What DND Agency does

DND Agency (legal entity DIGITAL NETWORK DEFENSE AGENCY SAS) is a French cybersecurity consultancy founded in 2017 and headquartered in Paris, with additional offices in Villeneuve-d'Ascq/Lille, Barcelona, and Saint-Denis (La Réunion). The company operates across three integrated lines: offensive security services (penetration testing, vulnerability analysis, security audits, incident response, bug bounty programs), regulatory compliance advisory (RGPD/DPO externalisé, NIS2, DORA, ISO 27001/27002, HDS, IEC 62443), and a professional training division (DNDA Formation) delivering certification preparation courses. It also serves as an authorized integrator and reseller for third-party solutions including ESET, Sentinel One EDR, Safetica DLP, multi-factor authentication, and the Airbus CyberRange platform.

The company's proprietary technology stack centers on three software assets: LumIS, an AI-assisted CISO/DSI governance dashboard that natively integrates Mistral AI for decision support and provides real-time cyber maturity scoring with dynamic EBIOS RM risk mapping; the PSSI SaaS tracking dashboard aligned to ISO 27001/27002 for security policy KPI visualization; and the CyberRange immersive training platform used for red/blue team exercises, phishing simulations, and crisis drills. It holds Qualiopi certification for training quality and is referenced on the French national cybermalveillance.gouv.fr platform.

Revenue is generated through a hybrid model combining professional services (engagements, audits, training at unit prices ranging from 450 to 8,490 EUR), recurring subscriptions (CyberRange at 2,500–5,000 EUR/month, continuous phishing programs at 2,490 EUR/year, managed security/SOC services), and reseller margins on integrated third-party products. Go-to-market is primarily enterprise field sales with event-driven lead generation at Forum InCyber, supported by inside sales for mid-market and adapted-pricing programs for startup ecosystems (Station F, Spark Innovation, Passerelle Entrepreneur). The primary customer segment is large enterprises requiring NIS2/DORA compliance, supplemented by SMEs, startups, healthcare organizations, and industrial operators.

Name

DND Agency

Legal name

DIGITAL NETWORK DEFENSE AGENCY

Website

https://dndagency.fr

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

DND Agency is a French cybersecurity consultancy offering offensive security testing, regulatory compliance advisory (RGPD, NIS2, DORA, ISO 27001), managed security services, and proprietary AI-enabled governance platforms (LumIS, CyberRange, PSSI dashboard) to large enterprises, SMEs, startups, healthcare, and industrial operators across France, Spain, and La Réunion.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (5415), Other Computer Related Services (541519)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)

akta.pro primary industry

Vulnerability Management & Penetration Testing Services (BPAEADAD)

akta.pro secondary industries

Security Operations Center (SOC) as a Service (BPAEADAB), Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing) (EDABAFAF), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Cybersecurity & Identity Consulting (BPAHAEAG)

Keywords

• Cybersecurity services
• Penetration testing
• Compliance consulting
• Security training
• Incident response

Headquarters

HQ city

Paris

HQ country

France

HQ region

Europe

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Professional Cybersecurity Services: Core revenue stream from offensive security services including penetration testing, vulnerability analysis, security audits, incident response, and bug bounty programs. Delivered by certified security specialists to enterprise clients.
2. Training and Professional Development: Professional training services covering cybersecurity, compliance (RGPD, NIS2, DORA), and AI. Delivered in classroom, hybrid, and distance formats with certification preparation courses.
3. Managed Security Solutions: Recurring subscription revenue from SOC services, ESET Elite protection, Sentinel One EDR, Safetica DLP, multi-factor authentication, and CyberRange platform access.
4. Phishing Simulation Campaigns: Tiered pricing for phishing awareness campaigns ranging from single evaluations (490 EUR) to continuous annual programs (2,490 EUR/year) with training modules and analytics.

Pricing tiers

Go-to-market motion3 records

Distribution channels5 records

Marketing channels8 records

Core offering

DND Agency delivers integrated cybersecurity services including offensive security testing (penetration testing, vulnerability analysis, security audits, incident response, bug bounty), regulatory compliance advisory (RGPD, NIS2, DORA, ISO 27001, IEC 62443, HDS), and outsourced DPO services to enterprises, mid-market firms, healthcare, and industrial operators. The company complements these services with proprietary software platforms — LumIS (AI-assisted CISO/DSI governance dashboard integrating Mistral AI), the CyberRange immersive training environment, and a PSSI tracking SaaS — plus a catalog of certified professional training programs delivered through its DNDA Formation division.

