WAVATEC

What WAVATEC does

Wavatec is an independent French cybersecurity consulting firm founded in 2009 and headquartered in Paris with a secondary office in Aix-en-Provence. The firm employs between 1 and 10 people and operates as a privately-held, bootstrapped boutique with no disclosed external funding, parent company, or investor base. Wavatec sells professional services and custom-built applications to enterprise clients, primarily CISOs and security teams, targeting fragmented security operations that are typically managed in spreadsheets and email.

The company's core product offering is a Ninox-based low-code 'ERP of Cybersecurity' — a suite of custom applications covering audit and penetration test tracking, EBIOS RM risk analysis, CSIRT and SOC activity management, NIST maturity model implementation, security-in-projects (ISP) integration, and Third Party Risk Management (TPRM) with cyber-insurance mapping and ERP integration. The underlying technology stack combines Ninox (NodeJS, MongoDB, React), open-source tools, and IaaS/PaaS infrastructure deployable on-premises, AWS, or Azure with custom WAF integration and RBAC/ABAC controls. Wavatec holds a Premium Solution Partner status with Ninox in France, one of the first such partnerships in the country, and uses this channel alongside direct enterprise sales to source and deliver engagements.

Wavatec's business model is professional services and managed services revenue on custom, quote-based multi-year contracts. Pricing is not publicly disclosed; the firm advertises an ROI guarantee of one full-time equivalent (ETP) time savings per six-person SSI security team. Revenue streams include cybersecurity consulting (penetration testing, security audits, risk analysis), Ninox implementation and custom development, TPRM managed services, and cybersecurity training. Customers are enterprise organizations in financial services, retail, cooperative, healthcare, e-commerce, and manufacturing sectors, including named accounts Migros and UP (formerly Crif). Go-to-market combines direct enterprise field sales, the Ninox partner ecosystem referral channel, and inbound consultation via website and phone contact.

Name

WAVATEC

Legal name

Wavatec

Website

https://wavatec.fr

Company type

Private

Founded year

2009

Operating status

Operating

Headcount range

1–10 employees

Short description

Wavatec is a French independent cybersecurity consulting boutique (founded 2009, 1-10 employees) that builds custom Ninox-based low-code applications — a Cybersecurity ERP and TPRM solution — for enterprise CISOs and security teams, complemented by penetration testing and risk advisory services.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Computer Systems Design and Related Services (54151), Other Computer Related Services (541519)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming Services (7371)

akta.pro primary industry

SIEM Platforms & Log Management (HDADAGAA)

Keywords

• Cybersecurity consulting
• Penetration testing
• Third party risk management
• Information systems security
• Low-code applications

Headquarters

HQ city

Vauvenargues

HQ country

France

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Cybersecurity Consulting Services: Independent consulting services including penetration testing, security audits, risk analysis, and cybersecurity strategy development. Services are delivered with integrated mini risk analyses to provide actionable recommendations.
2. Ninox Implementation and Custom Development: Custom application development and deployment using the Ninox low-code platform for cybersecurity management processes. Includes architecture design (HLD/LLD), UX/UI prototyping, and iterative agile development.
3. TPRM Solutions: Third Party Risk Management implementation services including custom questionnaire design, risk assessment framework integration, and ongoing monitoring solutions.
4. Cybersecurity Training and Awareness: Training programs for employees and external suppliers on cybersecurity best practices as part of TPRM services.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels3 records

Core offering

Wavatec is an independent French cybersecurity consulting firm that delivers custom low-code cybersecurity management applications (their "ERP of Cybersécurité") built on the Ninox platform, alongside Third Party Risk Management (TPRM) solutions and advisory services. Their offerings include penetration testing of key business processes paired with mini risk analyses, EBIOS RM and NIST methodology implementation, CSIRT/SOC operations tooling, and digital transformation advisory covering SI architecture, urbanization, and open-source/IaaS/PaaS infrastructure design.

Product overview

Wavatec is an independent consulting firm founded in 2009, present in Paris and Aix-en-Provence, specializing in cybersecurity and digital transformation. Their core product offering is a Ninox-based low-code 'ERP of Cybersécurité' platform that provides integrated applications for cybersecurity management, including audit/pentest tracking, EBIOS RM risk analysis, CSIRT/SOC operations, and Third Party Risk Management (TPRM). The TPRM solution enables organizations to assess and monitor third-party cyber risks through customizable questionnaires, evidence collection, and risk mapping, with integration capabilities to clients' existing ERP and SMSI systems. Complementing the software platform, Wavatec provides cybersecurity consulting services covering innovation strategy, systems architecture, and penetration testing.

Differentiator

Problem solved

Functional benefit

Products and services

• Wavatec Cybersecurity ERP (Ninox-based)

Quantifiable outcome

• 1 ETP (full-time equivalent) time savings per 6-person SSI team when implementing the Cybersecurity ERP

Named customers3 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

One partnership is on record.

• NinoxcoreTechnology or IntegrationWavatec is a Premium Solution Partner of Ninox in France, described as one of the first partners in the country. They build custom cybersecurity management applications on the Ninox low-code platform, adapting it for specific CISO needs including audit tracking, risk analysis, and TPRM. Ninox provides the underlying technology (NodeJS, MongoDB, React stack) while Wavatec delivers domain-specific customizations.

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Advens: French pure-play cybersecurity consulting firm offering SOC, GRC, and managed security services to enterprise clients. Directly comparable as a specialist French cybersecurity services provider with similar CISO-focused offerings, though larger in scale than Wavatec.
• Synetis: French cybersecurity consultancy specializing in GRC, security audits, penetration testing, and security architecture. Comparable to Wavatec in service mix (audit, risk analysis, pentest) and target customers (CISOs of mid-market and large French enterprises).
• Pr0ph3cy: French cybersecurity consultancy focused on penetration testing, red team operations, and risk analysis. Comparable as a small specialist firm offering pentest and security advisory to French enterprise clients.

Broad incumbents

• Sopra Steria Cybersecurity: Major European IT services group with a cybersecurity division serving large enterprise and public-sector clients. Comparable on TPRM, SOC, and security consulting offerings, with far greater scale and geographic reach than Wavatec.
• Orange Cyberdefense: European cybersecurity subsidiary of Orange, offering managed SOC, threat intelligence, and consulting services. Comparable as a French-headquartered provider of cybersecurity operations and risk services to enterprise CISOs, with substantially deeper resources.
• Wavestone: French management and technology consultancy with a dedicated cybersecurity and trust practice. Comparable in targeting French enterprise CISOs with risk management and security transformation engagements, though significantly larger.
• Devoteam: European digital transformation consultancy with a significant cybersecurity practice. Comparable in serving French enterprise clients on cybersecurity strategy and tooling, though broader in scope including cloud, data, and platform engineering.
• Sia Partners: International management and technology consultancy with a cybersecurity practice serving financial services and other regulated industries. Comparable in independent consulting positioning and CISO advisory work, with broader scale.
• Capgemini Invent / Cybersecurity: Global consulting and technology services firm with significant cybersecurity offerings. Comparable in serving large European enterprise clients on security transformation and TPRM, though operating at vastly larger scale than Wavatec.

Emerging players

• Sekoia.io: French cybersecurity SaaS company providing a SIEM/SOC platform with threat intelligence. Comparable in addressing CISO operational challenges with technology-driven solutions, though product-led rather than consulting-led like Wavatec.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights5 records

Customer concentration

• LinkedInlinkedin.com/company/wavatec

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about WAVATEC