The security expertise of a large enterprise. Without hiring for it.
Our pentesters, SOC analysts and consultants work with your IT team, which stays in charge. From €5.80 excl. VAT per user per month (€100 minimum).
Who it is for
Leadership
Your IT contact
in-house or at your IT provider
Security
DMC DEFENSE
Your security backup
Your users
from 10 Microsoft 365 accounts
Attackers do not sort by company size
According to ANSSI, France's national cybersecurity agency, ransomware attacks are opportunistic and do not pick a sector. Among the cases reported to it, SMEs and mid-caps are the most affected category.
128 ransomware compromises were reported to ANSSI in 2025. These are reported cases, not every attack.
Four parties already ask you for proof
For each one: what is asked, and what answers it.
Your large customers
What is asked
A security questionnaire, backed by documents. NIS2 requires the companies it covers to secure their supply chain, so they question their suppliers.
What answers it
- PSSI
- a written security policy to attach to the questionnaire
Your insurer
What is asked
When you sign up, a questionnaire on your protection measures: if they are judged insufficient, the insurer may refuse to cover you. The contract then sets cybersecurity obligations you must meet, such as regular backups and updates. After an attack, compensation requires a police complaint filed no later than 72 hours after you discover it.
What to check before signing up (France Assureurs, in French) (new tab)French Insurance Code, art. L12-10-1 (Légifrance, in French) (new tab)
What answers it
- SOC
- monitoring in place, and an alert with what the analyst found if an attack happens
- PSSI
- a written security policy, including its logging policy and backup rule
Regulation
What is asked
NIS2 covers several thousand entities across 18 sectors in France, mostly medium and large companies, local authorities and administrations. If you are one of them: security measures, an assessment of how well they work, and an alert to ANSSI within 24 hours of a significant incident.
Test your entity's eligibility (ANSSI, in French) (new tab)Where the French law stands
What answers it
- Pentest
- assess how well your measures work
- SOC
- spot the incident in time to alert ANSSI
- PSSI
- the written policies: risk, access, backups, logging
The CNIL
What is asked
The GDPR applies to every company, whatever its size, as soon as it handles customer or employee data. It requires you to protect that data, plan regular tests of how well your measures work, and report a breach to the CNIL, the French data protection authority, within 72 hours.
GDPR, art. 32 and 33 (CNIL, in French) (new tab)
Examples of fines
In December 2025, the CNIL fined a software vendor EUR 1.7M for leaving unfixed flaws that its own audits had found. In 2025, 14 organisations were fined for weak passwords or shared accounts. The ceiling: EUR 20M or 4% of turnover.
The EUR 1.7M fine (CNIL, in French) (new tab)The 2025 sanctions report (CNIL, in French) (new tab)
What answers it
- SOC
- spot a breach so you can report it in time
- PSSI
- the GDPR roadmap, delivered with the policy
ANSSI, Panorama de la cybermenace 2025 (in French), p. 10 (new tab)
Three offers, in this order: assess, monitor, frame
You can take just one. They reinforce each other: the test reveals the flaws, monitoring keeps watch, and the security policy writes the rules meant to keep them from coming back.
Pentest
See your systems the way an attacker would
Our pentesters test the scope defined with you: your website or web application, your network exposed to the Internet.
100+ CVEs and fixes to the credit of our pentesters, on real vulnerabilities.
From
€4,000 excl. VAT
For a web application, per engagement. The final price depends on the scope, set at scoping.
What you receive
- Scoping
- Scope, objectives and rules of engagement agreed with you before the first action.
- Report
- Each flaw scored with CVSS, with evidence.
- Plan
- Prioritized recommendations: your team knows where to start.
Our commitments
< 15 min
to detect
2 to 4 wks
to be operational
1 month
notice, no lock-in
Handled in under 30 minutes with SOC Standard.
24/7 SOC
Your Microsoft 365, watched day and night
Our SOC runs on the Microsoft security stack, so you need a Microsoft 365 environment. We spot abnormal behavior, alert your IT team and fix the vulnerabilities in your Microsoft 365: we apply the fix, or we hand it to you ready to apply. An expert validates every fix; your team stays in control.
