AlgoSecure
AlgoSecure is an independent, ANSSI PASSI-qualified French cybersecurity consulting firm providing penetration testing, security audits, incident response (AlgoCERT), and EASM (AlgoLightHouse) services to large enterprises, mid-market firms, and public sector clients across France via eight regional offices.
- Company typePrivate
- Founded2008
- HeadquartersParis, France
- Headcount11–50
- GTM typeB2B
- OfferingServices
What AlgoSecure does
AlgoSecure is an independent French cybersecurity consulting firm founded in 2008 and headquartered in Villeurbanne, near Lyon. Structured as a SARL with €40,000 in registered capital, the firm holds ANSSI PASSI qualification (since November 2020, extended to code audit scope in 2022), ISO 27001:2022 certification, and the ExpertCyber label. It serves more than 55 active clients across large enterprises (SNCF, Thales, Crédit Agricole, Arkema, Enedis, MSD), mid-market companies (April, Apicil, Go Sport, Samse, Delta Plus, Avem), and public sector bodies (Métropole de Grenoble, Conseil de l'Europe, Grand Lyon, Caluire et Cuire), with operations exclusively in France.
The firm's core offering is organized into three pillars. The first is Audit & Pentest Services, covering web, mobile, LAN, cloud, code, IoT, industrial systems, SWIFT infrastructure, PCI DSS, Red Team, and organizational audits, delivered by OSCP/OSEP/BSCP-certified consultants in teams of two per mission. The second is Consulting (Blue Team) Services, including ISO 27001 certification support, GDPR compliance, external DPO, risk analysis, AMOA cybersecurity, Active Directory securization, SecNumCloud qualification support, and security training. The third is AlgoCERT, a GIAC-certified incident response and digital forensics capability. Productized offerings include AlgoLightHouse (a managed External Attack Surface Management service launched November 2023), ACDC (an outsourced security expertise center), and SecNumCloud qualification support. R&D output includes the open-source Pollenisator collaborative pentesting tool, the Bonware educational C2 platform, and a CIFRE thesis partnership with a Lyon research center on IoT security.
AlgoSecure operates a professional services business model with custom quote-based pricing tied to scope and duration, multi-year contracts, and a direct sales motion: enterprise field sales supported by eight physical offices across France (Lyon, Paris La Défense, Grenoble, Marseille, Toulouse, Strasbourg, Lille), with inside sales for mid-market. Distribution is exclusively direct in France with no disclosed channel partners or resellers. The firm is also a member of Campus Cyber and Hexatrust, holds "Entreprise à Mission" status, and markets primarily through technical content (blog, whitepapers, anonymized audit reports), the monthly "Lyon Security Mornings" (MLSSI) workshop, and participation in industry events such as Forum In Cyber (FIC), SIDO, CoTer Numérique, DPO Forum, and Salon Souveraineté Numérique.
AlgoSecure firmographics
Firmographics- Name
- AlgoSecure
- Legal name
- SARL AlgoSecure
- Website
- https://algosecure.fr
- Company type
- Private
- Founded year
- 2008
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- AlgoSecure is an independent, ANSSI PASSI-qualified French cybersecurity consulting firm providing penetration testing, security audits, incident response (AlgoCERT), and EASM (AlgoLightHouse) services to large enterprises, mid-market firms, and public sector clients across France via eight regional offices.
- Ownership category
- akta.pro rank
AlgoSecure industry classification
Industry- Product category
- Cybersecurity Consulting Services
- NAICS
- Investigation and Security Services (5616), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Engineering, Accounting, Research, Management (8700), Services-Engineering Services (8711)
- akta.pro primary industry
- Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG)
- akta.pro secondary industries
- Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) (BPAKADAC), Identity & Access Security Services (IAM, PAM, Zero Trust) (BPAKAHAI), OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN), OT Asset Discovery, Inventory & Vulnerability Management (HDADAJAE)
Keywords
Where AlgoSecure is headquartered
LocationHeadquarters
- HQ city
- Paris
- HQ country
- France
- HQ region
- Europe
Offices8 records
Markets served
AlgoSecure business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Security Audits and Penetration Testing: Core revenue stream from various penetration testing and security audit services including web application pentests, mobile application pentests, internal network audits, Red Team operations, cloud infrastructure audits, configuration audits, SWIFT infrastructure audits, code security audits, IoT environment audits, industrial systems audits, and organizational audits.
- Cybersecurity Consulting: Advisory services including ISO 27001 certification support, RGPD/GDPR compliance assistance, external DPO services, risk analysis, security policy development, AMOA (assistance à maîtrise d'ouvrage), Active Directory securization, and ransomware protection.
- Managed Security Services (Supervision): Delegated security monitoring and surveillance of client information systems through managed supervision platform.
- Digital Forensics and Incident Response: AlgoCERT incident response services including digital investigation and forensic analysis following security incidents, with GIAC-certified consultants.
