Oppidum Security
Oppidum Security is a French cybersecurity consultancy based in Paris La Défense, providing DMARC email authentication, application penetration testing, Microsoft 365/Azure security, and digital forensics services to CISO/RSSI buyers across Western Europe.
- Company typePrivate
- Founded2017
- HeadquartersLa Défense, France
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Oppidum Security does
Oppidum Security is a French cybersecurity consulting firm headquartered in Paris La Défense, founded in 2017, targeting CISO and RSSI (Chief Information Security Officer) buyers primarily in France and Western Europe. The firm operates as a boutique professional services practice with a stated headcount band of 11-50, though only four named senior consultants (Fabien, Bruno, Quentin, Nicolas) are publicly identified as billable experts.
The company's service portfolio is anchored on three core offerings: DMARC email authentication implementation (covering SPF/DKIM configuration, monitoring, and BIMI logo support), application penetration testing executed under three OWASP-aligned engagements (Blackbox 5 days, Greybox 7 days, Whitebox with source code review 15 days), and Microsoft 365/Azure security coaching and configuration. Supporting offerings include a SaaS log analysis platform for Microsoft 365 and Azure AD built on the ELK stack, computer forensics and judicial expertise services (Expertise Judiciaire Informatique) using the MITRE ATT&CK framework, and free tools such as the DNS Toolbox and M365 MindMap.
Oppidum Security monetizes almost exclusively through project-based professional services priced per engagement via a quote-under-48-hours model, with no publicly disclosed pricing. The firm distributes through direct enterprise sales aided by content marketing (blog, email newsletter, multilingual website), branded sub-brands (DMARC Expert, M365 MindMap, DNS Toolbox, Pentest School), and educational content (YouTube, Pentest School). No institutional funding, M&A activity, patents, or third-party certifications have been disclosed.
Oppidum Security firmographics
Firmographics- Name
- Oppidum Security
- Legal name
- Oppidum Security
- Website
- https://oppidumsecurity.com
- Company type
- Private
- Founded year
- 2017
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Oppidum Security is a French cybersecurity consultancy based in Paris La Défense, providing DMARC email authentication, application penetration testing, Microsoft 365/Azure security, and digital forensics services to CISO/RSSI buyers across Western Europe.
- Ownership category
- akta.pro rank
Oppidum Security industry classification
Industry- Product category
- Cybersecurity Consulting
- NAICS
- Other Scientific and Technical Consulting Services (54169)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Management Services (8741)
- akta.pro primary industry
- Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)
- akta.pro secondary industries
- Security Operations Center (SOC) as a Service (BPAEADAB), Application Security & Secure Software (DevSecOps) (EDAOAIAK)
Keywords
Where Oppidum Security is headquartered
LocationHeadquarters
- HQ city
- La Défense
- HQ country
- France
- HQ region
- Europe
Offices1 record
Markets served
Oppidum Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Penetration Testing Services: Project-based professional services for application penetration testing. Services range from 5-day blackbox assessments to 15-day whitebox assessments with source code review. Includes detailed PDF reports with executive summaries, action plans, and proof of concept documentation.
- DMARC Implementation and Email Security: DMARC implementation service with monitoring, authentication configuration, and ongoing protection against email spoofing. Includes BIMI certification for brand logo display in email clients.
- Microsoft 365 Security Consulting: Coaching and consulting services for Microsoft 365 and Azure security configuration. Includes SaaS log analysis platform subscription and security posture review.
- Computer Forensics and Incident Response: Forensic analysis, compromise audits, crisis management, and judicial expert services for cybersecurity incidents.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Blackbox Penetration Test - 5 days |
| Other | Multi-year contract | Greybox Penetration Test - 7 days |
| Other | Multi-year contract | Whitebox Penetration Test + Source Code Review - 15 days |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels4 records
Oppidum Security product offering
Product offeringCore offering
Oppidum Security is a French cybersecurity consulting firm that delivers specialized security services to enterprise clients, primarily targeting CISO/RSSI decision makers. Its core offerings include DMARC email authentication implementation, application penetration testing following OWASP methodology, and Microsoft 365/Azure security configuration and coaching. Supporting services include a SaaS log analysis platform for M365 and Azure AD, computer forensics and incident response, and judicial expert services.
Product overview
Oppidum Security offers a cybersecurity services portfolio centered on three core offerings: DMARC email authentication services, application penetration testing, and Microsoft 365/Azure security solutions. The DMARC Service provides email authentication with SPF/DKIM configuration, phishing protection, and BIMI logo support. The Pentest Applicatif service delivers penetration testing across three tiers (Blackbox, Greybox, Whitebox) following OWASP methodology. Supporting these core services, the company provides M365 MindMap for security coaching, DNS Toolbox for configuration testing, SIEM M365 & Azure for log analysis and threat hunting, and Expertise Judiciaire Informatique for forensic investigation services.
