CYBEUS
Industrial cybersecurity · OT / ICS

Securing the systems that keep industry running.

Cybeus is an independent industrial cybersecurity consultancy based in Paris. We work on control networks, PLCs and critical infrastructure, from the initial assessment to monitoring in production.

Discuss your project See our services
Services

An end-to-end offer, built for OT

Services designed around the real constraints of industrial sites: availability, functional safety, heterogeneous equipment and long life cycles.

01

Building and running an OT SOC

Design, deployment and maturity growth of a security operations centre dedicated to industrial environments, from the first sensor to level 3 analysis.

  • Scoping and architecture: perimeter, data collection strategy, SIEM integration (Splunk and equivalents) and orchestration (Cortex XSOAR), site onboarding
  • Deployment and tuning of Nozomi Networks, Darktrace and equivalent sensors
  • Process-aware detection rules, false positive reduction, XSOAR playbooks and runbooks, training of level 1 to 3 analysts
02

OT assessment and risk analysis

Mapping of assets, flows and zones. Risk assessment according to IEC 62443-3-2 and national guidelines. A prioritised, realistic remediation plan.

  • Passive inventory of equipment and protocols
  • Gap analysis against IEC 62443, NIS2 and national regulations
  • Configuration review: PLCs, SCADA, DCS, engineering workstations
03

Architecture and segmentation

Design of zones and conduits, industrial DMZ, controlled remote access for maintainers and vendors.

  • IEC 62443 zone model and flow matrix
  • Hardening of IT/OT interconnections
  • Secure remote access (bastion, filtering, traceability)
04

Cybersecurity in industrial projects

Integration of cybersecurity requirements into engineering and construction projects, from specification to commissioning.

  • Specifications and review of vendor proposals
  • Vendor and integrator follow-up, cyber FAT and SAT
  • Security dossier and handover to operations
05

Incident response and hardening

Support during an incident on an industrial perimeter, return to a controlled state, then hardening measures to prevent recurrence.

  • Triage and containment in OT environments
  • Recovery plan and equipment integrity verification
  • System and access hardening
Approach

Understand the process before securing the network

An industrial site cannot be secured like a corporate IT system. Our method starts from the field and from operational constraints.

Listen

Meetings with operations, maintenance and IT. Understanding of the process, the safety stakes and the shutdown constraints.

Observe

Passive inventory, with no disturbance to the process. Mapping of the actual flows, not of the assumed documentation.

Prioritise

Risks assessed at the scale of the site and the business. An action plan ranked by impact and feasibility.

Deliver

Support all the way to production: architecture, detection, procedures, team training.

10+ yearsof experience in industrial cybersecurity
IEC 62443as the reference framework for all our services
Independentno commercial ties with any vendor or manufacturer
Field-basedwork on operating sites, in France and abroad
Sectors

Demanding environments

Energy and utilitiesGeneration, distribution networks, substations, water and wastewater.
Oil and gasProduction units, terminals, pipelines, safety instrumented systems.
Transport and mobilityRail systems, urban transport infrastructure, signalling.
Engineering and constructionEPC projects, cybersecurity integration in design and commissioning phases.
Major events and sensitive sitesTemporary or permanent protection of highly exposed infrastructure.
ManufacturingProduction lines, robotics, MES and supervision systems.
References

Recent engagements

Our clients are described anonymously, in line with our confidentiality commitments.

European energy companyDeployment and tuning of OT detection, SIEM detection rules, monitoring methodology for production sites.
International engineering and construction groupIntegration of IEC 62443 cybersecurity requirements on large production unit projects, vendor review, cyber FAT and SAT.
Major international sporting eventSecurity monitoring of venue technical systems, coordination with the SOC during the operating period.
National oil and gas companyAssessment and hardening of control system infrastructure, segmentation architecture, remote access.
About

An independent consultancy, founded by a field engineer

Cybeus was founded in 2022 in Paris by an industrial cybersecurity engineer, after more than ten years spent in engineering groups, energy companies and critical infrastructure.

Our conviction: OT cybersecurity is only useful when it is understood and owned by the people who operate the installations. We therefore work with automation engineers, maintenance managers and IT teams, not alongside them.

We remain independent from any vendor or manufacturer. The technologies we recommend are chosen for the client's context, never for a commercial agreement.

See the founder profile

Contact

Let's talk about your industrial perimeter

An assessment to scope, a project to secure, a detection capability to build or to make reliable: describe your context and we will reply within two working days.

Write to contact@cybeus.fr
Email
contact@cybeus.fr
Phone
+33 6 13 57 16 71
Head office
Garges-lès-Gonesse, Paris region
LinkedIn
linkedin.com/in/ahmed-atia
Coverage
All of France, international travel on a project basis