- Security Training and Awareness: Security training and awareness programs for employees covering security best practices, fraud prevention (wire transfer fraud), and technical staff training.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Custom professional services engagement |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels7 records
AlgoSecure product offering
Product offeringCore offering
AlgoSecure is a PASSI-qualified, ISO 27001:2022-certified French cybersecurity consulting firm that delivers end-to-end offensive and defensive security services to enterprises, mid-market firms, and public-sector organizations. Its core offering combines penetration testing and Red Team audits with advisory services (ISO 27001 certification, GDPR/RGPD compliance, external DPO, risk analysis, AMOA, Active Directory hardening), digital forensics and incident response (AlgoCERT with GIAC-certified consultants), managed security supervision, and the AlgoLightHouse External Attack Surface Management (EASM) managed platform.
Product overview
AlgoSecure is an independent PASSI-qualified cybersecurity consulting firm offering a comprehensive portfolio of security services. The core offering consists of three main pillars: Audit & Pentest Services (covering web, mobile, network, cloud, code, IoT, and industrial system audits, plus Red Team engagements), Consulting Services (including SSI accompaniment, ISO 27001 certification support, forensics, training, and DPO services), and AlgoCERT (incident response and digital forensics). Key named products include AlgoLightHouse (external attack surface management platform), ACDC (outsourced security expertise center), Polenisator (open-source pentest tool), and SecNumCloud qualification support. AlgoLightHouse operates as a separate platform while integrating with the broader service portfolio.
Differentiator
Problem solved
Functional benefit
Brands
- AlgoLightHouse: Managed service combining technology and human expertise for external attack surface management (EASM). Launched November 2023.
- AlgoCERT
- ACDC (Algo Centre De Compétences)
Products and services
- Audit & Pentest Services End-to-end security audit and penetration testing services for organizations that need to identify and remediate vulnerabilities across their information systems, delivered as standalone, scope-based engagements. It includes web application pentests, mobile application audits, internal network (LAN) audits, Red Team engagements, cloud infrastructure audits, configuration/compliance audits, SWIFT infrastructure audits, code security audits, IoT environment audits, industrial systems audits, RGPD compliance audits, PCI DSS penetration testing, reverse engineering, and organizational security audits.
- Conseil (Cybersecurity Consulting) Cybersecurity consulting services for organizations building defensive maturity and meeting regulatory obligations, covering SSI accompaniment, ISO 27001 certification support, SSI solution integration, digital investigation/forensics, security training and awareness, supervision/monitoring, risk analysis, AMOA cybersecurity support, external DPO services, GDPR accompaniment, ransomware assistance, and Active Directory securization, plus SecNumCloud qualification support for cloud providers.
- AlgoCERT (Incident Response & Digital Forensics) Computer Emergency Response Team services providing incident response, digital forensics, crisis management, and confidential handling of security incidents, with a dedicated PGP key for encrypted communications and a 24/7 emergency reporting channel for clients facing active breaches.
- AlgoLightHouse (External Attack Surface Management) Managed External Attack Surface Management service that combines technology and human expertise to give organizations visibility into their external digital assets and potential vulnerabilities, helping them continuously monitor what attackers could discover and target.
- ACDC (Algo Centre De Compétences) Outsourced IT security center of expertise that gives clients access to a pool of AlgoSecure security experts through different service formulas, functioning as an external security team for organizations that need flexible, recurring security expertise.
- Formation et Sensibilisation (Security Training & Awareness) Security training and awareness programs for both administrative users and technical staff (system administrators, developers), developing security best practices, reflexes, and topic-specific modules such as fraud prevention including wire-transfer fraud.
- SecNumCloud Qualification Support Advisory service assisting cloud providers in achieving ANSSI SecNumCloud qualification, addressing the requirements of the French sovereign-cloud framework.
Quantifiable outcome
- Two pentesters deployed per mission ensuring complementary expertise and higher quality analysis
- +1 more outcomes
Companies that use AlgoSecure
Customer profileNamed customers13 records
Segments5 records
Ideal customer profiles4 records
AlgoSecure technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration2 records
Feature4 records
AlgoSecure partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered core and minor.
- Ciril GROUPcorePartnership around External Attack Surface Management (EASM) management. AlgoSecure and Ciril GROUP collaborate at CoTer Numérique events to present combined cybersecurity offerings to public sector clients. Ciril GROUP provides IT management solutions and AlgoSecure contributes cybersecurity expertise.
- HexatrustminorHexatrust is a French cybersecurity ecosystem grouping trusted cloud and security providers. AlgoSecure participates in Hexatrust events including Universités d'Hexatrust to discuss client needs and build partnerships within the trusted cybersecurity community.
- Polypus (Village Polypus)minorAlgoSecure participates in the Polypus village at Salon Souveraineté Numérique 2026 alongside other French technology companies (Linphone, Jamespot, TreeFaz, IntelliWAN, Ucaptech) to contribute to digital sovereignty initiatives.
