EGERIE

What EGERIE does

EGERIE is a privately held French software company headquartered in Toulon that publishes an AI-powered cyber risk governance (GRC) platform for large enterprises and regulated organizations. Founded in 2016 and operating through EGERIE SOFTWARE SAS with 117 employees, the company combines compliance management across 120+ regulatory frameworks (ISO 27001, NIS 2, DORA, GDPR, SecNumCloud, HDS, NIST, 3CF) with cyber risk analysis, third-party risk management, and financial quantification using the FAIR methodology. The platform is organized around four integrated pillars — Compliance, Risk Analysis, Third-Party Risk Management, and Financial Quantification — and includes an AI-powered content engine (Egerie Content) that automates cross-framework mapping and overlap detection. Two core products, Egerie Risk Manager and Egerie Privacy Manager, are delivered via SaaS (cloud-hosted in France) or on-premise subscription.

The company monetizes primarily through recurring SaaS and on-premise subscriptions priced by user count and module selection, with annual or multi-year contract terms (up to 5 years) and 45-day payment terms. Additional revenue comes from professional services billed as fixed-fee time envelopes (man-days or work units, consumed within 3 months of contract signature) and tiered support services (Levels 1-3). The go-to-market combines an enterprise field sales motion with a 'Request a demo' conversion path and an Authorized Partner network providing Level 1 functional support. Marketing is content-driven (eBooks, webinars, blog, framework comparison tool) and emphasizes thought leadership in cyber GRC. The customer base exceeds 500 organizations, with named reference customers spanning banking (La Banque Postale), healthcare (MGEN, Hospices Civils de Lyon), defense (Dassault Aviation), retail (Decathlon), energy (Engie), telecommunications (Orange Cyberdefense), cloud (OVHcloud), transportation (Air France), and IT services (HCL).

EGERIE has no disclosed external funding rounds and operates without a parent company, suggesting organic growth financed internally. Source code intellectual property is protected through four registered deposits with the French Programme Protection Agency (APP), the earliest dating to 2013. Technology integrations extend the platform's reach into ITSM (ServiceNow), DevOps (Jira), and vulnerability management (Cyberwatch, Tenable). Recognitions include Gartner Cool Vendor in Cybersecurity (2023), Gartner Peer Insights presence, EBIQS Risk Manager recognition, and a Gartner Hype Cycle for Cyber Risk Management 2026 reference.

Name

EGERIE

Legal name

EGERIE SOFTWARE

Website

https://egerie.com

Company type

Private

Operating status

Operating

Headcount range

101–250 employees

Short description

EGERIE is a French SaaS company providing an AI-powered cyber risk governance platform that helps large enterprises and regulated organizations manage compliance across 120+ frameworks, quantify cyber risk financially via FAIR, and streamline third-party risk management.

Ownership category

akta.pro rank

Product category

Cyber Risk Governance Software (GRC)

NAICS

Software Publishers (5132), Computer Systems Design and Related Services (5415)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Governance, Risk & Compliance (GRC) Platforms (BPAEAPAA)

akta.pro secondary industries

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK), Risk, Controls & Governance (GRC) Platforms (FSAFAOAG), Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)

Keywords

• Cyber risk governance
• GRC software platform
• Regulatory compliance management
• Third-party risk management
• FAIR risk quantification

Headquarters

HQ city

Toulon

HQ country

France

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales

Revenue model

1. SaaS Software Subscription: Subscription-based right of access to EGERIE Risk Manager and/or EGERIE Privacy Manager delivered as a cloud-hosted SaaS application. Pricing based on number of users and modules subscribed. Billed at agreed periodic intervals (typically 45 days). Annual or multi-year contract terms with tacit renewal for 12-month periods (up to 5-year total duration).
2. On-Premise Software Subscription: Subscription for on-premise installation of the software, including access to evolutions and new major versions, plus support and maintenance services. One-year initial contract term. Also based on number of users and modules.
3. Additional/Complementary Services: Professional services including parametrage, configuration, installation support, adaptation, training, and integration services. Billed as a fixed-fee envelope in time units (man-days or work units), consumed within 3 months of contract signature. Any overage is billed additionally.
4. Support and Maintenance Services: Tiered support (Level 1 functional, Level 2 technical, Level 3 development). Included in subscription with designated user contact. Additional designated users can contact support at current rate. Phone support at +33 (0) 494 638 105, email ([email protected]), and Help Desk via MyEgerie Portal.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels9 records

Core offering

EGERIE sells a cyber risk governance (GRC) software platform, delivered as a SaaS subscription (cloud-hosted in France) or On-Premise installation. Its two core software products — EGERIE Risk Manager and EGERIE Privacy Manager — enable organizations to assess, map, and manage information-system risks, run privacy impact studies, and track compliance across 120+ regulatory frameworks (ISO 27001, NIS 2, DORA, GDPR, SecNumCloud, HDS, NIST, 3CF, RGS). The platform bundles multi-compliance management, third-party risk management, and FAIR-based financial risk quantification, with an AI engine ("Egerie Content") that automatically detects cross-framework overlaps.

