Xmco
Independent French cybersecurity consultancy offering audits, pentests, Red Team and threat intelligence to large enterprises
Highlights
- New on EvolcAdded 2026-10-28
About Xmco
XMCO is an independent cybersecurity consultancy headquartered in Paris. Its services include audits, penetration testing, Red Team exercises, cyber threat intelligence (CTI), vulnerability watch and CERT services. Offerings are grouped into offensive, defensive and compliance strategies, and the company lists the YUNO watch offer and the Serenety CTEM service among its products.
Clients include more than 50% of the companies in the CAC 40 and SBF 120 indices, and the website cites over 450 active clients. The firm sells audit and security missions, with about 700 audit missions per year cited on the website. Its CERT-XMCO team is recognised by the French government CERT (CERT-FR), TF-CSIRT and Trusted Introducer.
Founded in 2000 according to the company register, XMCO was set up by CEO Marc Behar. It has agencies in Paris, Nantes and Labège, and the website cites 100 employees. Minority investors Initiative & Finance (2017) and Entrepreneur Invest (2024) hold stakes. The company obtained PASSI certification in 2020 and began a transformation in 2025 with the stated aim of becoming an independent cybersecurity leader.
Product: Cybersecurity audits, penetration testing, Red Team exercises, CTI and vulnerability watch, CERT services, plus the YUNO watch offer and Serenety CTEM service.
Jobs at Xmco
More cybersecurity companies
Xrator
Cyber risk quantification software and security services for CISOs at regulated enterprisesNew on EvolcYogosha
Offensive security testing platform for organizations seeking penetration testing, bug bounty and vulnerability disclosure servicesNew on EvolcYpsilon Securite
Security systems installation, monitoring and maintenance for businesses, residential properties and property managersNew on EvolcZero Trust
Managed cybersecurity and cloud security services for mid-sized and enterprise companiesNew on EvolcZiwit
French cybersecurity firm offering pentests, security audits, website bot protection and SSL certificates to businessesNew on Evolc6CURE
DDoS protection, DNS security and DDoS audit services for internet operators and businesses in FranceNew on Evolc
Website technologies
Older, unverified list. Detection dates and supporting evidence are not yet available.
- AWS
- Cloudflare
- CookieYes
- Google Analytics 4
- Google Tag Manager
- Webflow