About

The firm

Cyber expertise, made clear.

Founded in 2016 and based in Sèvres (Hauts-de-Seine), Brightway is a French firm dedicated to cybersecurity. We support French organisations in protecting their information assets, meeting regulatory requirements, and managing cyber risk — with a pragmatic and measurable approach.

Expert means we master the topics we handle, technically and regulatorily. Made clear means we reject needless jargon, unreadable reports, and opaque invoicing.

10+ Years of expertise
4 PASSI RGS scopes
100+ Assignments delivered
CERT FIRST member

Our values

What guides our decisions.

Clarity

Readable reports, accessible vocabulary, prioritised recommendations, concrete action plans.

Independence

Our qualifications require it, our commercial stance guarantees it: we do not resell any third-party solutions.

Proportionality

Our engagements are calibrated to each organisation's size, risk profile, and resources.

Sovereignty

Teams, data, and processing: everything stays in France, consistent with our France Cybersecurity positioning.

The team

Senior, versatile, 100 % based in France.

Brightway brings together a team of experienced cybersecurity consultants, human-sized and 100 % based in France. Rather than oversized headcount, we invest in the seniority and versatility of each consultant. This transversality ensures the coherence and quality of our engagements across the full cyber spectrum: PASSI audit, monitoring and incident response (CERT FIRST), GRC advisory (ISO 27001, NIS2, DORA, GDPR), and certified training (Qualiopi, PECB).

Qualifications

Recognised by the authorities.

Qualification 2022 · renewed 2025

PASSI ANSSI

Information Systems Security Audit Provider qualification issued by ANSSI across the 4 official scopes: organisational & physical, architecture, configuration, and penetration testing.

Label 2021

CERT FIRST

Brightway's CERT is accredited by the Forum of Incident Response and Security Teams, the international network of incident response teams.

Certification 2023

Qualiopi

Quality certification issued by a COFRAC-accredited body for our training activities (Brightway Academy).

Label 2022

France Cybersecurity

French sector-specific label certifying the French origin and quality of our cybersecurity audit and advisory offerings.

Member · Alliance pour la Confiance Numérique

Ready to strengthen your cyber posture?

Our experts assess your situation and propose an action plan tailored to your challenges.