Monitor your information system using advanced technological and human resources. The SOC analyzes information system behaviour to detect signs of cyber attacks, supervises the information system in real time 24/5, reacts as quickly as possible in the event of a cyber attack, and proposes corrective or improvement actions to adapt the defence model to the evolving threat.

View

Offer

Managed threat intelligence

Receive alerts and reports from exposure and CTI monitoring, including malware, groups and TTPs, through a Threat Intelligence Platform. The partner platform OpenCTI provides access to alerts, dashboards, digests and other functionalities. Exposure monitoring detects threats through asset exposure monitoring, data leak detection, credential protection and brand protection services.

View

Offer

On-demand intelligence

RFI tokens provide the opportunity to request OWN-CERT for various requests for information on cyber threats. Reports are forensic and include sources, timestamps, summaries and methodology details. Token acquisition lets you request OWN at your own pace, use a single framing phase, receive priority answers, provision needs over the year, add capacity on demand via Work Units and benefit from discounted and advantageous rates.

View

Offer

DORA Threat Intelligence services

For financial entities or service providers to financial entities, OWN supports the Threat-Led Penetration Test phase required by DORA regulations through a passive external reconnaissance study and a Cyber Threat Intelligence study. The study consists of a threat intelligence report, or Targeted Threat Intelligence Report, presenting threats, client exposure and test scenarios.

View

Offer

Sector report

A monthly or quarterly cyber threat report dedicated to companies in your sector, offering a focused view of the threats, campaigns, actors, techniques and malware that concern you. Reports include TTPs and Indicators of Compromise, PDF sector reports and STIX object flows, a focus on attacks, malware, actors and ransomware statistics, plus a sectoral dashboard covering sub-sectors. OWN also provides contextualized intelligence to support compliance with the intelligence, information collection and emerging threat analysis activities of ISO 27002.

View

Offer

Organizational & Physical

Identify differences between an organisation's practices and a reference framework. Organisational and physical audits are generally based on ISO/IEC 27002 Information Security, Code of Good Practice for Information Security Management. The standard presents 114 security measures across several themes intended to preserve the confidentiality, integrity and availability of an information system within a company.

View

Offer

Setup

Analyse the security configuration of equipment against a reference of good practices. The review is based on a configuration extraction performed manually by an administrator or automatically with a script. The objective is to determine whether the current level of hardening is consistent with the state of the art or company policy. References may include CIS, ANSSI, NIST or the audited organisation's internal standards. Examples include firewalls, server bases, application servers and database servers.

View

Offer

Source code

Complete source code analysis includes an automated review and a manual inspection of sensitive code portions, adding a business logic perspective that is not accessible to a machine. The review particularly examines authentication, session management, access rights and form processing. Code reviews follow the OWASP standard.

View

Offer

Architecture review

Analyse the construction of an infrastructure against its security needs and best practices. The review includes studying technical architecture files and network diagrams, interviewing operational staff responsible for the perimeter, and conducting operational checks and configuration reports for critical architecture elements. Example perimeters include PAI, PRC, cloud interconnection and Citrix.

View

Offer

Red Team

Simulate a group of attackers seeking to compromise an information system using advanced methods, including lateralisation and privilege escalation.

View

Offer

Cyber audit for SMEs and mid-sized companies

Carry out a global assessment of an organisation's level of risk through a technical and organisational review of its information system. This service may be eligible for subsidies, including cybersecurity diagnostics and Cyber PME. Support is tailored to current security issues.

View

Offer

RED TEAM support for DORA regulations

For financial entities and their service providers, this Red Team exercise supports the Threat-Led Penetration Tests required by DORA regulations. It is based on Threat Intelligence scenarios and targets production processes, systems and personnel of the audited entity. The Red Team complies with DORA regulations.

View

About

Hours and details

Defend your business against cyber threats with THREAT INTELLIGENCE from OWN. Anticipate attacks and protect your sensitive data now.

Business and professional services