greenlockadvisory.com

What It Is

GreenLock Advisory is an independent French cybersecurity consulting and audit firm founded in 2015, focusing on offensive security and cyber threat intelligence (CTI). Founded by experienced security specialists, the company emphasizes rationality, relevance, and independence. It dedicates around 20% of its time to advanced security research, training, and conferences to maintain technical sharpness and stay at the forefront of the field.

Core Dimension Analysis

• Protection Type: Primarily focused on offensive security, including penetration testing, code review, and red team exercises, as well as threat intelligence. It also covers vulnerability management, security governance and strategic planning, and remediation support.
• Deployment Model: Mainly delivered as human-led consulting services. Its open-source security orchestration and automation tool, PatrOwl, supports on-premises deployment for continuous security analysis.
• Management and Alerts: PatrOwl is the company’s key engineering output, supporting centralized collection of vulnerability and asset status data. Its analysis engine can compare findings against a knowledge base to predict attack scenarios, and supports triggering alerts or programmatic calls.
• Integration Capabilities: PatrOwl offers strong integration capabilities and currently supports automated invocation of around 40 commercial or open-source security tools and online services.

Pricing

The official website does not publish specific pricing. GreenLock Advisory follows a typical custom cybersecurity consulting model, with quotes usually based on project scope, the duration of red team exercises, or long-term service contracts such as outsourced CERT services.

Pros and Cons

Pros: 1. Strong hands-on offensive security capabilities, with a track record in CVE discovery and Metasploit plugin development; 2. Its open-source PatrOwl tool provides the community with a valuable security orchestration solution; 3. Strong emphasis on communication and adaptability, translating technical recommendations into actionable decisions for management.
Cons: 1. Relatively small company size; 2. The official blog and news updates appear to have stopped in 2018, raising questions about public activity; 3. Lacks a standardized SaaS product, making service delivery relatively heavy.

Who It’s For

Best suited for medium to large enterprises with a certain level of IT/OT security maturity, especially highly regulated industries such as finance. It is particularly relevant for security teams that need in-depth penetration testing, red-team/blue-team exercises, or help building vulnerability and threat intelligence management programs.

China Access and Alternatives

China Access: Unknown. As a France-based consulting firm, it typically does not require direct access from users in mainland China. Payment Methods: Not mentioned. Alternatives: In China, consider security service teams such as NSFOCUS and Venustech. Internationally, consulting firms such as NCC Group may be comparable.