Product overview

DND Agency (DNDA) is a cybersecurity agency offering an integrated portfolio of security services, proprietary platforms, and training solutions. The core offering includes offensive security services (pentesting, vulnerability analysis, security audits, incident response, bug bounty programs), GDPR/compliance services (RGPD implementation, external DPO), and proprietary AI-powered platforms including CyberRange (immersive training environment), LumIS (strategic steering platform with Mistral AI), and the PSSI SaaS dashboard. The company also resells/integrates third-party security solutions (Sentinel One EDR, ESET Protect, Safetica DLP, MFA) and delivers comprehensive training programs covering cybersecurity certifications (ISO 27001, CISSP, CISA), GDPR/DPO, NIS2/DORA compliance, and AI.

Differentiator

Problem solved

Functional benefit

Brands

• DNDA Formation: Professional training division of DND Agency offering cybersecurity, compliance, and AI training programs
• LumIS
• CyberRange

Products and services

• CyberRange Immersive cybersecurity training platform enabling realistic attack simulations and hands-on Red/Blue Team exercises in a controlled virtual environment for security teams and IT professionals to develop incident response skills. Delivered as a tiered subscription SaaS (1-500 users at 5,000 EUR HT/month; 501-1,000 users at 3,500 EUR HT/month; 1,000+ users at 2,500 EUR HT/month) including unlimited access, builder tools, pedagogical support, and one day of pedagogical engineer support.
• LumIS AI-powered strategic steering platform for DSI/CISO that transforms cybersecurity indicators into concrete decisions, featuring real-time Global Cyber Maturity Index scoring (e.g., 63.85/100 SMSI benchmark), dynamic EBIOS RM risk mapping, comparative benchmarking against market standards, and native Mistral AI integration for accelerated complex-data arbitrations. Designed for NIS2 and DORA compliance.
• Tableau de Bord PSSI (SaaS) SaaS dashboard for PSSI (Politique de Sécurité des Systèmes d'Information) tracking aligned with ISO 27001 and ISO 27002 international standards, enabling centralization and real-time visualization of key performance indicators (KPIs) for systematic security management and compliance steering.
• Pentest / Test d'Intrusion Offensive security service using specialist penetration testers to identify and validate security vulnerabilities in client infrastructure, helping organizations continuously validate and harden their protections.
• Analyse de Vulnérabilité Vulnerability assessment service that systematically identifies and catalogs security weaknesses across client systems and networks to support remediation prioritization.
• Audit de Sécurité Comprehensive security audits to evaluate and certify client security posture against recognized standards, supporting governance and certification objectives.
• Réponse à Incident Incident response service to help organizations handle, contain, and recover from cybersecurity incidents through structured forensic and remediation support.
• Approche Bug Bounty Bug bounty program design and management service leveraging ethical hacker communities to discover and validate vulnerabilities in client environments.
• Accompagnement RGPD GDPR compliance consulting service including gap analysis, implementation support, and ongoing compliance maintenance to help organizations meet RGPD obligations.
• DPO Externalisé External Data Protection Officer service providing qualified DPO resources for organizations required to designate one under GDPR, with ongoing CNIL-facing compliance support.
• Services SOC Security Operations Center service providing continuous monitoring and threat detection capabilities for client environments, delivered as a managed subscription.
• Campagne de Phishing Phishing simulation campaigns to test and train employees on social-engineering threats, including analytics on click and compromise rates, plus corrective training modules. Priced from 490 EUR HT (Classic) to 2,490 EUR HT/year (Continuous annual program).
• ESET Protect Elite Multi-layer enterprise protection solution from ESET (antivirus and advanced security features), integrated and resold by DND Agency as part of its cybersecurity stack.
• Sentinel One EDR Endpoint Detection and Response solution from Sentinel One, integrated and delivered by DND Agency for advanced endpoint threat protection with autonomous detection and response.
• Safetica DLP Data Loss Prevention solution from Safetica integrated by DND Agency to prevent unauthorized exfiltration of sensitive data across client environments.
• Authentification Multi-Facteurs (MFA) Multi-factor authentication solutions implemented by DND Agency as part of comprehensive client security architecture.
• Lockpass Password management solution for secure credential storage and management across client organizations.
• DNDA Formation — Catalogue de Formations Certifiantes Qualiopi-certified professional training catalog (DNDA Formation) covering cybersecurity certifications, compliance (RGPD, NIS2, DORA, ISO 27001, HDS), and AI for cybersecurity, delivered in classroom, hybrid, and distance formats with certification preparation. Pricing examples: ISO 27035 (1 day, 790 EUR HT), EBIOS RM (3 days, 2,150 EUR HT), ISO 27001 Lead Implementer/Auditor (5 days, 3,860 EUR HT), DPO certification (5 days, 3,780 EUR HT), Cyber Crisis Management (2 days, 1,900 EUR HT/person).
• Exercices de Simulation de Crise Cyber Cyber crisis simulation exercises delivered on-site at the client location, tiered by format and participant count: Standard (5,590 EUR HT, 5 participants, 3h + cold debrief), Intermediate (6,690 EUR HT, 6-10 participants, 4h + cold debrief), Advanced (8,490 EUR HT, 6-10 participants, 4h + cold debrief).