Microsoft certifications SC-100, SC-200, AZ-500 and SC-300 held within the team, on the stack we monitor for you.
What the SOC costs at your size
Number of users
From €5.80 excl. VAT per user per month, no commitment, minimum €100 excl. VAT per month and 10 users. Microsoft licenses are extra. From Standard, Sentinel ingestion is included up to €2 excl. VAT of Azure consumption per user per month; beyond that, it is rebilled at cost, after your approval. On Basic, Sentinel is an option billed by Azure; Lighthouse adds no Azure cost. SOC setup is included. For an exact quote: the SOC price simulator.
SOC Basic
Monitors Microsoft 365, at the leanest price
€290
excl. VAT per month
€5.80 excl. VAT / user / month
SOC Standard
Monitors your whole estate and hunts threats
€750
excl. VAT per month
€15 excl. VAT / user / month
SOC PremiumRecommended
We tune your security, you stay in control: all of Standard, plus a personalized roadmap and configuration of your Microsoft 365 security
€1,500
excl. VAT per month
€30 excl. VAT / user / month
PSSI
Write your company's security rules, with you
By video call with your team, 20 to 30 h of work. It is consulting, and it depends on no vendor.
Risk analysis follows EBIOS RM, the ANSSI method: your rules start from your real risks.
Price
€7.5–20k excl. VAT
The whole engagement, depending on your scope.
If you also take the SOC
- With a 12-month SOC commitment: 25% off with SOC Basic, 50% with SOC Standard, 75% with SOC Premium.
- That is from €1,875 excl. VAT with SOC Premium.
The format
- Steps
- 7 steps with indicative durations, led by Julien, our co-founder.
- Duration
- 10 to 12 weeks.
- Deliverables
- The PSSI, an IT acceptable use policy, a GDPR roadmap, a prioritized action plan, an obligations matrix.
How we get started
Three steps, with no commitment until you have an exact price.
Free audit
Reply within 24 business hours
An expert reads your request and gets back to you. We assess your exposure and your prerequisites.
Scoping and price
No commitment
We set the scope, the right offer and an exact price. You decide afterwards.
Deployment
SOC: 2 to 4 weeks
The penetration test and the PSSI start on the agreed date.
What we need from you, and what you keep
What you need
- An IT contact: a security manager, a technician or your IT provider.
- From 10 to 5,000 users.
- For the SOC: Microsoft 365 Business Premium, E3 or E5, and an administrator access.
Without Microsoft 365, we do not sell a SOC. The penetration test and the PSSI work with any system.
What you keep
- Your users
- We do not provide user support: your IT team or your IT provider stays their first contact.
- Your data
- It stays in your tenant, in your region, with no copy on our side.
- Our access
- We work with delegated rights that you can revoke.
Frequently asked questions
Yes: the SOC serves teams of 10 to 5,000 users, on Microsoft 365, with an IT contact, in-house or at your IT provider. It starts at €5.80 excl. VAT per user per month, with no commitment and a minimum of €100 excl. VAT per month. The free audit gives you an exact price.
Not by default: the monthly SOC ends with one month's notice, and your data, detection rules and playbooks stay in your tenant. You can also commit for one or two years for 10% or 20% off; if you terminate early, the remaining months to term are due. The penetration test and the PSSI are one-off engagements, billed per engagement.
An analyst handles it, at no extra charge, within your tier's response times: under 30 minutes on SOC Standard. Your IT team is alerted and keeps control of the decisions. Recovery after a major incident is quoted separately.
A free audit to know where to start.
After you send it
Reply within 24 business hours
An expert reads your request and gets back to you to qualify your need.
Free audit
On Microsoft 365: a one-hour audit of your tenant's posture (Secure Score, identities, Defender) and your priority flaws. Otherwise: we scope your need (pentest, security policy) and set the price. No commitment.
Dedicated contact
The same DMC expert follows you end-to-end, with no call-center in between.