quick Risk Analysis for time-critical decisions.
• SSI Consulting (Information Security Consulting) 100% sovereign cybersecurity consulting for sensitive, regulated environments, delivered by France-based experts. Encompasses Secure Architecture Consulting, Security Certification Support (including PACS under ANSSI qualification), IS Governance, Outsourced CISO, and Cyber Crisis Management preparation across ISO 27001, GDPR, LPM, NIS2, SecNumCloud, DO-178C, IEC 62443, IGI 1300, RGS, and PCI DSS.

Quantifiable outcome

• €9 million consolidated revenue in 2024 (solid growth)
• +3 more outcomes

Segments6 records

Ideal customer profiles5 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature7 records

Partnerships

Four partnerships are on record, tiered flagship and core.

• Squad GroupflagshipStrategic or Co-development Partner · 1 May 2024Since May 2024, Scassi has been a wholly owned subsidiary of the Squad Group, a leading player in cybersecurity. The partnership reinforces SCASSI's mission to protect critical, embedded, industrial, and sensitive environments, and enables delivery of a comprehensive, cohesive cybersecurity offering across Squad, Scassi, and Newlode covering auditing, managed services, consulting, engineering, integration, and on-demand expertise.
• SCASSI CIBERSEGURIDAD S.L.coreStrategic or Co-development PartnerSpanish subsidiary (CIF B86819372) jointly processing personal data with SCASSI FRANCE under GDPR, with registered office at Av. de la Reina Victoria, 31, 1ºA, Chamberí, 28003 Madrid. Operates the Madrid sales office covering Spain.
• SQUAD (SIREN 527873400)coreStrategic or Co-development PartnerSister entity within the Squad Group; personal data of candidates, customers, and prospects may be shared with SQUAD for analytical purposes. Squad hosts the recruitment portal, blog (SquadXpert), and broader partner ecosystem (BeyondTrust, CyberArk, F5, Forescout, Fortinet, Illumio, Mimecast, Netskope, Palo Alto Networks, Versa Networks, Wiz).
• NEWLODE (SIREN 812425643)coreStrategic or Co-development PartnerThird entity within the Squad Group alongside Squad and Scassi; personal data may be shared for candidate/customer/prospect analytics purposes.

Scale indicators9 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Wavestone: Paris-listed pure-play French cybersecurity and management consulting firm with a large practice in cyber risk, compliance, and incident response. Closely comparable to SCASSI as a French-headquartered cybersecurity consultancy serving regulated enterprises and public institutions, though Wavestone is much larger and less specialized in OT/embedded.
• Advens: French cybersecurity services specialist (formerly ADN Security) focused on SOC, detection, and security consulting for sensitive industries. Comparable to SCASSI as a French cybersecurity pure-play serving OIVs and large enterprises, with similar sovereign positioning and similar scale.
• CS Group (CS Communication & Systèmes): French systems integrator specializing in critical, embedded, and defense systems, with a cybersecurity practice covering aviation, space, rail, and energy. Directly comparable to SCASSI in combining embedded systems expertise with sovereign cybersecurity services for OIVs and defense primes.

Broad incumbents

• Thales: Global French defense and aerospace prime with a major cybersecurity division (Thales Cyber & Digital) covering identity, data protection, and critical-infrastructure security. Competes with SCASSI for defense, aerospace, OIV, and transportation cybersecurity mandates but at vastly larger scale and broader scope.
• Orange Cyberdefense: Cybersecurity services arm of Orange, one of France's largest managed security and consulting providers. Overlaps with SCASSI on French and European cyber consulting for large enterprises and OIVs, but with a much broader portfolio spanning SOC, MDR, and identity services.
• Sopra Steria: Major European IT services and cybersecurity consulting firm with a strong French public-sector and defense footprint. Competes with SCASSI for French ministry, OIV, and regulated-industry cyber mandates, though Sopra Steria is a broad IT services player rather than a niche OT/embedded specialist.
• Capgemini Engineering (incl. cybersecurity): Global IT services group with a dedicated cybersecurity practice and embedded systems engineering capability (Altran heritage). Overlaps with SCASSI in automotive, aerospace, and industrial cybersecurity consulting at the tier-1 enterprise level.
• Atos: Global IT services group with a large French cybersecurity practice serving defense, ministries, and critical-infrastructure operators. Comparable to SCASSI in customer profile (OIVs, defense, public sector), but operating at dramatically larger scale across the full IT stack.
• Airbus Cybersecurity (Stellar / Cyber & Digital): Aerospace and defense prime with growing cybersecurity activities covering satellite, avionics, and ground segments. Overlaps with SCASSI in defense and aerospace cybersecurity, particularly for embedded and OT-related engagements, but as a global OEM rather than a boutique specialist.

Emerging players

• Sentryo (Cisco): Originally a French OT/ICS network visibility and cybersecurity startup (acquired by Cisco in 2019) that provides asset discovery, threat detection, and segmentation for industrial environments. Adjacent to SCASSI as a France-rooted OT cybersecurity specialist, now embedded in Cisco's industrial security portfolio.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

Compliance12 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about SCASSI