cyberdream.io

What it is

Cyber Dream is a cybersecurity and software engineering company based in Nantes, France, positioned around “security-first” system design and audit services. Its website presents several product lines: Mlab.sh, a threat intelligence and security investigation platform; Mlab IR, a self-hosted incident response platform; Mon Audit RGPD, a free GDPR self-assessment tool; FraudCodex, an anti-fraud and AML training platform; as well as custom development, security audits, penetration testing, and OSINT investigations.

Core capabilities and deployment

In terms of protection coverage, Cyber Dream spans threat intelligence, SOC analysis, incident response, web/network/cloud security audits, source code review, and compliance assessment. Mlab.sh supports file uploads and lookups for IPs, domains, hashes, and URLs, and provides YARA, PDF/macro/PE analysis, Passive DNS, WHOIS, email forensics, IOC extraction, and MITRE ATT&CK mapping. Mlab IR emphasizes self-hosting, supports ingesting alerts from SIEM, EDR, and email gateways via API, and includes case workspaces, alert deduplication, severity-based routing, timelines, and audit trails. It is well suited to teams with strict data boundary requirements.

Compliance, pricing, and administration

The company states that its infrastructure runs on EU servers and complies with GDPR. Mon Audit RGPD is free, requires no registration or payment, and can generate PDF reports. For security audits, it can provide ISO 27001, SOC 2, NIS2, and GDPR gap analyses, but the website does not disclose whether Cyber Dream itself holds these certifications. Pricing transparency is moderate: Mlab.sh has a free tier, while the Premium plan only indicates higher upload limits and advanced tools. Custom development and audits are priced either at a fixed rate or by billable hours, with quotes available on request.

Pros, cons, and who it is for

The main advantage is its end-to-end service chain, covering security architecture, code implementation, testing and hardening, and post-launch monitoring. Its tools are practical and operations-oriented, especially for SOC, IR, and security audit teams. The downsides are limited public customer cases, SLA details, support tiers, payment methods, and detailed pricing; the company also appears to be relatively young. It is best suited to startups, enterprises, and public-sector organizations in the European market, as well as teams that want to combine threat intelligence, incident response, and secure development.

China access and alternatives

The website does not provide information about access from mainland China, payment options, or local invoicing, so china_access can only be rated as unknown. If Chinese teams need localized threat intelligence, compliance support, and on-site services, they may also evaluate 微步在线, 奇安信, 绿盟科技, 安恒信息, and similar providers. International alternatives include VirusTotal, ANY.RUN, Recorded Future, TheHive, OpenCTI, and others.