C Y B E R S E C U R I T Y

(1)

(2)

The HexaTrust club was founded in 2013 by a group of French SMEs that are complementary players with expertise in information security systems, cybersecurity and digital trust. Representative of French excellence in innovative solutions, these software vendors and Integrators have come together to provide a full range of efficient and consistent products and services dedicated to the security of critical infrastructures. This combination meets the needs of enterprises, administrations, public and private organizations of all sizes, keen to receive European and French innovative offers, covering all their IT security needs.

Building on their presence on the European market, HexaTrust members also want to accelerate their international development by sharing their experience, their networks and means of access to global markets.

HexaTrust act in close cooperation with professional organizations, users and institutional actors, working to strengthen the chain of Cybersecurity and Digital Trust groups, supporting the development of innovation and growth SMEs, future leaders of information security systems.

(3)

Values &

Commitments

The core values of the club, based on five founding

commitments are:

Innovation, Union, Action

Commitment #1

To facilitate exchanges and synergies among European

and French software vendors and security services

companies.

Commitment #2

Promote and market a portfolio of innovative products

and services, offering broad-spectrum coverage of risks

for the protection of critical and vital infrastructures.

Commitment #3

Develop and promote the skills and expertise of

innovative French SMEs positioned on the information

security systems, digital trust and cybersecurity markets

to major private and public customers.

Commitment #4

Encourage access to foreign markets through the

organization of targeted joint marketing and business

activities.

Commitment # 5

Be the spokesperson for the French SMEs positioned on

the markets of information security systems, digital trust

and cybersecurity and act in act in coordination with

public and private organizations representing users,

professionals and governmental institutions.

(4)

Bertin IT

BERTIN TECHNOLOGIES (HQ)

10 bis, Avenue Ampère - 78180 Montigny-le-Bretonneux • FRANCE Tel.: +33 (0)1 39 30 62 50

Email: [email protected]

www.bertin-it.com

• PolyXene® :EAL 5 certified high security hypervisor for protecting workstations, mobile devices and network

• WhiteN® :USB threats neutralizer, standalone or connected to the infrastructure

• MediaCentric® :open source contents advanced processing platform for preventing cyber threats, monitoring for vulnerabilities and fighting against cyber criminality

• MediaSpeech®:automatic speech-to-text multilingual solution for indexing and analyzing audio & video contents

Department of Bertin Technologies, Bertin IT designs and provides software solutions that meet the highest demands for information security and multimedia multilingual content processing. Its offer covers the security of sensitive information systems and critical infrastructures, and the deep analysis of multimedia multilingual open source data (Web, TV, radio) for OSINT and crisis management.

BERTIN IT'S PRODUCTS

HIGH ASSURANCE • EAL 5 • SECURE VIRTUALIZATION THREAT DETECTION • EARLY WARNING

(5)

Brainwave

BRAINWAVE (HQ)

38-42 rue Galliéni – 92600 Asnières-sur-seine • FRANCE Tel.: +33 (0)1 84 19 04 10 • Fax: +33 (0)1 84 19 05 01

www.brainwave.fr

Installed on top of legacy provisioning systems or as a standalone application, it enables your organization to achieve sustainable compliance and empowers your business people with the tools needed to effectively manage their users. The Brainwave solution brings you a 360° view of all you users and their granular permissions. Its patented analytics engine automatically highlights all abnormal situations, thus helping you reducing fraud risks and data leakage risks. Brainwave is installed in days, it is connector less, it provides more than 200 reports out-of-the-box, and provides production ready remediation workflows and access-recertification workflows.

Brainwave is a leader in fraud, data leakage and cyber espionage risk analysis.

Excessive access rights, removal of access privileges, seggregation of duties are the top 3 problems found when external audits are made. They are at the source of huge fraud problems and data leakage problems. Brainwave solve this problem with an innovative analytics solution. Brainwave has been named Gartner Cool Vendor 2013, Brainwave Identity GRC is distributed through a network of consulting partners across Europe, Africa, Canada and the US.

