Cyber Security Incident Response
Orange Cyberdefense CERT
Your expert shield against cyber threats
The CERT Orange Cyberdefense brings together experts of Cyber Threat Intelligence (CTI), Cybercrime, Vulnerability Operation Center (VOC) and digital forensics and incident responders (CSIRT).
These experts, working in close proximity to threats and attacker groups, contribute to Orange Cyberdefense’s Intelligence-Led approach to cyber security, enabling organizations to stay ahead of threats.
CERT OrangeCyberdefense plays a central role both internally for our Security Research Centre, for its clients and within InfoSec communities by providing TTP (in the Ukraine or Log4j cases for example), sharing proprietary insights (during the Ivanti crisis) or publishing dedicated tools.
The CERT operates across 11 locations, 24/7 and counts more than 150 experts.
A multi-skilled team at your service
Incident Response and Digital Forensics
With over 350 engagements per year, our team of over 40 dedicated helps containing and remediatinge breaches 24/7 including O365, cloud service breaches and ransomware.
Vulnerability Management
Our experienced analysts in the Vulnerability Operations Center (VOC) are armed with industry-leading tools to identify, classify, and prioritize intelligence on verified vulnerabilities and the best route to remediate or mitigate against threats so our customers can patch faster. The VOC meets the PCI DSS requirements and is certified as an Approved Scanning Vendor (ASV).
Cybercrime monitoring
Multi-skilled, multi-language cybercrime experts crawl the web, deep web and dark web to deliver relevant, targeted and actionable intelligence beyond the corporate perimeter across data, user credentials, IP, phishing sites, credit card fraud, amongst others. Our connections to the ISP community, hosting providers and global law enforcement agencies allow us to rapidly mitigate these threats.
CTI and R&D
From strategical to operational CTI, our teams are dedicated in maintaining our Cyber Threat Intelligence Datalake, processing 700 000 new IOCs every day and coming from more than 400 assessed sources.
This datalake feeds our services and products, available for our customers, and resulting from our Research & Development efforts making us a representative Vendor of Threat Intelligence services by the Garner.
Key figures
140+ experts
operating since 2003 globally
24/7
Cybercrime-Fighting team with 20+ intelligence analysts
11 countries
in which our experts operate
10 languages
specialised intelligence backgrounds
40k+
rogue sites taken down in 2023
+7600
product vulnerabilities analyzed and notified in 2023
230
Incident Response & Forensic engagments
700k+
New indicator of compromise everyday
Certifications & Affiliations
Our certifications reflect our commitment to excellence.
With established partnerships and privileged access to specialized threat intelligence via collaborative networks with law enforcement, regulatory entities and Infosec communities such as Europol, InterCERT, First and TF-CSIRT.
Download our CERT - rfc2350
Fight smarter, not harder!
To get ahead of the storm, one has to know the weather. And for long-term planning, it is inevitable to get expert insight into climate changes.
Though the cyber threat landscape appears to be volatile, fast-changing and chaotic at first glance it is driven by systemic forces.
Reading these forces will result in better, more effective prevention, detection and response.
That is why intelligence is at the heart of everything we do.
Get a World Watch advisory sample delivered to your mailbox!
Stay ahead of threat actors! In the World Watch advisory you can find an up-to-date information on what is happening in the security world, for example: what our adversaries are doing, what technologies are affected, breach trends… Along with our expert recommendations on how to best avoid and mitigate these risks.
If you want to receive a sample of the World Watch advisory for free, fill in the form!
