No zero risk
The aim is to reduce exposure, not to guarantee that an incident is impossible: no result is guaranteed, and a limited check never proves the total absence of risk.
The platform · resilience & crisis management
A platform that links risk, incidents, compliance and continuity.
Galyct Pro is organised around a cockpit and four operational areas. The same objects (risks, incidents, actions, decisions and evidence) move between the modules, so that nothing is re-entered and a usable record is kept.
Understand the risk. Take back control. Stay the course.
Hosted in France by Scaleway · Mistral AI (EU) · to prepare for and document GDPR, NIS 2 and DORA.
01 · FIVE AREAS
The cockpit, and four areas that respond to it
Galyct Pro is organised into five clear areas: you come in through the one you need, and everything converges in the cockpit.
SteerOverview
The cockpit: posture, priorities and decisions, at a glance.
The cockpit → AnticipateProtectRisk (EBIOS RM) and continuity (BCP/DRP): reduce exposure before the incident.
Risk & continuity → QualifyDetect & analyseConnectors, watch, IOCs, emails, links: see and qualify the threat.
Analyse → ActRespondCrisis cell, playbooks, decision log, 72-hour clock.
Incident management → ProveGovernISO 27001, NIS 2, DORA, GDPR: evidence linked to decisions.
Compliance →
02 · Everything is linked
Everything talks to everything else, because everything lives in the same place
A risk scenario becomes a playbook. A connector alert opens an action and an indicator of compromise. A crisis decision feeds the evidence register. You come in through the capability you need: the others follow.
Data flow to the cockpit
Incident response
Click a pillar to expand it
PRINCIPLE
One console.
Everything connects.
The value of a cyber platform does not come from the number of modules, but from how they fit together. With Galyct Pro, one and the same entity moves through: risk feeds the playbook, the incident feeds the evidence, the evidence feeds the audit. Nothing is entered twice, nothing gets lost between two tools.
03 · MANAGE RISK
From the business to the budget, risk you can read and decide on
Cybersecurity treated as a business risk: scope, criticality, responsibilities, priorities, budget and residual risk, not a pile of alerts.
1
Mapping
2
EBIOS RM workshops
12345
Baseline → sources → events → scenarios → treatment
3
5×5 matrix
4
ROSI & trade-offs
What the screen shows
1
Map of assets & dependencies
Critical activities, sensitive data, providers and digital dependencies: the basis for every decision, before any cyber plan disconnected from operations.
2
EBIOS RM scenarios
ANSSI’s risk analysis method in 5 workshops: security baseline, risk sources, feared events, strategic and operational scenarios, treatment plan.
3
Impact × likelihood matrix
Impact, likelihood, existing measures, criticality and residual risk: the map that makes every scenario comparable, prioritised and defensible before a committee.
4
Explore “Manage risk” →
ROSI & budget trade-offs
Link each risk to a defensible budget decision: cost, effort, urgency, compliance and real capacity to deliver, the subject your executive committee understands in ten minutes.
04 · RUN AN INCIDENT
Take back control without destroying the evidence
In a crisis, the first casualty is traceability. Galyct Pro keeps the thread of decisions while you stabilise, for the insurer, the regulator and legal.
1
Timestamped playbooks
Detection, suspicious access
BEC playbook started
Accounts isolated
2
Crisis cell
CEOITLEGCOMIN PROGRESS
Roles brought together, communications recorded
3
Decision log
10:02 · Isolation approved · a1f4…9c
10:15 · Restoration started · 7b20…e3
11:40 · CNIL notification · 3d8c…41
4
SLAs & notifications
72 h CNIL, 61 h 12 min remainingAssignees notified · deadlines tracked
What the screen shows
1
Timestamped playbooks
Operational playbooks, timestamped, assigned and scored: SLAs, critical steps, evidence requirements and adaptation to the context. You take back control without improvising.
2
Crisis cell
Open a cell, bring the roles together, record communications and switchovers. Ransomware, a compromised account, a leak: each crisis has its own dedicated space.
3
Decision log & evidence
Every decision, hypothesis and action is recorded and timestamped. A timestamped, exportable log that distinguishes established facts from weak signals.
4
Explore “Run an incident” →
SLAs & notifications
Regulatory schedules, alerts and notifications in real time: the right people alerted at the right time, without letting a critical deadline slip.
05 · PROVE COMPLIANCE
The frameworks your stakeholders require
Covered, explained and, above all, linked to decisions: because a cyber decision must be explainable after the fact, before a committee, an insurer, a customer or an auditor.
1ISO 27001Documented
2NIS 2On track
3DORAOn track
4GDPR · 72 hMaintained
5Evidence registerActive
6Committee & audit materialReady
What the screen shows
1
ISO 27001
From the information security management system to the statement of applicability (SoA): documentation linked to real practices, all the way to the evidence.