BRAINWAVE PRODUCT

• BRAINWAVE Identity GRC

ACCOUNTS REVIEW •DATA QUALITY •SEGREGATION OF DUTIES • COMPLIANCE •ENTITLEMENTS CATALOG

(6)

DenyAll

DENYALL FRANCE (HQ)

6, avenue de la Cristallerie, 92310 Sèvres • FRANCE Tel.: +33(1) 46 20 96 00

Fax: +33(1) 46 20 96 02

www.denyall.com

DenyAll is a European software vendor, an expert in next generation application security, building on 15 years of experience securing web applications and services.

The company grows organically and expands its portfolio through acquisitions such as VulnIT, a vulnerability management vendor, in July 2012 and BeeWare, another leading web application security vendor, in May 2014.

DenyAll counts more than 600 customers around the globe. Their specific needs in application security are covered by its comprehensive range of solutions which, • Detect ITvulnerabilities,

• Protectinfrastructures against modern attacks targeting the application layer,

• Connectusers to the applications which allows them to create and share information,

• Manage your security policies and get detailed logs and security alerts. The company leverages an ecosystem of value-added resellers, outsourcers, hosters and cloud providers.

WEB APPLICATION FIREWALL • VULNERABILITY SCANNER • VIRTUAL PATCHING • APPLIANCES

(7)

Ercom

ERCOM (HQ)

Bâtiment Emeraude, 6, rue Dewoitine 78140 Vélizy-Villacoublay • FRANCE Tel.: +33 (0)1 39 46 50 50 • Fax: +33 (0)1 39 46 25 25

www.ercom.com

Ercom proposes CRYPTOSMART, a high-end solution to secure all mobile communications for corporations, administrations and governments.

CRYPTOSMART is approved for Restricted Communications. It is well suited to address the key challenges governments and corporations face in the mobile environment: eavesdropping, network attacks, lost/stolen terminal, etc. CRYPTOSMART is compatible with best of breed smartphones, tablets and PC. Its high end security come from the use of a certified secure element in the handset. That is the reason why many governments and corporations trust us for their mobile security

• Trust & Independence • Common criteria certifications • Ease of use

• Of the shelf terminals

(8)

TheGreenBow

THEGREENBOW (HQ)

28, rue de Caumartin - 75009 Paris • FRANCE Tel.: +33 (0)1 43 12 39 37

www.thegreenbow.com

SECURITY SOFTWARE • VPN • EMAIL ENCRYPTION CRYPTO IPSEC PRIVATE PRIVACY • SECURE REMOTE ACCESS

TheGreenBow VPN client is a leading VPN client and has achieved Common Criteria EAL3+ certification. Our VPN client is platform, multi-protocol, highly scalable, compatible with virtually all VPN Gateways and translated in 25+ languages.

CryptoMailer is certainly the most versatile and universal end-to-end email encryption solution available. Protecting your privacy has never been easier. True end-to-end encryption. Keep your private data safe.

TheGreenBow • Trusted communications

TheGreenBow specializes in building highly reliable and ergonomic data encryption products.

TheGreenBow products are designed to protect confidential data from unauthorized access. Our product line includes a world-leading VPN client and a revolutionary email encryption solution.

(9)

Idecsi

IDECSI (HQ)

19-21 allée du parc de Garlande, 92220 Bagneux • FRANCE Tel. : +33 (0)9 53 72 44 91

www.idecsi.com

Idecsi has created an essential innovation that is totally dedicated to mailbox protection for Top managers, Key People and Executive Board members.

How can you be sure that no one reads your email ?

The Idecsi innovation has been built thanks to a main and simple observation: there is a digital source that contains some of the most sensitive information of a company: the top managers' mailboxes, where their emails as well as all their contacts and schedule information are stored. Paradoxically enough, this source still has 3 major weaknesses that no system has been able to cover yet: Indiscretion, be it malicious or caused by staff. Identity theft and abusive use of personal passwords. Access to mailboxes by means of a hack or a robot (made easier by the BYOD risk).

