XMCO

XMCO

XMCO SASU

Paris, France

Penetration TestingOffensive SecurityThreat IntelligenceIncident Response
Founded 200251-200 employees
Profile last updated: June 9, 2026

About

Founded in 2002, XMCO is a cybersecurity company based in Paris, France working in penetration testing, offensive security, threat intelligence +11 more.

XMCO is an independent French cybersecurity firm founded in 2002 and headquartered in Paris, with offices in Nantes and Labège. It describes itself as a sovereign French cybersecurity practice with roughly 120 employees. Its audit and consulting business unit provides security audits, intrusion testing, Red Team exercises, PCI DSS and SWIFT compliance support, ISO 27001 advisory and internal audit, and audits of industrial, IoT, cloud, Active Directory, Kubernetes and CI/CD environments. Its managed services business unit offers vulnerability watch with personalised bulletins, continuous threat exposure management (CTEM), dark web and brand monitoring, data leak detection, and phishing simulation and awareness campaigns. CERT-XMCO, its CSIRT, provides incident response and digital investigation and is accredited by TF-CSIRT. XMCO develops its own platforms, including Serenety, Yuno, IAMBuster and Scanly, and publishes the ActuSécu security newsletter. The company is qualified PASSI by ANSSI.

Location

Paris, France

Founded

2002

Employees

51-200

Legal name

XMCO SASU

Registration

430137711

Focus areas

penetration testingred teamCTICERTvulnerability watchPCI DSSSWIFTISO 27001CTEMincident response

Languages

FR

Services & products

Security domains

Penetration TestingOffensive SecurityThreat IntelligenceIncident ResponseDigital ForensicsManaged SecurityDetection & ResponseGRC & ComplianceSecurity AwarenessCloud SecurityIdentity & AccessApplication SecurityOT/ICS SecurityEndpoint Security

How they deliver

Professional ServicesConsultingManaged ServicesSoftware

Products

Serenety

Cybersurveillance service combining cyber threat intelligence and CERT monitoring.

Yuno

IAMBuster

Scanly

Compliance & partners

Compliance frameworks

PCI DSSSWIFT CSPISO 27001

Credentials & affiliations

Certifications

PASSI qualification (audit on five scopes: architecture, organisational and physical, intrusion testing, configuration, code)

Issued by: ANSSI

TF-CSIRT accreditation for CERT-XMCO

Issued by: TF-CSIRT

People

Management & team (1)

Other cybersecurity companies in France

View all