2
NIS 2
European directive: who is affected, which obligations, which compliance trajectory, including control of third-party risk.
3
DORA
Digital operational resilience for the financial sector: management of ICT third-party risk, testing, major incidents and reporting.
4
GDPR · 72-hour CNIL notification
Record of processing activities, impact assessments, breach notification on time: compliance that is maintained, without cosmetic compliance.
5
Evidence register
Traces, logs, screenshots, decisions and hypotheses kept and usable: you document what you do, not the other way round.
6
Explore “Document compliance” →
Committee & audit material
Readable reports for management, committee, insurer, customer or auditor: the same facts, adapted to each level of reading.
06 · CONNECT & MONITOR
Your alerts reach the right place
Read-only connectors that feed the console continuously (automatic synchronisation, every 15 to 30 min depending on the connector): an alert becomes an event, then an action and an indicator of compromise, with no intelligence database located outside the European Union.
1AcronisBackup failed, HR server→ event
2MISPNew IOC correlated with a scenario→ action
3CERT-FRBulletin, exploited vulnerability→ watch
4Domain · DoHSuspicious domain resolved & checked→ evidence
What the screen shows
1
Acronis
Read-only connector: backup and protection alerts flow into the console and trigger the right event, at each polling.
2
MISP
Incoming threat intelligence sharing: the indicators relevant to your context, linked to your scenarios and your incidents.
3
CERT-FR watch
Security alerts and bulletins from CERT-FR: the official French watch, filtered on your actual exposure rather than on the noise.
4
Explore “Connect & monitor” →
Galyct Domain · DoH
Encrypted DNS resolution (DNS-over-HTTPS, public resolvers + fallback in France): a protection and observation component, only the domain being checked is transmitted.
07 · THE METHOD
Six stages, one guiding thread: decide without losing control
The platform does not impose a bureaucratic approach: it equips a proven sequence, the same for an audit, a crisis or a risk analysis, proportionate to your organisation.
01ScopeObjective, urgency, scope, contacts, constraints and expected deliverables.
02QualifyAssets, data, dependencies, evidence; distinguish facts, hypotheses and weak signals.
03PreserveLogs, screenshots, decisions and timestamps before any irreversible action.
04AnalyseGaps, scenarios, exposure, continuity, compliance and dependencies.
05DecideCriticality, cost, urgency, residual risk and real capacity to deliver.
06TrackRoadmap, owners, deadlines, evidence of correction and indicators.
08 · WHAT WE DO NOT PROMISE
An honest platform also shows its limits
A serious platform also states its limits. What we commit to: usable findings, traceable decisions and a trajectory that is followed through.
No attribution without evidence
No one is named as responsible without sufficient technical or contextual evidence. What cannot be demonstrated is presented as a hypothesis or a limit.
Compliance linked to real practices
Documentation must match real responsibilities and practices: we document what is done, not the other way round.
No decorative report
A deliverable serves a decision, a remediation or a piece of evidence. Otherwise, it has no place in the console.
Five areas, one toolbox, a single cockpit.
From today’s posture to tomorrow’s evidence, everything is in one place.
Steer
04Your posture, its trajectory and your actions.
- Dashboard
- Trajectory
- Remediation plan
- Team tracking
Prevent
04Reduce exposure before an incident.
- Fleet and agents
- Exposure
- Threat and vulnerability watch
- Templates and policies
Govern
07Meet your obligations over time.
- Compliance
- Risk analysis
- Third parties and vendors
- Continuity
- GDPR
- Regulatory notification
- Programmes
Respond
06Make decisions and hold the line in a crisis, minute by minute.
- Incident room
- Signals
- Playbooks
- Timeline
- Crisis exercise
- NARA assistant
Evidence
04The file is ready on the day you are asked to account for your actions.
- Cases
- Audit log
- Reports
- Attestation
Tools
06Analyse a message, a link, a trace.
- Guided diagnosis
- IOC analysis
- Email headers
- Link analysis
- Analysis agent
- Library
09 · THE COCKPIT
From exposure to resilience, a visible course
The console places your organisation on a maturity grid and shows you the next step. Tour the cockpit on sample data, after a short form: you form your own view, then request a demo with full knowledge.
Maturity scale
ExposedNo visibility, no plan
ControlledFirst safeguards in place
SteeredRisks tracked & decided on
ResilientCrisis prepared, evidence kept
A cyber crisis in progress?
Suspected intrusion, ransomware, compromised critical account, data leak: stabilise without destroying the evidence, and get support. We open a crisis cell and keep the thread of decisions.
See the platform in your context.
A 30-minute live demo, or start on your own with the free executive diagnosis. No commitment, your data processed in the European Union.