IDECSI ACCESS ANALYZER ®

works like an intelligent alarm system which alerts you immediately in case of malicious access to mailboxes, whatever the means used to access them. Designed for Top Executives, the solution is completely transparent for the protected persons (no additional constraints). It is neutral for IT Systems. It is neither intrusive nor disruptive. It is easy to install (less than 4 hours). Idecsi is a French company. It is the result of 24 months of R&D and it relies upon worldwide patent protection.

(10)

Ilex

ILEX (HQ)

51, boulevard Voltaire - 92600 Asnières-sur-Seine • FRANCE Tel.: +33 (0)1 46 88 03 40

Fax: +33 (0)1 46 88 03 41

www.ilex-international.com

• Sign&go:Strong Authentication, Access Management, Global SSO (Web Access Management, and Enterprise SSO) and Iden-tity Federation,

• Meibo:Workflow, Provisioning and Identity Management, • Meibo People Pack:a turn-key solution for enterprise employee lifecycle management,

• IDen Park:Card Management System (PKI).

ILEX is a software provider specializing in IAM (Identity & Access Management).

Provider to most of the blue chip companies, throughout the past 20 years Ilex has developed proven expertise in data access control and the management of identity and rights repositories. In its last IAM reports, Gartner ranks ILEX as one of the top vendors of this market.

ILEX PRODUCTS

IAM • IDENTITY MANAGEMENT • ACCESS MANAGEMENT IDENTITY FEDERATION • SINGLE SIGN-ON • ROLE MANAGEMENT STRONG AUTHENTICATION • CARD MANAGEMENT • COMPLIANCE

(11)

InWebo

IN-WEBO TECHNOLOGIES (HQ)

3, rue Montyon - 75009 PARIS • FRANCE Tel.: +33 (0)1 46 94 68 38

www.inwebo.com

In-Webo provides frictionless 2-factor authentication and online transaction sealing that protects digital identities, thereby protecting your business in a connected world.

In-Webo enables easy, massive and on-time rollout with its highly secure tokens. Its unique, patented and certified technology uses dynamic keys. Turn your laptop, tablet, phone or smartphone, TV into a 2-factor authentication and align your security with your business requirements whether you are a business, a service provider or a SaaS vendor ! We are your “last mile” partner for your IT infrastruc-ture security.

IN-WEBO PRODUCTS

• In-Webo offers global online service to make the authentication agile and easy for the user but also for the IT team: HSM based servers, automatic provisioning, flexible management, several flavors of tokens including mobile, browser token, in-app tokens, and a password manager.

2-FACTOR AUTHENTICATION • TRANSACTION SEALING IDENTITY FEDERATION • BRING-YOUR-OWN-TOKEN

(12)

ITrust

ITRUST (HQ)

BAT ACTYS/1 - 55 l’Occitane - 31670 Labège • FRANCE Tel.: +33 (0)5 67 34 67 80

www.itrust.fr

ITrust, French solution editor offers its expertise in cyber security services and innovative technology solutions in the European market. We cover all the market safety issues, both organizational 27001 EBIOS, HDS, HIPAA, PCI, isae3402, technical, legal and physical (data center audits). The expertise and experience of our engineers, developers, and consultants have convinced us that our clients' level of security can be greatly improved by well designed tools, simple and efficient, ergonomic. Our tools and services incorporate the best of current technology.

ITRUST PRODUCTS

Ikare, vulnerability scanner:Ikare automates the implementation of the best practices in security and vulnerability management. The tool provides both a simple solution for network monitoring, as well as easy management and control of key safety factors.

Dashboard:To assess the compliance of the overall security of the company according to the good practice guide ANSSI and / or in the company's security policy.

