V6protect
V6protect is a French SaaS cybersecurity company offering an integrated platform combining an AI-powered Web Application Firewall (WAF) with External Attack Surface Management (EASM), serving French SMEs, enterprises, and public-sector organizations with compliance modules for DORA, NIS2, and ISO standards.
- Company typePrivate
- Founded2018
- HeadquartersLe Bouscat, France
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What V6protect does
V6protect is a privately-held French SaaS cybersecurity company headquartered in Le Bouscat (Bordeaux), founded in 2018, that delivers an integrated web-application protection and vulnerability management platform. The platform unifies two core products — WAF & AI Protect, an AI/ML-driven Web Application Firewall that performs multifactor real-time analysis and auto-blocks DDoS, SQL injection, XSS, bots, and other OWASP Top 10 threats, and EASM (External Attack Surface Management), which continuously discovers, monitors, and scores exposed assets and vulnerabilities — augmented by a suite of modules including Security Score, Patch Management, CTEM, Pentest-as-a-Service (PTaaS), Tiers de confiance (trusted-third-party attestation), and dedicated compliance modules for DORA, NIS2, ISO 27001, ISO 27017, and GDPR.
The technical backbone combines a curated vulnerability database covering more than 300,000 vulnerabilities correlated with 100+ global sources (CVE, OWASP, NIST, CISA KEV) with prioritization frameworks (CVSS, EPSS, KEV, MITRE ATT&CK) and threat-intelligence-driven AI/ML detection. The company itself operates under ISO 27001 and ISO 27017 information security practices, with data hosted exclusively on French soil for sovereignty reasons and exemption from the U.S. Patriot Act. Onboarding is delivered via CNAME in under 15 minutes without infrastructure changes, and an MSSP/MSSP white-label program extends reach through managed security providers and ethical hacker partners.
Commercially, V6protect operates a hybrid GTM combining product-led growth (free trial, self-serve dashboard at dashboard.v6protect.io), enterprise field sales (demo-driven), and channel partnerships. Distribution channels include direct SaaS, OVHcloud Marketplace, the UGAP public procurement catalog, and an MSSP white-label network. Named customers include UGAP (government procurement), SADA Assurances (insurance), Central Achat Informatique Hospitalier (healthcare IT purchasing), and Dedalus (healthcare software). The company is positioned as a sovereign French alternative in a market dominated by U.S. cloud security incumbents, with active regulatory-tailwind exposure to DORA and NIS2 compliance mandates.
V6protect firmographics
Firmographics- Name
- V6protect
- Legal name
- v6Protect
- Website
- https://v6protect.fr
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- V6protect is a French SaaS cybersecurity company offering an integrated platform combining an AI-powered Web Application Firewall (WAF) with External Attack Surface Management (EASM), serving French SMEs, enterprises, and public-sector organizations with compliance modules for DORA, NIS2, and ISO standards.
- Ownership category
- akta.pro rank
V6protect industry classification
Industry- Product category
- Web Application Security
- NAICS
- Computer Systems Design and Related Services (5415)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Web Application Security (WAF, RASP) (HDADACAA)
- akta.pro secondary industries
- Penetration Testing Platforms (PTaaS) (HDADAHAG), Application Security Testing (SAST/DAST/IAST/SCA) (HDADACAC)
Keywords
Where V6protect is headquartered
LocationHeadquarters
- HQ city
- Le Bouscat
- HQ country
- France
- HQ region
- Europe
Offices1 record
Markets served
V6protect business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations
Revenue model
- SaaS Subscription: Subscription-based SaaS platform providing web application security protection. Customers pay for continuous vulnerability monitoring and WAF protection as a service.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free trial available |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels7 records
V6protect product offering
Product offeringCore offering
V6protect operates a cloud-native SaaS cybersecurity platform that combines an AI-powered Web Application Firewall (WAF & AI Protect) with External Attack Surface Management (EASM) into a single integrated solution. The platform continuously discovers and prioritizes vulnerabilities across exposed web assets, automatically blocks attacks in real time using machine learning and behavioral analysis, and provides compliance support for DORA, NIS2, ISO 27001 and French regulations. Complementing the core platform, V6protect offers CTEM, PTaaS, MSP/MSSP enablement with white-label reporting, and a trusted third-party security attestation service.
