Cyberattack? TYSCO responds.
Complete remediation, 100 % handled in-house, with no subcontracting — SMEs, associations, local authorities and public bodies.
- Home
- Cyber Remediation
Our remediation services
End-to-end response, from A to Z
Forensic analysis
Identification of the attack type, initial entry vector and exact scope of compromise across the information system.
Containment & eradication
Immediate isolation of affected systems, removal of malware, backdoors and malicious persistence installed by the attacker.
Access control recovery
Revocation and rotation of compromised credentials, strong authentication (MFA) reinstatement, privileged account audit.
System restoration
Rebuilding from verified clean backups, integrity testing, secure return to production with full functional validation.
Post-incident hardening
Reconfiguration of firewalls, EDR, SIEM rules, network segmentation policies and priority patches.
Full incident report
Structured document usable by management, ANSSI, CNIL, cyber insurers and relevant authorities.
Crisis cell & follow-up
Single point of contact throughout the crisis, post-remediation follow-up at 30, 60 and 90 days.
Our intervention protocol
7 structured phases, timelines controlled from the first hour
Qualification
< 2h after report
Containment
< 4h
Forensic investigation
D+1 to D+3
Eradication
D+2 to D+5
Restoration
D+3 to D+7
Hardening
D+5 to D+10
Report & follow-up
By criticality
Qualification
< 2h after report
Containment
< 4h
Forensic investigation
D+1 to D+3
Eradication
D+2 to D+5
Restoration
D+3 to D+7
Hardening
D+5 to D+10
Report & follow-up
By criticality
We respond for
SMEs & VSBs
Deep expertise in Windows SME environments, Active Directory, NAS, Microsoft 365 messaging. Rapid response adapted to the budget and operational constraints of smaller structures.
- Windows Server & Active Directory environments
- NAS, Microsoft 365 and hybrid messaging
- Response adapted to SME budgets
- Full remediation without subcontracting
- Post-incident support and hardening
Local authorities
Knowledge of public IT systems: multi-domain Active Directory, sovereign messaging, public sector software, RGS and NIS2 compliance, ANSSI and CNIL notification assistance.
- Multi-domain Active Directory and sovereign messaging
- Public sector software (Berger-Levrault, Civil Net Finances…)
- RGS compliance and NIS2 directive
- ANSSI and CNIL notification assistance
- Report transmissible to elected officials and the Prefect
Public bodies
Intervention aligned with ANSSI, RGS and NIS2 frameworks. Structured report transmissible to the DGS, elected officials, the Prefect and competent authorities.
- Aligned with ANSSI and RGS frameworks
- NIS2 directive compliance
- Report accepted by public authorities
- Transmission to DGS, elected officials, Prefect
- Documentation meeting judicial requirements
Non-profit organisations
Tailored support for associations, often under-equipped against cyber threats. Adapted pricing, complete remediation without subcontracting.
- Free initial assessment for registered non-profits
- Pricing adapted to non-profit structures
- Full remediation without subcontracting
- CNIL notification assistance if required
- Post-incident awareness for volunteer teams
Our technical capabilities
ShelterX
Proprietary AI hybrid firewall appliance. Deployable as a replacement for a compromised device in under 2 hours on site. Application filtering, network behavioural detection, C2 traffic blocking.
ShelterX EDR
Proprietary EDR with advanced behavioural detection. Centralised remediation across 10+ assets simultaneously from a single console. No subcontracting.
Compliance
Every intervention is documented and compliant with RGS, NIS2 and GDPR requirements. Report usable by ANSSI, CNIL, cyber insurers and judicial authorities.
Coverage area
Priority on-site
Île-de-France, French overseas territories, Occitanie and neighbouring regions
National deployment
On-site within 24 to 48 hours anywhere across metropolitan France
Immediate remote
Encrypted secure tunnel, anywhere in France, without delay
An incident is under way?
Every minute counts. Contact us immediately.