IT-tude, behavioral analysis:IT-tude automatically analyzes the behavior of information systems and search for weak signals in the vast amount of data generated by the servers, applications, databases, network equipment and security. It identifies very precisely security flaws than a dozen (and much more) to regularly encountered security problems.

VULNERABILITY SCANNER

(13)

Netheos

NETHEOS FRANCE (HQ)

1025, avenue Henri Becquerel - 34 000 Montpellier • FRANCE Tel.: +33 (0)9 72 34 11 80

www.netheos.com

T R U S T A N D P R I V A C Y

Netheos is the specialist in secure paperless transactions and contracts on smartphone and tablet.

Netheos enables financial institutions to innovate quickly in new mobile services while ensuring their technical and legal safety: loan, insurance or credit card subscription.

Embedded to the heart of the mobile application, ekeynox ensures identity of existing customers (strong authentication), but also new customers (on-the-fly verification of photographed documents, such as a national ID card), and implements an electronic signature with probative value enforceable against a third party.

NETHEOS PRODUCTS

• eKeynox Mobile SDK

• eKeynox Management System (SaaS or in-premises) • eKeynox Trusted Services (SaaS)

SECURE SUBSCRIPTION ON MOBILE

NEW CUSTUMER ACQUISITION • STRONG AUTHENTICATION CERTIFICATE-BASED SIGNATURE

(14)

Olfeo

OLFEO (HQ)

4 rue de Ventadour - 75001 PARIS • FRANCE Tel.: +33 (0)969 390 999

www.olfeo.com

Olfeo offers a proxy and content filtering solution allowing organizations to manage their Internet access and usage. Olfeo brings a unique and innovative vision to the security market based on its multi-local approach using versions of the Olfeo solution tailored to each country. Thanks to this multi-local approach, Olfeo solution offers the best and optimal legal protection, an unrivalled filtering quality and a high level of security for your information systems. This strategy, focused on innovation, has been overwhelmingly popular and convinced over 2000 satisfied customers.

OLFEO PRODUCTS

The Olfeo solution includes 5 products: • Proxy Cache QoS and SSL

• URL filtering • Protocol filtering • Antivirus • Mobility Controller

Available in numerous formats: software, appliance, virtualized, SaaS, the solution offers a single and multi-language administration console.

INTERNET SECURITY • URL FILTERING • PROXY ANTIVIRUS • WEB TRAFFIC OPTIMIZATION

(15)

OpenTrust

OPENTRUST (HQ)

175, rue Jean-Jacques Rousseau, 92138 Issy-les-Moulineaux cedex • FRANCE Tel.: +33 (0)1 55 64 22 00 • Fax: +33 (0)1 55 64 22 01

www.opentrust.com

OpenTrust is a leading provider of trusted identity-based solutions for protecting credentials, data, documents and transactions featuring digital signature, confidentiality and proof management.

We are also an internationally recognized Certification Authority. OpenTrust’s product lines are available as a cloud service or under a software license. Every day, millions of people around the world use OpenTrust technologies with their corporate badges, their passports, when signing contracts, insurance policies, loans, rental agreements, and more, both on-line and in person.

OPENTRUST PRODUCTS

• Citizen ID : Secure Digital Identities of Citizens

• Corporate ID : Manage Digital Identities of People, Devices, Machines and Networks

• Digital Signature :Sign Anywhere, Anytime from a Fixed or a Mobile Device

• Digital Transaction : Secure Exchanges, Documents and Transactions

TRUSTED ID • EGOVERNMENT SOLUTIONS • STRONG AUTHENTICATION CREDENTIAL MANAGEMENT SYSTEM • DIGITAL SIGNATURE

(16)

Ozon

OZON (HQ)

25, rue du Maréchal Foch - 78000 VERSAILLES • FRANCE Tel.: +33 (0)1 30 84 99 70

www.ozon.io

THE 1

ST

ALL-IN-ONE

WEB CYBERSECURITY SOLUTION

Web Cybersecurity Solution

Web sites, applications & transactions comprehensive protection.