Differentiator
Problem solved
Functional benefit
Brands
- DMARC Expert: DMARC email authentication service and DNS toolbox
- M365 MindMap
- DNS Toolbox
- Pentest School
Products and services
- DMARC Service
Quantifiable outcome
- 1 in 3 companies experienced at least one confirmed fraud incident in 2017, with 10% of attacked companies suffering damages exceeding 100,000 euros
Companies that use Oppidum Security
Customer profileNamed customers1 record
Segments1 record
Ideal customer profiles1 record
Oppidum Security technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature3 records
Oppidum Security partnerships and signals
Strategic signalScale indicators3 records
Recent moves5 records
Expansion highlights6 records
Oppidum Security competitors and assessment
Company assessmentDirect peers
- Wallix: French cybersecurity vendor specializing in privileged access management (PAM) and identity security, with a services arm. Comparable as a French cybersecurity specialist targeting similar enterprise/regulated buyers.
- Advens: French cybersecurity pure-player headquartered in Lille offering MSSP/SOC, penetration testing, and incident response. Directly comparable as a French-speaking cybersecurity services firm targeting enterprise CISOs with a similar service mix.
- XMCO: Independent French cybersecurity consultancy offering pentest, red team, SOC, and incident response services. Closely comparable as a boutique French cybersecurity services firm with similar offensive-security positioning.
- Devoteam: European IT consulting firm with a dedicated cybersecurity practice covering cloud/M365 security, penetration testing, and managed security services. Comparable as a consultancy-led competitor in France with a wider delivery footprint.
Broad incumbents
- Orange Cyberdefense: Subsidiary of Orange operating one of Europe's largest MSSPs/SOCs with managed detection, threat intelligence, and incident response. A broad incumbent against which Oppidum competes for French enterprise cybersecurity budgets.
- Thales Cybersecurity: Global cybersecurity division of Thales offering managed security, data protection, and consulting for critical-infrastructure and government clients. A broad incumbent in the same enterprise/government cybersecurity market segment.
- Sopra Steria: Large European IT services group with cybersecurity, cloud (Azure/M365), and digital trust offerings for enterprise and public sector. Competes with Oppidum for French enterprise security configuration and pentest mandates.
- Capgemini Engineering (Cybersecurity): Global IT services firm with a cybersecurity practice spanning cloud security, identity, and managed services. Comparable as a large-scale systems integrator competing for similar enterprise security engagements.
Emerging players
- Sekoia.io: French cybersecurity SaaS provider offering an extended detection and response (XDR) platform and managed security services. Comparable as an emerging European alternative in SOC/MDR and managed detection.
Regional players
- Hub One: French managed services and cybersecurity provider focused on airports, logistics, and enterprise. Comparable as a France-based MSSP with overlapping security operations and consulting services.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key highlights7 records
Customer concentration
Oppidum Security social profiles
Digital presenceOppidum Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Oppidum Security leadership team
Management profileNumber of profiles
Profiles4 records
Oppidum Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Oppidum Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Oppidum Security
What does Oppidum Security do?
Oppidum Security is a French cybersecurity consulting firm that delivers specialized security services to enterprise clients, primarily targeting CISO/RSSI decision makers. Its core offerings include DMARC email authentication implementation, application penetration testing following OWASP methodology, and Microsoft 365/Azure security configuration and coaching. Supporting services include a SaaS log analysis platform for M365 and Azure AD, computer forensics and incident response, and judicial expert services.
Is Oppidum Security a public or private company?
Oppidum Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Oppidum Security founded?
Oppidum Security was founded in 2017. It employs 11 to 50 people.
Where is Oppidum Security based?
Oppidum Security is headquartered in La Défense, France, in the Europe region.
How does Oppidum Security make money?
Four revenue lines are on record. Penetration Testing Services are the primary driver. The others are DMARC Implementation and Email Security, microsoft 365 Security Consulting and computer Forensics and Incident Response.
Who are Oppidum Security's main competitors?
Direct peers on record are Wallix, Advens, XMCO and Devoteam. Broad incumbents are Orange Cyberdefense, Thales Cybersecurity, Sopra Steria and Capgemini Engineering (Cybersecurity). Sekoia.io is listed as an emerging player. Hub One is listed as a regional player.
Does Oppidum Security have an API?
No public API is recorded for Oppidum Security.
What industry is Oppidum Security in?
Oppidum Security's product category is Cybersecurity Consulting. Its primary akta.pro industry code is BPAKAHAA, Managed Security Services (MSSP) & 24/7 SOC Operations, with a secondary code of BPAEADAB, Security Operations Center (SOC) as a Service. Its NAICS code is 54169 and its SIC code is 7370.