Winthorpe Company

What Winthorpe Company does

Winthorpe Company SAS is a France-based cybersecurity, GDPR/RGPD compliance, and risk management consultancy that primarily serves French small and medium enterprises (PMEs/SMEs) and mid-sized companies (ETIs). Founded in 2016 and headquartered in Versailles under parent holding AMS Holding SAS, the firm operates a sales-led model combining direct expert accompaniment, content marketing, and an exclusive distribution arrangement with brokerage firm AMS Protect Assur (ORIAS 24003693) for cyber insurance. Its portfolio is organized around three pillars — Protection Cyber (subscription-based 24/7 monitoring, MDR, anti-phishing, crisis response, and bundled insurance), Conformité RGPD (external DPO services and data protection compliance), and Pilotage & Performance (risk consulting, regulatory audit, and data management) — unified under the Vigie Cyber subscription model for SMEs and ETIs. Delivery rests on certified expertise in EBIOS, ISO 27001, ISO 27005, and DPO, with no proprietary software platform disclosed; technology partners provide the underlying MDR, governance, and anti-phishing tooling.

The company monetizes through five revenue streams: monthly expert subscriptions (12-month minimum, auto-renew), project-based consulting and advisory work, IT solution resale, cyber insurance distribution via AMS Protect Assur, and professional training aligned with French labor code. Pricing is opaque, set in individual application contracts, with subscription billing in advance, audit billing 60/40 across project milestones, and a 1.5% SEPA direct-debit discount. The visible customer base is anchored by mid-market and enterprise logos across insurance (Covea, ProBTP, Predilife), healthcare/insurance (Qare), food/agriculture (PureSalmon), and construction/real estate (Asset); documented case studies describe data-direction work for an insurance company and production-line piloting for an industrial society. The firm is single-country (France), has 1-10 employees per firmographics, registers only €3,550 of share capital, has no disclosed institutional funding, and depends on Alexis Missoffe's editorial leadership, indicating a very early-stage, micro-cap operation with organic-only scale to date.

Name

Winthorpe Company

Legal name

WINTHORPE COMPANY SAS

Website

https://winthorpe-company.com

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

1–10 employees

Short description

Winthorpe Company SAS is a Versailles-based cybersecurity and GDPR/RGPD compliance consultancy delivering subscription-based cyber protection, external DPO services, and risk management consulting to French SMEs and mid-sized enterprises.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Cybersecurity & Identity Consulting (BPAHAEAG)

akta.pro secondary industries

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM)

Keywords

• Cybersecurity consulting
• GDPR compliance services
• Risk management advisory
• Data governance consulting
• Cyber insurance distribution

Headquarters

HQ city

Versailles

HQ country

France

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Supply Chain, Others

Revenue model

1. Expert Subscriptions: Monthly subscription services providing access to cybersecurity experts, IT licenses, and associated services. These subscriptions include expert accompaniment for cyber protection, GDPR compliance, risk management, and include bundled cyber insurance coordination. Subscriptions require a 12-month minimum commitment and are billed monthly in advance.
2. Consulting and Advisory Services: Professional consulting services including support, compliance assistance, and project management. These include services such as external DPO (Data Protection Officer) roles, audit services, risk management, and data management consulting. Consulting services are governed by specific application contracts with defined pricing, duration, and conditions.
3. IT Solutions Distribution: Distribution of third-party IT solutions developed by software publishers. Winthorpe acts as a reseller or distributor, with the solutions governed by the publishers' own contractual terms. Winthorpe declines responsibility for any malfunctions of these distributed solutions.
4. Cyber Insurance Distribution: Distribution of cyber insurance or cyber assistance contracts through the brokerage firm AMS Protect Assur. Winthorpe coordinates and pilots the insurance-related actions within its subscription framework but does not handle the direct billing or administrative management of the insurance, which is exclusively handled by AMS Protect Assur.
5. Professional Training: Professional training services compliant with French labor code Article L.6313-1, designed to enable individuals to acquire, maintain, or develop professional or cross-functional skills. Training is formalized through contracts specifying pedagogical objectives, target audience, evaluation methods, duration, and financial conditions. Training can be delivered in-person, remotely, or in hybrid format.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels4 records

Core offering

Winthorpe Company provides subscription-based cybersecurity protection (Vigie Cyber / Protection Cyber) and à la carte consulting services covering GDPR compliance (external DPO), risk management, regulatory audit, data governance/data management, and project/program leadership for French SMEs and mid-sized firms. Services are delivered by certified experts (EBIOS, DPO, ISO27001, ISO27005) and bundled with cyber insurance distributed through partner AMS Protect Assur.

Product overview

Winthorpe Company is a cybersecurity, data protection, and risk management consultancy offering an integrated portfolio of services primarily delivered through subscription models. The core offering is organized around three pillars: (1) Winthorpe Cyber / Protection Cyber — subscription-based cyber protection combining human expertise (EBIOS, DPO, ISO27001 certified professionals) with technology solutions (MDR, anti-phishing, governance tools) for prevention, monitoring, and crisis response; (2) Conformité RGPD — GDPR/data protection compliance services including external DPO roles; and (3) Pilotage & Performance / Conseil & Expertise — project management, risk consulting, audit, and data management consulting. The Vigie Cyber subscription model unifies these services as a comprehensive 360° offering covering anticipation, continuous protection, crisis management, recovery, and cyber insurance. The company also distributes a cyber insurance product through broker AMS Protect Assur, and publishes a cybersecurity white paper. All services are available à la carte or bundled in modular subscription packages designed for SMEs and ETIs.