All-in-one Cybersecurity Solution

OZON is the first cloud-based service design to protect web sites, applications and transactions against all known sophisticated cyber-attacks & frauds. A full coverage of digital risks that threaten your eBusiness & eCommerce activities.

Simple & Smart

OZON cloud service is activated in few minutes without any changes to your web site, eCommerce site, web application or corporate CMS. OZON platform detect vulnerabilities & malwares, protect against cyber-attacks and identify fraudulent transactions in real time.

Security monitoring 24/7

New vulnerabilities, malwares, cyber-attacks and frauds are emerging every day. Our team of experts constantly analyze new digital risks and adjust OZON’s service security level on the fly.

(17)

Prim’X

PRIM’X (Sales Department)

117, avenue Victor Hugo - 92100 Boulogne-Billancourt • FRANCE Tel.: +33 (0)1 77 72 64 80

www.primx.eu

Prim’X is a provider of data encryption software for IT systems. Prim’X Technologies develops encryption solutions to efficiently prohibit unauthorized access to sensitive information whether local or remote, stored or exchanged.

Main Prim’X encryption software:

• ZoneCentral: Protection of files stored on workstations, peripherals and servers

• Cryhod: Protection of laptops with pre-boot authentication and full-disk encryption

• ZonePoint: Encryption of data shared on MS SharePoint and filing security • Zed!: Encrypted containers for data archiving or email exchange (free reader available for all operating systems and platforms)

• ZedMail:Email confidentiality through end-to-end encryption with password or certificate authentication

Certifications and Labels :NATO Restricted | EU Restricted | Common Criteria EAL3+ | ANSSI Qualifications

(18)

Qosmos

QOSMOS (HQ)

Immeuble Le Cardinet, 8 rue Bernard Buffet - 75017 Paris • FRANCE Tel. : +33 (0)1 70 81 19 00

www.qosmos.com

A pioneer in embedded Network Intelligence software, Qosmos is the leading independent OEM provider on the market today, serving more than 60 companies worldwide.

Qosmos turns networks into information sources, making them application - and service - aware. The company’s award-winning Deep Packet Inspection (DPI) and Layer 7 Network Intelligence (NI) technologies recognize thousands of communication protocols and metadata attributes, creating an essential information layer that gives the most accurate picture of real-time data activity on networks. Market-leading equipment makers, solution vendors and systems integrators embed Qosmos in network solutions where real-time application awareness is critical. Qosmos technology can be found embedded in Next Generation Firewalls, SIEM/NBAD Solutions, Content Extraction for DLP and Malware, and DDOS Mitigation. Qosmos products can be used in all environments - physical, virtualized and in SDN architectures - to accelerate time to market and ensure continuous signature updates.

• Qosmos ixEngine®: Software Development Kit. Qosmos’ flagship product already established as the de facto industry-standard DPI engine for developers of network solutions.

• DeepFlow® Application Component Suite:Software Platform. • Qosmos Service Aware Module®:L7 Classifier for Open vSwitch. • Qosmos Classifier™

• Qosmos DPI VNFC: Qosmos DPI as a Virtual Network Function Component.

(19)

Sentryo

SENTRYO (HQ)

16, Chemin du Siroux - 69260 Charbonnières • FRANCE Tel.: +33 (0) 970 469 694

www.sentryo.net

Sentryo delivers an innovative solution to secure critical industrial systems (SCADA) and to bridge the gap between the automation (OT) and IT world.

