Cyberwatch

Cyberwatch publishes a vulnerability and compliance management platform aimed at organizations that need to track exposure across mixed IT and operational technology (OT) estates without shipping their scan data to a third-party cloud. The platform combines asset discovery, vulnerability scanning, risk-based prioritization, an embedded patch management module, and a separate compliance manager for hardening assessments against customizable rule sets. A distinguishing technical choice is deployment flexibility: Cyberwatch supports agentless, agent-based, and fully air-gapped/disconnected scanning modes, and the company markets that scan results stay within the customer’s own environment rather than being sent to Cyberwatch’s servers.

Founded in 2015 and based in Massy, France, Cyberwatch became part of Framatome — the French nuclear engineering group — in 2022, joining Framatome Cybersecurity to extend coverage into industrial and OT environments alongside its existing IT vulnerability management business. That ownership structure is notable: it gives Cyberwatch a direct channel into critical infrastructure and nuclear-adjacent environments where air-gapped scanning and data sovereignty matter more than in typical commercial IT shops, but it also means the company now operates as a subsidiary rather than an independent growth-stage vendor.

Cyberwatch competes in a vulnerability management category dominated by much larger players (Tenable, Qualys, Rapid7), and its market presence outside France and Francophone Europe is limited. Its differentiation rests less on novel detection technology and more on deployment sovereignty and IT/OT convergence under a single platform, which is a real and growing need for European critical infrastructure operators but a narrower pitch than category leaders offer globally.