Quantifiable outcome

• Cyber Range supports complex systems with tens or hundreds of VMs or containers for realistic attack simulations
• +2 more outcomes

Named customers3 records

Segments6 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability2 records

Feature4 records

Partnerships

Eight partnerships are on record, tiered core and minor.

• ESA Coding LabcoreStrategic or Co-development PartnerPartnership with ESA Coding Lab in Lebanon to help address the country's economic crisis through training in sought-after technical skills. The program offers a dual French-Lebanese certification, contributing to workforce development in the region.
• Spark Innovation IncubatorminorGTM or Marketing PartnerDNDA provides cybersecurity awareness training and first reflexes education to project holders at the Spark Innovation incubator, helping early-stage entrepreneurs understand cybersecurity fundamentals.
• Station FminorGTM or Marketing PartnerDNDA offers tailored pricing for startups hosted at Station F, the world's largest startup campus, providing accessible cybersecurity solutions for early-stage technology companies.
• Passerelle EntrepreneurminorGTM or Marketing PartnerDNDA provides adapted pricing and cybersecurity training for entrepreneurs supported by Passerelle Entrepreneur, supporting the startup ecosystem with accessible security services.
• Airbus CyberRangecoreTechnology or IntegrationDNDA operates the Airbus CyberRange platform, providing advanced cybersecurity training environments. The platform enables organizations to simulate attacks and train security teams in controlled virtualized environments.
• ESETcoreTechnology or IntegrationDNDA is an integrator and reseller of ESET cybersecurity solutions including ESET Protect Elite and SOC services, offering multi-layered endpoint protection for enterprises.
• Sentinel OnecoreTechnology or IntegrationDNDA offers Sentinel One EDR (Endpoint Detection and Response) solutions as an authorized integrator, providing advanced endpoint protection with autonomous threat detection and response capabilities.
• SafeticacoreTechnology or IntegrationDNDA integrates Safetica DLP (Data Loss Prevention) solutions to help organizations protect sensitive data from accidental or intentional leaks, offering comprehensive data protection services.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Advens: Advens is a French cybersecurity pure-play specializing in SOC services, offensive security, and compliance advisory. Closest direct competitor to DND Agency in the French mid-market, with overlapping service portfolio including NIS2/RGPD advisory and managed detection.
• Sekoia.io: Sekoia.io is a French cybersecurity SaaS firm offering SOC-as-a-service and threat intelligence platform. Overlaps with DND Agency on managed SOC and emerging SaaS GRC offerings like LumIS, with comparable French mid-market positioning.

Broad incumbents

• Sopra Steria Cybersecurity: Sopra Steria is a major European IT services firm with a sizable cybersecurity practice spanning pentesting, SOC, identity, and compliance. Competes with DND Agency for enterprise cybersecurity budgets and offers overlapping NIS2/DORA capabilities.
• Capgemini Engineering (Cybersecurity): Capgemini's cybersecurity practice offers global managed security, compliance, and identity services. Comparable to DND Agency across the full cyber services portfolio but operates at massive enterprise scale with global delivery footprint.
• Orange Cyberdefense: Orange Cyberdefense is the cybersecurity arm of Orange Group and one of Europe's largest MSSPs, offering SOC, pentesting, compliance advisory, and training. Directly comparable to DND Agency's full-stack offensive and managed security services, but at vastly greater scale and with established enterprise relationships across France and Europe.
• Devoteam (Cyber Trust): Devoteam's Cyber Trust practice offers managed security, compliance, and cloud security services across Europe. Comparable to DND Agency across offensive testing, GRC, and managed SOC, but operating at broader consulting scale with international delivery centers.

Regional players

• Wallix: Wallix is a French cybersecurity vendor specializing in privileged access management (PAM) and identity security, listed on Euronext. Comparable as a French-rooted cybersecurity specialist expanding across Europe, though more product-led and less services-led than DND Agency.
• Stormshield: Stormshield is a French cybersecurity vendor (subsidiary of Airbus) providing endpoint, network, and data security solutions. Comparable as a France-rooted cybersecurity specialist; the Airbus connection is also notable given DND Agency's CyberRange partnership with Airbus.
• Systancia: Systancia is a French cybersecurity vendor focused on privileged access, secure access, and identity & access management. Comparable as a French cybersecurity specialist operating in adjacent security categories, often co-delivering with French MSSPs.

Others

• Cybereason: Cybereason is an EDR/XDR vendor whose technology DND Agency could partner with or replace within its managed security stack. Representative of the category of endpoint security technology providers whose products are commonly resold/integrated by European MSSPs.

Market position

Strengths3 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/dnd_agency
• YouTubeyoutube.com/channel/UCUyHBtC--vCwh1j4t4TMiyg
• Facebookfacebook.com/dndagency.fr
• LinkedInfr.linkedin.com/company/d-n-d-agency

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about DND Agency