Product overview
v6Protect is a French SaaS cybersecurity platform that unifies web application protection into a single integrated platform combining two core products — WAF & AI Protect (AI-powered Web Application Firewall) and EASM (External Attack Surface Management) — with a suite of complementary modules. The platform automates vulnerability detection, real-time threat blocking, patch management, compliance reporting (DORA, NIS2, ISO 27001), and managed security services (MSP/MSSP, PTaaS, CTEM). All capabilities are delivered as a cloud-native SaaS solution accessible to organizations of all sizes, with no on-premises installation required.
Differentiator
Problem solved
Functional benefit
Products and services
- WAF & AI Protect AI-powered Web Application Firewall that analyzes requests in real time using machine learning, behavioral analysis, and contextual filtering, automatically blocking attacks such as DDoS, SQL injection, XSS, bots, and other OWASP Top 10 threats. Targeted at organizations running internet-exposed web applications and APIs.
- EASM (External Attack Surface Management) External Attack Surface Management solution that continuously discovers, monitors, and maps exposed web assets, subdomains, and third-party components. Detects vulnerabilities including CVEs, TLS/SSL issues, port exposure, and security misconfigurations through passive and active scanning.
- CTEM (Continuous Threat Exposure Management) Continuous Threat Exposure Management solution aligned with Gartner's five CTEM pillars (scope definition, discovery, prioritization, validation, remediation), providing real-time threat identification, exploitability assessment, and centralized remediation tracking.
- Pentest-as-a-Service (PTaaS) Penetration Testing as a Service combining automated vulnerability scanning with manual expert-led penetration tests, providing continuous monitoring, real-time alerts, and compliance documentation for web application security.
- MSP – MSSP (Managed Security Service Provider enablement) Managed service provider offering enabling IT experts, consulting firms, and ethical hackers to monitor and protect their clients' web applications over the long term through the v6Protect platform, with white-label reporting and unified dashboard management.
- Tiers de confiance (Trusted Third Party) Trusted third-party service allowing organizations to evaluate, monitor, and communicate the security level of web applications managed by third parties, including security labels and attestations.
- Conformité légale et technique (Legal & Technical Compliance) Compliance management module supporting ISO 27001, NIS2, DORA, and other regulatory frameworks, providing dashboards, automated alerts, and reporting to feed an Information Security Management System (ISMS).
- DORA Compliance Dedicated compliance module helping financial institutions meet Digital Operational Resilience Act (DORA) requirements including security testing, third-party risk management, continuous monitoring, and incident documentation.
- NIS2 Compliance Compliance module supporting NIS2 Directive requirements, covering continuous monitoring, dynamic analysis (DAST/OWASP Top 10), TLS/SSL auditing, access management via WAF rules, and compliance reporting for essential and important entities.
Quantifiable outcome
- WAF activation in under 15 minutes without infrastructure modification
- +2 more outcomes
Companies that use V6protect
Customer profileNamed customers4 records
Segments5 records
Ideal customer profiles5 records
V6protect technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability4 records
Feature8 records
V6protect partnerships and signals
Strategic signalPartnerships
16 partnerships are on record, tiered core and minor.
- UGAPcoreV6protect integrated into the UGAP public procurement catalog, enabling French government agencies and public institutions to purchase cybersecurity solutions through official procurement channels.
- OVHcloudcoreListed on OVHcloud Marketplace as a cybersecurity partner, providing integrated web application protection for cloud hosting customers.
- BPI FranceminorReferenced by BPI France and Wavestone as a recognized cybersecurity startup, enhancing credibility and market visibility.
- Campus Cyber Nouvelle-AquitaineminorPartner member of Campus Cyber Nouvelle-Aquitaine, participating in the regional cybersecurity ecosystem and initiatives.
- Alliance Confiance Numérique (ACN)minorMember of Alliance pour la Confiance Numérique, representing the digital trust sector and participating in industry working groups.
- Orange CyberdefenseminorPartner in the Orange Cyberdefense ecosystem, collaborating on cybersecurity solutions.
- Label France Cyber SecurityminorHolder of the Label France Cyber Security certification, demonstrating compliance with French cybersecurity standards.
- France RelanceminorParticipating in the France Relance plan for cybersecurity projects related to WAF and vulnerability management.
- Région Nouvelle AquitaineminorRegional partner supported by Région Nouvelle-Aquitaine for cybersecurity initiatives.
- Campus Cyber Made In EuropeminorEuropean-focused cybersecurity initiative partner.
- CanutminorPartner in the Canut cybersecurity network.
- Compagnie FiduciaireminorFiduciary company partner for cybersecurity services.
- DedalusminorHealthcare software company partner integrating cybersecurity solutions.