Differentiator

Problem solved

Functional benefit

Products and services

• Winthorpe Cyber / Protection Cyber Subscription-based cyber protection service covering prevention, reaction, and assurance capabilities, including expert teams, IT security reinforcement, resilience planning, and compliance with NIS2, DORA, ISO27001, and TISAX standards. Combines certified human expertise with third-party technology solutions including governance, MDR, and anti-phishing tools.
• Vigie Cyber (Cyber Watch) Comprehensive cyber subscription service combining prevention, continuous protection and monitoring, crisis management, recovery, and cyber insurance; functions as a 24/7 externalized watch service tailored for SMEs and ETIs.
• Conformité RGPD (GDPR Compliance) GDPR/data protection compliance service with certified teams acting as external DPO or supporting existing organizations with data protection implementation, risk management, incident handling, consent management, and rights exercise, aligned with TISAX standards.
• Pilotage & Performance Project management and performance service supporting digital transformation, regulatory compliance, and strategic initiatives through programme/project leadership and PMO expertise, ensuring quality, cost, and timeline control.
• Conseil et Expertise — Management du Risque Consulting and expertise service covering risk management, regulatory audit and compliance, and end-to-end support from needs assessment through implementation of recommendations and action plans.
• Audit et Conformité Regulatory audit and compliance service helping organizations assess and meet their cybersecurity and data protection obligations.
• Data Management Data management consulting covering functional and applicative architecture, data mapping and flows, and data identification and exploitation. Supports data governance, data catalog implementation, and alignment of business and IT teams.
• Assurance Cyber (Cyber Insurance) Cyber insurance or cyber assistance contract distributed through broker AMS Protect Assur (ORIAS: 24003693), coordinated by Winthorpe within subscription packages to cover financial impacts of cyberattacks.
• Professional Training Services Professional training services designed to enable individuals to acquire, maintain, or develop professional or cross-functional skills, delivered in-person, remotely, or in hybrid format under formal training conventions specifying pedagogical objectives, target audience, evaluation methods, duration, and financial conditions.

Quantifiable outcome

• 60% of SMEs victim of a major cyberattack do not recover beyond 6 months
• +6 more outcomes

Named customers8 records

Segments5 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

One partnership is on record.

• AMS Protect AssurcoreChannel Partner/ Reseller/ DistributorAMS Protect Assur is a licensed insurance brokerage firm (ORIAS registration number: 24003693) that exclusively handles the distribution of cyber insurance and cyber assistance contracts offered by Winthorpe. Under this partnership, AMS Protect Assur manages all regulatory aspects of insurance distribution including billing, payment collection, and administrative management. Winthorpe retains responsibility for coordinating and piloting insurance-related actions within its subscription framework, particularly in case of incidents or required interventions. This partnership enables Winthorpe to offer integrated cybersecurity subscriptions bundled with insurance coverage.

Scale indicators3 records

Recent moves5 records

Expansion highlights5 records

Broad incumbents

• Thales Cybersecurity: Cybersecurity arm of Thales, providing consulting, managed services, and data protection solutions primarily to large enterprises and governments. Competes indirectly with Winthorpe in compliance and data protection services and increasingly targets French mid-market accounts under NIS2/DORA tailwinds.
• Stormshield: French cybersecurity vendor (subsidiary of Airbus) offering network and endpoint security products, with associated services for French SMEs and regulated industries. Comparable as a French-rooted cybersecurity provider, but operates as a product-led vendor rather than the consulting-led model Winthorpe uses.
• Orange Cyberdefense: Subsidiary of Orange Group and one of the largest cybersecurity services providers in Europe, offering MSSP, consulting, and threat intelligence across all customer segments. Overlaps with Winthorpe on cybersecurity and compliance services for French SMEs, but at vastly greater scale and as part of a telecom-portfolio offering.

Direct peers

• Advens: French cybersecurity pure-player headquartered in France offering managed security services, consulting, and compliance expertise to mid-market and enterprise clients. Most directly comparable to Winthorpe on French SME/ETI cybersecurity and compliance focus, though at significantly larger scale.
• I-TRACING: France-based MSSP and cybersecurity services firm offering SOC/MDR, incident response, and compliance services to mid-market and enterprise customers. Comparable to Winthorpe on managed detection/response and compliance advisory for French organizations.
• Almond Cybersecurity: French cybersecurity consultancy specialized in audit, advisory, integration, and managed services for mid-market and enterprise clients. Closely comparable to Winthorpe on cybersecurity consulting and compliance positioning in the French market.
• Wavestone: French-headquartered consulting firm with a substantial cybersecurity and digital trust practice serving mid-market and large enterprises across Europe. Directly comparable on cybersecurity advisory, risk management, and regulatory compliance services to French SMEs/ETIs.
• Hub One: French IT and cybersecurity services provider serving mid-market and enterprise clients, particularly in regulated industries like aviation and logistics. Comparable to Winthorpe on cybersecurity and managed services for French SMEs/ETIs, especially those in regulated supply chains.
• Nomios: European cybersecurity integrator and managed services provider with operations in France, delivering network security, SOC services, and compliance support. Comparable on cybersecurity services and French/European mid-market focus.
• Devoteam: European IT and cybersecurity consultancy with a strong French presence, providing managed security services, cloud security, and compliance expertise. Comparable to Winthorpe on SME-facing cybersecurity consulting and managed services, with much broader scale and geographic reach.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Winthorpe Company