Skip to content
ForenShield - forensic analysis and cybersecurity platformForenShield

Cyber services

Cybersecurity services in France: audit, pentesting & incident response

ForenShield supports SMBs, mid-market companies and local authorities: security audits, pentesting, bug bounty, ISO 27001/NIS2/GDPR governance, training and awareness, incident response. French, operational expertise tailored to every budget.

Talk to an expertSee our expertise
  • Active CSIRT lead
  • OSCP certified
  • On site or remote
  • Free quote

Typical deliverable

Engagement report

  • Executive summaryKey risks, without the jargon.
  • Ranked vulnerabilitiesBy severity and ease of exploitation.
  • Prioritized action planRealistic for your budget.
  • Teaching debriefYour teams understand and improve.

Expertise

Three areas of expertise, one point of contact

From strategic framing to penetration testing, every engagement aims at the same result: security that is measurable, understood by your teams and lasting.

Governance & compliance

Security strategy, risk management and long-term support to align security with your business.

Your organization needs to document its security policy, manage its risks and demonstrate compliance to regulators. ForenShield acts as an outsourced CISO or on a project basis to structure your cybersecurity approach.

Deliverables

  • ISO 27005 / EBIOS RM risk analysis
  • Information system security policy (ISSP)
  • Prioritized risk treatment plan
  • NIS2, ISO 27001, GDPR compliance support
  • Security dashboard and KPIs

Training & awareness

Tailored programs, hands-on workshops and exercises to upskill your teams.

According to the Verizon DBIR 2024, 68% of breaches involve a non-malicious human element: training your staff remains one of the best investments in cybersecurity. ForenShield designs programs tailored to your sector, your risks and your company culture.

Available formats

  • Phishing, ransomware and social engineering awareness
  • SOC / CERT training for technical teams
  • Cybersecurity crisis exercises (table-top)
  • Custom e-learning modules
  • Simulated phishing campaigns
Explore our training

Technical services

Audit, pentesting, bug bounty, incident response, digital forensics and system hardening.

Penetration tests, bug bounty, configuration audits, post-incident investigation: we work on your systems with a rigorous offensive approach and a clear, prioritized, actionable deliverable.

Types of engagements

  • Web pentest (OWASP Top 10, API, authentication)
  • Internal network and Active Directory penetration testing
  • Bug bounty - vulnerability hunting on your exposed assets, within an agreed scope
  • Configuration audit (servers, firewalls, cloud)
  • Incident response and Windows forensic investigation
  • Red Team - advanced attack simulation (APT)

How it works

How an engagement unfolds

A clear framework from the first call to follow-up: at every step you know what is being done, why, and what you will receive.

  1. 1

    Scoping

    A first conversation to understand your context, define the scope and goals, followed by a tailored quote.

  2. 2

    Engagement

    Audit, pentest or advisory work, on site or remote, following a proven and documented methodology.

  3. 3

    Debrief

    A readable report: executive summary, ranked vulnerabilities and a prioritized action plan, presented to your teams.

  4. 4

    Follow-up

    Support while you implement the recommendations, so the fixes hold over time.

Approach

Our approach

Concrete results, not jargon

Every report is written to be read: an executive summary for leadership, a prioritized action plan for technical teams, and realistic recommendations given your budget.

French field expertise

Engagements are led by an active CSIRT lead, OSCP certified: incidents handled in real conditions, on infrastructure comparable to yours.

Sized for SMBs

We know an SMB's cybersecurity budget isn't a large enterprise's. Our engagements are scoped to be affordable without sacrificing technical rigor.

Skill transfer

The goal isn't to create dependency. Every engagement includes a hands-on debrief so your teams understand the issues and can progress independently.

Sectors

Sectors we work with

ForenShield works with organizations of all sizes, from small businesses to mid-market companies and local authorities, across various sectors. Each engagement is scaled to your organization's real constraints.

  • SMBs (10 to 249 employees) and mid-market companies (250 to 4,999)
  • Local authorities & public institutions
  • Healthcare (clinics, hospitals, care homes)
  • Industry & OT/SCADA
  • Finance & insurance
  • Retail & e-commerce

Let's talk about your context

Operational expertise and a teaching approach: you leave with a realistic action plan, concrete recommendations and a clear view of your security priorities.

Request a free quoteDiscover Jérémy GOMES's background

First conversation with no commitment, free quote.

FAQ

Frequently asked questions

How much does a pentest cost for an SMB?

The cost of an SMB pentest varies by scope: between €2,000 and €8,000 excl. tax for a targeted audit (web app, internal network or Active Directory). ForenShield offers a free quote tailored to each context and budget.

What's the difference between a security audit and a pentest?

A security audit assesses your overall posture: policies, configurations, ISO 27001/NIS2 compliance. A pentest (penetration test) simulates a real attack to identify exploitable vulnerabilities. The two complement each other: the audit defines the scope, the pentest validates it under real conditions.

Do you offer bug bounty-style testing?

Yes, as a private bug bounty. Alongside pentesting, ForenShield hunts for vulnerabilities on your exposed applications, APIs and services, within a scope and rules of engagement agreed with you (written authorization, targets, exclusions). Every finding is reported with proof of exploitation, impact and the recommended fix.

Does ForenShield work with SMBs in France?

Yes. ForenShield delivers cybersecurity services on-site and remotely for SMBs, mid-market companies and local authorities across France. Each engagement is scaled to your organization's budget and operational constraints.

How can an SMB comply with NIS2?

The NIS2 directive (EU directive 2022/2555) imposes cybersecurity obligations on essential and important entities; in France it is transposed by the “Résilience” law, with a timeline set by ANSSI. ForenShield supports you on: risk analysis, security policy, incident management, supply chain and documentary compliance - building on the ISO 27001 framework.