- NorevieminorPartner providing cybersecurity services.
- O2servicesminorIT services partner.
- Pentest PartnersNetwork of penetration testing partners and ethical hackers for manual security testing complementing the platform's automated scanning.
Scale indicators3 records
Recent moves6 records
Expansion highlights5 records
V6protect competitors and assessment
Company assessmentDirect peers
- Cloudflare: Cloudflare offers a globally distributed WAF, bot management, DDoS protection, and API security as part of its edge cloud platform. It directly competes with v6Protect's WAF & AI Protect and EASM offerings at every customer size, but at massive global scale.
- Imperva: Imperva's Web Application Firewall and Application Security platform provide WAF, API protection, RASP, and DDoS mitigation. It is a direct peer in the application and API security category, particularly in financial services and regulated verticals.
- F5 (NGINX App Protect): F5's NGINX App Protect and Distributed Cloud WAAP offer WAF and API security with advanced bot defense. Comparable to v6Protect in targeting app-layer protection and is a frequent competitor in regulated enterprise environments.
- Akamai: Akamai App & API Protector delivers WAF, bot mitigation, and DDoS protection at the edge, alongside Kona Site Defender. It competes head-on with v6Protect's web application protection stack and is a primary alternative for large enterprise buyers.
- Fastly: Fastly's Next-Gen WAF (powered by Signal Sciences) and edge cloud platform deliver real-time application security with DevOps-friendly deployment. Compares to v6Protect's CNAME-activated, low-administration WAF model.
- Detectify: Detectify provides External Attack Surface Management and crowdsourced vulnerability scanning. Closely comparable to v6Protect's EASM product, especially for continuous external asset discovery and prioritization.
Broad incumbents
- AWS WAF: AWS WAF is a managed web application firewall integrated into the AWS ecosystem, often bundled with CloudFront and Shield. It is the default incumbent for AWS-hosted customers and competes with v6Protect on price and ecosystem stickiness rather than feature parity.
- Tenable: Tenable Nessus and Tenable One deliver enterprise vulnerability management and exposure platforms. Competes with v6Protect's EASM and vulnerability prioritization capabilities, though as a much broader platform.
Emerging players
- Pentera: Pentera offers automated security validation and pentesting as a service, with continuous exposure validation aligned to the CTEM framework. Directly comparable to v6Protect's Pentest-as-a-Service (PTaaS) offering and CTEM module.
- Wallarm: Wallarm provides API security, WAF, and bot management as a unified cloud-native platform. Directly comparable to v6Protect's application and API protection focus with an AI-driven posture.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
V6protect social profiles
Digital presenceV6protect compliance and trust
Trust signalCompliance6 records
V6protect financial estimates
Financial estimateRevenue estimate
Valuation estimate
V6protect leadership team
Management profileNumber of profiles
V6protect funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
V6protect M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about V6protect
What does V6protect do?
V6protect operates a cloud-native SaaS cybersecurity platform that combines an AI-powered Web Application Firewall (WAF & AI Protect) with External Attack Surface Management (EASM) into a single integrated solution. The platform continuously discovers and prioritizes vulnerabilities across exposed web assets, automatically blocks attacks in real time using machine learning and behavioral analysis, and provides compliance support for DORA, NIS2, ISO 27001 and French regulations. Complementing the core platform, V6protect offers CTEM, PTaaS, MSP/MSSP enablement with white-label reporting, and a trusted third-party security attestation service.
Is V6protect a public or private company?
V6protect is a private company. It is classified as unknown and is currently operating.
When was V6protect founded?
V6protect was founded in 2018. It employs 11 to 50 people.
Where is V6protect based?
V6protect is headquartered in Le Bouscat, France, in the Europe region.
How does V6protect make money?
One revenue line is on record: saaS Subscription.
Who are V6protect's main competitors?
Direct peers on record are Cloudflare, Imperva, F5 (NGINX App Protect), Akamai, Fastly and Detectify. Broad incumbents are AWS WAF and Tenable. Emerging players are Pentera and Wallarm.
Does V6protect have an API?
Yes. v6Protect offers an API that enables easy integration with third-party software via JSON content. Users can also receive data directly via automated emails sent to configured email addresses.
What industry is V6protect in?
V6protect's product category is Web Application Security. Its primary akta.pro industry code is HDADACAA, Web Application Security (WAF, RASP), with a secondary code of HDADAHAG, Penetration Testing Platforms (PTaaS). Its NAICS code is 5415 and its SIC code is 7372.