Product overview

EGERIE offers a unified Cyber Risk Governance Platform comprising two core software products—Egerie Risk Manager and Egerie Privacy Manager—delivered via SaaS subscription or On-Premise deployment. The platform is organized around four integrated pillars: (1) Compliance management supporting 120+ frameworks including ISO 27001, NIS 2, DORA, GDPR, and SecNumCloud; (2) Risk Analysis for mapping and treatment planning; (3) Third-Party Risk Management for vendor assessment; and (4) Financial Quantification using FAIR methodology. An AI-powered component called Egerie Content automates cross-framework mapping and overlap detection. The MyEgerie Portal provides customer access to the software, documentation, support, and a shared resource library.

Differentiator

Problem solved

Functional benefit

Brands

• Egerie Platform: AI-powered cyber risk governance platform offering risk assessment, compliance management, third-party management, and financial risk quantification.
• Egerie Content
• MyEgerie
• EGERIE Risk Manager
• EGERIE Privacy Manager

Products and services

• EGERIE Risk Manager

Quantifiable outcome

• Reduce time spent on audits by up to 70%
• +4 more outcomes

Named customers10 records

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability2 records

Feature7 records

Partnerships

Two partnerships are on record, tiered core.

• ServiceNowcoreTechnology or IntegrationServiceNow integration. EGERIE's platform connects with ServiceNow to enable workflow automation between cyber risk management and IT service management. The integration is part of EGERIE's broader ecosystem of integration partners.
• Jira (Atlassian)coreTechnology or IntegrationJira integration. EGERIE's platform connects with Jira for issue tracking and project management. Enables risk and compliance action items to be tracked as Jira tickets, bridging GRC and engineering workflows.

Scale indicators2 records

Recent moves6 records

Expansion highlights5 records

Emerging players

• Vanta: Vanta is a fast-growing automated compliance platform initially focused on SOC 2/ISO 27001 for tech companies. While traditionally mid-market focused, it is expanding upmarket into enterprise GRC and represents an emerging competitive threat to EGERIE, particularly for framework automation use cases.
• LogicGate Risk Cloud: LogicGate Risk Cloud is a no-code GRC platform offering risk and compliance management with workflow automation. While smaller and more North-America-focused, it competes with EGERIE for mid-to-large enterprises seeking flexible, integrated GRC solutions.
• Drata: Drata is an emerging compliance automation platform for SOC 2, ISO 27001, and other security frameworks. It represents an emerging player with strong AI-native content and framework mapping capabilities that could eventually challenge EGERIE in multi-framework compliance, though currently more mid-market.

Direct peers

• OneTrust: OneTrust is a direct competitor in privacy, GRC, and trust intelligence, particularly for GDPR/privacy management where EGERIE's Privacy Manager competes. Both target large enterprises with multi-framework compliance needs; OneTrust has greater global brand recognition but EGERIE differentiates with FAIR-based financial risk quantification.
• MetricStream: MetricStream is an established GRC platform competitor offering IT risk, compliance, and cyber risk management. Like EGERIE, it serves large regulated enterprises with multi-framework requirements, making it a head-to-head competitor particularly in financial services and heavily regulated industries.
• RSA Archer (Regnology): RSA Archer is one of the longest-standing enterprise GRC platforms, now owned by Regnology, and directly competes with EGERIE on IT risk management, compliance, and third-party risk. Like EGERIE, it serves large regulated enterprises with multi-framework compliance needs, though typically at much larger customer scale.

Broad incumbents

• ServiceNow Integrated Risk Management: ServiceNow's IRM/GRC module is integrated into its enterprise workflow platform and competes with EGERIE for the same CISO/GRC buyer. ServiceNow's broader ecosystem (ITSM, SecOps) gives it distribution advantages; EGERIE even has a ServiceNow integration, indicating overlapping accounts and direct feature competition.
• SAP GRC: SAP GRC is an enterprise GRC suite integrated with SAP's broader ERP ecosystem. It competes for large multinational customers needing integrated finance, risk, and compliance, particularly in heavily regulated industries where SAP has strong installed bases that EGERIE could also target.
• Diligent (Galvanize/ACL GRC): Diligent's GRC platform (built on the acquired Galvanize/ACL technology) is a direct enterprise GRC competitor covering risk management, compliance, and audit. It targets the same board/CISO buyer as EGERIE but with a stronger North American footprint and broader governance product suite.
• IBM OpenPages: IBM OpenPages is a broad GRC platform from a major incumbent, competing with EGERIE in operational risk, IT governance, and regulatory compliance for large enterprises. IBM's larger sales reach and Watson AI positioning make it a credible broad incumbent threat, particularly for multinational accounts.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/egeriesoftware
• YouTubeyoutube.com/channel/UCNiBwf5eIJJJ-yPwFf8SrxA
• LinkedInlinkedin.com/company/egerie-software

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about EGERIE