factualrisk.com

What It Is

FactualRisk is a French cybersecurity services and intelligence platform positioned around “Cyber Premium, Threat Intelligence, Risk Steering.” Its core focus is not traditional antivirus or perimeter protection, but turning large volumes of threat data into actionable risk signals: it aggregates 12 categories of sources, tracks 2400+ threats, ransomware groups, CVEs, attacks, and patch information, and ranks CVEs from P0 to P3.

Core Capabilities and Deployment

In terms of protection scope, it leans toward threat intelligence, vulnerability prioritization, ransomware monitoring, governance, and remediation consulting. Its scoring methodology combines factors such as CVSS, EPSS, CISA KEV, real-world exploitation, and ransomware associations. The advantage is that teams are not forced to patch purely based on theoretical severity. For deployment, the Intelligence Cyber platform is available online for free and updates automatically every day. It also offers JSON, RSS, a minimal API, and integrations with SIEM/SOAR, scripts, and CI/CD security pipelines. The materials also mention end-to-end services such as audit diagnostics, outsourced RSSI, KRI dashboards, and remediation tracking.

Compliance, Management, and Alerts

On compliance, FactualRisk supports reporting and governance dashboards related to NIS2, HDS, RGS v2, and ISO 27001, but it does not disclose certifications it has obtained itself. Its management and alerting capabilities include targeted alerts, weekly summaries, daily/weekly executive briefings, CODIR-readable reports, RSSI dashboards, and risk indicators, making it suitable for organizations that need to translate technical risk into management decisions.

Pricing, Pros, and Cons

Pricing is clearly divided into two tiers: the Intelligence Cyber platform is 100% free and requires no registration; consulting services are quoted based on scope. Audits, penetration testing, and automation are billed by project, while outsourced RSSI can be charged by daily rate or monthly forfait. Its strengths are the low barrier to entry of the free intelligence platform, a clearly explained signal-to-noise reduction approach, and documented integration options. Its drawbacks are the lack of published specific pricing, payment methods, and formal credentials, as well as a service context that is clearly oriented toward the French/European market.

Who It’s For and Access from China

It is best suited for RSSI/CISO teams, SOCs, local governments, healthcare/EHPAD organizations, industrial ETIs, ESN/MSSPs, and small to midsize teams without a dedicated SOC, particularly for patch prioritization, ransomware tracking, and executive briefings. The source text does not provide information about access from China, so this should be considered unknown; payment methods are also not specified. If China-local compliance, Chinese-language service, or domestic threat intelligence sources are required, alternatives such as 360, NSFOCUS, and DBAPPSecurity may also be worth evaluating.