01Orange Cyberdefense / SOC
RecurringManaged security services
Security operations run on your behalf 24/7 — SOC/MDR, managed EDR, firewalls, identity, backup, OT and cloud monitoring.
No security teamMonthly SLA
SOVEREIGN EUROPEAN CYBER DEFENCE SERVICES
Service catalogue
Twenty-one sovereign services. Three ways to contract.
Everything below is delivered by our European analysts against a written SLA. Recurring services renew annually; project services are fixed-price and fixed-duration; and each service maps directly to European regulations (NIS2, DORA, CRA, AI Act) and European market standards.
Showing 21 of 21 sovereign European services
02NIS2 / DORA Scope
ProjectAdvisory & gap assessment
Diagnosis against NIS2, DORA, CRA, AI Act and ISO 27001, ending in an executive report and a prioritised plan.
Newly in scopeFixed fee
03EU Board Advisory
RecurringvCISO / DPO as a service
A security or data-protection executive part-time — strategy, policy, and representing you before regulators and auditors.
Cannot recruit oneMonthly retainer
04ANSSI PASSI Aligned
ProjectOffensive security
Application, network, cloud, mobile and API testing, Red Team operations and DORA TLPT engagements.
Audit or insuranceScoped audit
05EU AI Act Art. 15
ProjectAI security testing
Red teaming for LLMs and AI systems — prompt injection, model extraction, agent abuse, training-data integrity.
Shipping AIPer engagement
06PRIS Forensic Standard
RetainerIncident response & forensics
Containment, eradication, recovery and court-usable forensic evidence with chain of custody.
Post-breachRetainer + Day rate
07ISO 27001 / SOC 2
ProjectCompliance & certification
ISO 27001, SOC 2 and regulatory files taken from gap to evidence pack to audit.
CertifyingFixed project
08NIS2 Art. 20 Hygiene
RecurringTraining, awareness & exercises
Phishing simulation, role-based training and tabletop exercises for boards and technical teams.
Every organisationAnnual per user
09MISP & CERT-EU
RecurringThreat intelligence & DRP
ENISA, CERT-EU, CVE, CISA-KEV and MISP fused and correlated with your own environment.
Targeted sectorsMonthly feed
10Zero Trust / NIST 800-207
ProjectSecurity architecture
Design and implementation of Zero Trust, segmentation, identity and cloud security architecture.
RebuildingScoped project
11Risk-Based VM
RecurringVulnerability management
Continuous discovery, prioritisation by real exploitability, and remediation tracking to closure.
Large estatesAnnual tier
12DORA Art. 11 Resilience
ProjectResilience & disaster recovery
Backup integrity, recovery testing and the DORA-grade continuity plan you can actually execute.
DORA scopeFixed project
13NIS2 Supply Chain
RecurringThird-party risk management
Assessing and monitoring the suppliers NIS2 makes you responsible for.
Long supply chainsMonthly tier
14EU SaaS Platform
LicenceCYRKIL SaaS platforms
AEGIS and the compliance automation platform, licensed directly.
Product buyersDirect licence
15Horizon Europe / EIC
PartnershipDeep-tech R&D & partnerships
Joint research with universities and EU programmes — Horizon, EIC, CIFRE.
Research partnersCo-funded
16YesWeHack Model / CRA
Managed PlatformBug Bounty & Coordinated Disclosure (VDP)
Legally safe vulnerability reporting intake channel, European ethical hacker triage, and pay-for-results bug bounty programs fulfilling CRA Art. 11.
Digital products / CRA scopePlatform + Triage SLA
17Orange Cyberdefense CTEM
RecurringContinuous Threat Exposure (CTEM & EASM)
Continuous automated reconnaissance of internet-facing assets, shadow IT, public cloud leakage, and real exploitability validation.
Expanding perimeterMonthly continuous feed
18SecNumCloud Datacentres
RecurringSovereign Cloud WAF & Anti-DDoS
Multi-terabit sovereign DDoS scrubbing and OWASP Top 10 API shielding hosted entirely in European Tier IV facilities with zero US CLOUD Act exposure.
Critical online platformsBandwidth + Clean traffic
19IEC 62443 / NIS2 Essential
Project / SLAOT / ICS & SCADA Cyber Defense
Passive industrial network inspection, IEC 62443 gap analysis, PLC baseline validation, and air-gapped threat detection for manufacturing and utilities.
Manufacturing & UtilitiesScoped audit + Sensor SLA
20TIBER-EU / DORA Art. 26
ProjectDORA Threat-Led Pentesting (TLPT / TIBER-EU)
Regulatory-supervised red teaming simulating advanced persistent threats (APT) for financial institutions under European Central Bank frameworks.
Banks & Financial entitiesStructured engagement fee
21ENISA Cloud Guidelines
RecurringSovereign Cloud Security Posture (CSPM & CIEM)
Continuous multi-cloud configuration auditing, least-privilege entitlement validation, and data residency enforcement for sovereign European cloud tenants.
Cloud-first enterprisesPer-cloud asset tier
European Standards & Benchmarks
European Market Alignment & Benchmarks
How CYRKIL Shield aligns with leading European standards and peers like Orange Cyberdefense and YesWeHack.
Orange Cyberdefense Parity
Continuous 24/7 sovereign SOC/MDR monitoring, CTEM exposure validation, and incident containment governed by strict European SLAs.
YesWeHack Model Alignment
Coordinated Vulnerability Disclosure (VDP) and crowdsourced Bug Bounty programs meeting CRA Art. 11 and NIS2 vulnerability management mandates.
100% Sovereign Data Residency
All telemetry, logs, and forensics remain in European Tier IV data centres under French & EU jurisdiction — zero US CLOUD Act exposure.
ANSSI & BSI Technical Rigour
Auditing, offensive testing, and forensic chain-of-custody procedures modelled on PASSI and PRIS state-grade standards.
Start with the gap assessment. It is the cheapest service here, it closes fastest, and it ends with a written picture of what an auditor would find. Most clients buy it first and then decide what else they need — which is the honest order, and also the one that works.