- Lyon Research Center (Centre de Recherche Lyonnais)coreR&D partnership with a Lyon-based research center to work on IoT system security through CIFRE thesis funding. This partnership enables advanced security research and development of specialized expertise in connected objects security.
Scale indicators6 records
Recent moves8 records
Expansion highlights6 records
AlgoSecure competitors and assessment
Company assessmentBroad incumbents
- Orange Cyberdefense: Cybersecurity services arm of Orange, one of the largest PASSI-qualified French cybersecurity consultancies offering pentesting, SOC/MDR, threat intelligence, and incident response — directly comparable service portfolio and customer base to AlgoSecure, but at vastly larger scale.
- Sopra Steria: Large French IT services group whose cybersecurity division delivers audits, pentesting, and managed security to French banks, defense, and public sector — serves the same enterprise buyers AlgoSecure does, but as part of a broader digital transformation portfolio rather than a security specialist offering.
- Capgemini: Global IT consultancy with a sizable French cybersecurity practice delivering pentest, compliance, and managed detection/response to enterprise clients; comparable in serving French multinationals and regulated industries but at a much wider service-line breadth.
Direct peers
- Wavestone: French-headquartered consulting firm with a dedicated cybersecurity practice serving large French enterprises and public sector on cyber risk, compliance (ISO 27001, GDPR), and pentest/audit assignments — overlapping client verticals (financial services, public sector) and PASSI-equivalent positioning.
- Devoteam: European IT and cybersecurity consultancy with a strong French practice delivering security audits, cloud security, and managed security services; competes for the same large-enterprise and public-sector engagements AlgoSecure targets, with comparable PASSI-adjacent service offerings.
- Advens: French cybersecurity pure-play (now part of Sia Partners) offering SOC, pentesting, incident response, and GRC consulting — closest like-for-like competitor in size, French focus, PASSI-equivalent qualifications, and customer base, competing head-to-head on mid-market and regulated accounts.
- XMCO: Independent French cybersecurity boutique specializing in penetration testing, Red Team, and security audits — comparable in size, French-only focus, pentest-led service mix, and PASSI-style positioning for mid-market and large enterprise French clients.
Emerging players
- Synack: US-headquartered crowdsourced pentest-as-a-service platform increasingly competing for European enterprise pentest budgets; represents the platform-based substitution risk to AlgoSecure's traditional human-led pentest engagements.
- HackerOne: Bug bounty and crowdsourced security testing platform; competes for a portion of the offensive security budget AlgoSecure serves, particularly on web/mobile application testing and continuous testing use cases.
Regional players
- Systancia (formerly WALLIX) / WALLIX Group: French cybersecurity vendor with PAM and identity security offerings; part of the same Hexatrust/Campus Cyber trusted-vendor ecosystem as AlgoSecure and competing for adjacent portions of French enterprise security budgets.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
AlgoSecure social profiles
Digital presenceAlgoSecure compliance and trust
Trust signalCompliance4 records
AlgoSecure financial estimates
Financial estimateRevenue estimate
Valuation estimate
AlgoSecure leadership team
Management profileNumber of profiles
Profiles2 records
AlgoSecure funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
AlgoSecure M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about AlgoSecure
What does AlgoSecure do?
AlgoSecure is a PASSI-qualified, ISO 27001:2022-certified French cybersecurity consulting firm that delivers end-to-end offensive and defensive security services to enterprises, mid-market firms, and public-sector organizations. Its core offering combines penetration testing and Red Team audits with advisory services (ISO 27001 certification, GDPR/RGPD compliance, external DPO, risk analysis, AMOA, Active Directory hardening), digital forensics and incident response (AlgoCERT with GIAC-certified consultants), managed security supervision, and the AlgoLightHouse External Attack Surface Management (EASM) managed platform.
Is AlgoSecure a public or private company?
AlgoSecure is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was AlgoSecure founded?
AlgoSecure was founded in 2008. It employs 11 to 50 people.
Where is AlgoSecure based?
AlgoSecure is headquartered in Paris, France, in the Europe region.
How does AlgoSecure make money?
Five revenue lines are on record. Security Audits and Penetration Testing is the primary driver. The others are cybersecurity Consulting, managed Security Services (Supervision), digital Forensics and Incident Response and security Training and Awareness.
Who are AlgoSecure's main competitors?
Broad incumbents on record are Orange Cyberdefense, Sopra Steria and Capgemini. Direct peers are Wavestone, Devoteam, Advens and XMCO. Emerging players are Synack and HackerOne. Systancia (formerly WALLIX) / WALLIX Group is listed as a regional player.
Does AlgoSecure have an API?
No public API is recorded for AlgoSecure.
What industry is AlgoSecure in?
AlgoSecure's product category is Cybersecurity Consulting Services. Its primary akta.pro industry code is BPAKAHAG, Vulnerability Assessment, Security Audits & Compliance Testing, with a secondary code of BPAKADAC, Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX). Its NAICS code is 5616 and its SIC code is 8700.