Find your weak spots before attackers do.
Penetration testing, cloud and AI security audits for small and mid-sized businesses. CAC 40 rigor from 5+ years in financial-sector security, sized for your budget. You work directly with the engineer doing the work.
- NDA before kickoff
- Professional liability insurance
- Retest included
- English & French
- CRITICALAdmin panel exposed without MFAFix: 1 day
- HIGHStorage bucket readable by anyoneFix: 2 h
- HIGHChatbot leaks system prompt via injectionFix: 3 days
- MEDIUMOutdated TLS on legacy subdomainFix: 1 h
- RETESTEDDefault credentials on internal NASClosed
Certified across the attack surface
CompTIA PenTest+Offensive security
CCSK v5Cloud security
CLLMSPAI security
Jr Penetration TesterOffensive security
CNIL GDPR trainingCompliance
When SMEs call us for a security audit
A client sent you a security questionnaire
You need a recent pentest report to win or keep the contract.
NIS2, GDPR or DORA on your radar
You need evidence that your risks are identified and handled.
You're shipping an AI chatbot or agent
Prompt injection and data leakage are real, and the EU AI Act is coming.
You've never had a pentest
And you'd rather find out from us than from an attacker.
Three ways to reduce your cyber risk
We start from your real risks, not a generic checklist. Every engagement has a fixed scope and price, agreed before we start.
Security audit & penetration testing
We attack your systems the way a real attacker would, then show you exactly what to fix.
- Web applications & APIs
- External & internal networks
- Configuration review
Cloud & AI security audit
Misconfigurations and exposed data in your cloud, prompt injection and data leaks in your AI apps.
- AWS, Azure, GCP, Microsoft 365
- LLM & chatbot testing
- EU AI Act readiness
Cybersecurity training
Practical sessions that give your staff and developers security reflexes they actually keep.
- Awareness sessions for employees
- Secure coding (OWASP Top 10)
- On-site in France or remote
Not sure where to start? That's normal.
Tell us what you run, what you've already done and what worries you. We'll recommend a scope that fits. If you don't need a full audit yet, we'll tell you.
- 30 min · free
Free scoping call
30 minutes to understand your context, your constraints and what worries you.
- No surprises
Fixed-price proposal & NDA
A clear scope and a fixed price, with a signed NDA before we see anything.
- Actionable
Testing & report
Findings ranked by risk, in plain language, each with a concrete fix.
- Included
Retest
We verify your fixes, so you can show the risk is actually closed.
Big-firm rigor. Freelance proximity.
Large consultancies are built for large budgets. General IT providers aren't security specialists. OryoTech sits in between.
- Regulated-industry background
- 5+ years of IT and security auditing inside a CAC 40 financial group, and security engineering alongside a CISO.
- One expert, end to end
- No junior handoffs. You talk directly to the engineer doing the work, from scoping to retest.
- Reports you can act on
- Every finding rated by risk, explained in plain language and paired with a concrete fix. Readable by your CEO, usable by your developers.
Hi, I'm ST3RN.
Cybersecurity engineer with 5+ years of experience, including IT and security auditing inside a CAC 40 financial group. I founded OryoTech to bring that same rigor to small and mid-sized businesses, without the big-firm overhead.
Every engagement starts with an NDA and is covered by professional liability insurance. I work in English and French, on-site in France or remotely across Europe.
- 5+ years in security
- CAC 40 background
- EN / FR