Our services

Our services

Certification

Certification

The services offered cover the following areas:

ANSSI qualification:  SecNumCloud, PDIS, PRIS, PAMS, PVID

Product certification: VIGIK+, CB Scheme catégorie CYBR (based on IEC 62443, ETSI 303 645) 

Information security certification:  ISO 27001/27701, 22301, HDS, POS systems, ref CISPE

AI certification: ISO 42001, AI process certification (LNE standard)

The services offered cover the following areas:

ANSSI qualification:  SecNumCloudPDISPRIS, PAMS, PVID

Product certification:  VIGIK+CB Scheme catégorie CYBR (based on IEC 62443, ETSI 303 645)

Information security certification:  ISO 27001/27701, 22301,  HDSPOS systems, ref CISPE

AI certification:  ISO 42001AI process certfication (LNE standard)

Cyber lab

Cyber lab

BYCYB’s Cyber Lab meets new market requirements that call for customised analysis of systems and products.

Various types of tests and assessments can be carried out on demand:

Offensive assessment and Penetration test : from internal IT systems to embedded systems (black box, grey box, white box, red team)

– Vulnerability assessment and scanning

– IT, OT, IoT, web and connected product infrastructure

Code auditing and reverse engineering (web applications, mobile applications and heavy clients)

OT/industrial perimeter assessment: ICS, SCADA, C&C, PLC, etc.

IoT/embedded perimeter assessment: from low layers (electronics, RF) to exposed web applications

BYCYB’s Cyber Lab meets new market requirements that call for customised analysis of systems and products.

Various types of tests and assessments can be carried out on demand:

Offensive assessment and Penetration test: from internal IT systems to embedded systems (black box, grey box, white box, red team)

– Vulnerability assessment and scanning

– IT, OT, IoT, web and connected product infrastructure

Code auditing and reverse engineering (web applications, mobile applications and heavy clients)

OT/industrial perimeter assessment: ICS, SCADA, C&C, PLC, etc.

IoT/embedded perimeter assessment: from low layers (electronics, RF) to exposed web applications

Organisational cyber expertise centre

Organisational cyber expertise centre

  • Compliance with sensitive regulations for OIVs, EEs, EIs and major suppliers to these entities (II901/IGI1300/LPM/NIS2/DORA/GDPR)
  • Expertise related to ISO2700x and HDS compliance (internal audit, version transition expertise, etc.)
  • Expertise in risk analysis and management (EBIOS-RM, NIST SP800-30r1, STRIDE or SP800-154 threat models, ISO27005 process)
  • Expertise related to ANSSI standards (SecNumCloud, PDIS, GHI, RGS, CSPN, EUCC and other guides such as IS security certification)
  • Expertise related to compliance in industrial systems and connected devices (IEC62443, EN303645, EN18031/RED, Cyber Trust/FCC, CRA, FDA/US pre-market cyber requirements, RDM/EU cyber requirements, NMPA/China cyber requirements)

Technical cyber expertise centre

Technical cyber expertise centre

  • Hardening expertise using AD-type directories and operating systems (Windows Endpoint/Server, MacOS, Debian-based Linux and CentOS/RedHat)
  • Cryptography expertise: implementation review (RGS B1/B2, AIS31, SP800-90, etc.)
  • Physical security expertise (security information system certification, access control, video surveillance, intrusion detection, etc.) with/without ANSSI-type standards
  • Expertise in secure information system architecture, whether global or specific to a piece of equipment: firewalls, probes, bastions, SIEM, PKI, HSM, etc.

Training

BYCYB offers standard and tailor-made cybersecurity training courses.

These courses can also be delivered via the Qualiopi-certified LNE training centre.

They cover all sectors concerned by cybersecurity and are available on a range of topics:

BYCYB-DEV

Security in software development (available for web languages, C/C++, C#, etc.)

BYCYB-IoT

BYCYB-IoT

Security in radio/connected/IoT devices (regulatory/technical)

BYCYB-MED

BYCYB-MED

Security in medical devices (US/FDA, EU/MDR, China/NMPA requirements)

BYCYB-CRYPTO

Introduction to cryptography (technical fundamentals and state-of-the-art recommendations such as NIST/ANSSI)

BYCYB-HARDENING

Introduction to OS configuration hardening (Windows, MacOS, Linux) or AD

BYCYB-PHY

Introduction to physical security (regulatory/technical)

BYCYB-SECNUMCLOUD

Mastering the key issues of the ANSSI SecNumCloud standard

BYCYB-ISO27001

Mastering the key issues of the ISO 27001:2022 standard

BYCYB-IA

BYCYB-IA

Mastering the key issues of AI trust certification (ISO 42001)

Target sectors and markets

Target sectors and markets

Thanks to its diverse range of skills, BYCYB is able to address all IT professionals, manufacturers, producers of electrical and electronic equipment, embedded products, medical devices, etc.

Our knowledge of sector-specific regulations allows us to tailor all of our expertise to your specific issues or needs.

Medical
Industry/Energy
Defence/Security
Banking / Insurance
Transport
Hospitality / Services

Some figures

Some figures

+ 400

Clients from all sectors of activity

25

Employees

2 M€

In turnover

+ 20 % 

Growth in 2024

1 000

Audit days per year

50

Training days per year

LNE Group

The LNE, a leading player in product safety, is an internationally recognised testing and certification body. It has been involved in cyber certification since 2015 and was one of the first organisations to be appointed by ANSSI. 

CRYPT.ON IT

Founded in 2019, CRYPT.ON IT is a pure cyber player specialising in cutting-edge issues in the field (cryptography, IoT, ANSSI standards, physical security, infrastructure hardening).