Sentryo ICS CyberVision protects critical networks against cyber-attacks. Probes placed at key locations on the network (tap mode) analyze the traffic to extract metadata which are then aggregated on the cyber vision server. The server dynamically generates a graph providing the network manager with an always updated map of the network situation. The cyber vision server detects all abnormal event or behavior and triggers alarms for the process engineers. The server records all events for forensic purpose. Also it provides dashboards to the security officer. Sentryo ICS CyberVision:

Sentryo Security Probes

A range of industrial grade hardware probes Sentryo CyberVision Server

CyberVision Appliance

Sentryo Threat Intelligence Service

On line service to update the server vulnerability database

CRITICAL INDUSTRIAL SYSTEMS

(SCADA) PROTECTION

(20)

TrustInSoft

TRUSTINSOFT (HQ)

140 bis, rue de Rennes - 75006 Paris • FRANCE Tel.: +33 (0)9 70 44 75 87

www.trust-in-soft.com

TrustInSoft is the only software vendor able to assess safety and security of software without the need to change software development process.

TrustInSoft sells tools and services to analyze source code. TrustInSoft unique value proposal is to bring guarantees on the behavior of software. TrustInSoft solutions are currently in use for software designers or integrators in the following domains: aeronautics, military, energy, telecom, space, railways. TrustInSoft proposes the following tools and services:

TrustInSoft Analyzer, the award winning software analysis tools allowing to mathematically guarantee the conformity to a specification or the absence of flaws in software.

TrustInSoft Advanced Software Audit,a service in which TrustInSoft experts uses TrustInSoft Analyzer on the customer’s software. This service enables to get guarantees on the analyzed software.

TrustInSoft Expertise,a service of expertise to help customers use and deploy TrustInSoft Analyzer. It consists of training sessions, methodological help or event design of dedicated TrustInSoft Analyzer plugins.

SOFTWARE ANALYSIS SOLUTIONS

FOR CYBERSECURITY AND SAFETY

(21)

Vade Retro

VADE RETRO TECHNOLOGY (HQ)

3 av. Antoine Pinay - Parc d’activité des 4 Vents - 59510 Hem • FRANCE Tel.: +33 (0)328 328 888 • Fax: +33 (0)328 328 889

www.vade-retro.com

Vade Retro Technology, European leader, protects and classifies several hundred million inboxes worldwide.

Thanks to a combination of several technologies including the use of a heuristic and behavioral filter, our solutions allow:

• Secure inbound and outbound SMTP traffic • Block 0-day attacks

• To be protected against low waves • To auto-classify low-priority emails • To safely unsubscribe from ads

The solution has been mentioned by Gartner in the Magic Quadrant from july 2014. The best filter worldwide for non-English emails.

VADE RETRO TECHNOLOGY PRODUCTS

Corporate

• Vade Retro Cloud

• Physical or virtual MailCube appliance

Hosting, IPS & OEM solutions

• Vade Retro Cloud Kit • SDK Filter Engine • MTA by Vade Retro

Range offering multi-level administration, adaptable to all system environments.

ANTI SPAM • ANTI MALWARE • ANTI PHISHING ANTI BLACKLISTING • ANTI ADS

(22)

WALLIX

WALLIX FRANCE (HQ)

118, rue de Tocqueville - 75017 Paris • FRANCE Tel.: +33 (0)1 53 42 12 90

Fax: +33 (0)1 43 87 68 38

www.wallix.com

T R A C E , A U D I T & T R U S T

WALLIX is a major global player in privileged user management, compliance, and traceability solutions.

WALLIX have succeeded in combining the three core requirements of managing privileged users, password management, access control and traceability, into a single easy to deploy solution - The Wallix AdminBastion (WAB).

The solutions are designed to meet the needs of Chief Information Officers and Chief Information Security Officers to improve governance of access to sensitive data and company computing resources, in compliance with regulations in IT risk management in financial sector, industry, defense, healthcare and the public sector. WALLIX SOLUTIONS

• WALLIX ADMINBASTION - WAB:

The software suite WAB tracks privileged users activity and manages passwords. WAB can be consumed "on premise", "as a service" or "on demand".

PRIVILEGED ACCOUNTS MANAGEMENT • AUDIT & COMPLIANCE • IT CONTRACTORS AND THIRD PARTIES

(23)

(24)