X

XMCO Tech Stack

French penetration testing and cyber forensics firm

Computer and Network Security Paris, Île-de-France 51–200 employees Founded 2002 Partnership

XMCO operates a security services firm rooted in penetration testing, vulnerability management, and forensic response. The technical stack spans offensive tools (Cobalt Strike, PowerShell, C/C++, Go) alongside cloud platforms (Azure, AWS) and established security frameworks (OWASP, PCI DSS) — a pattern typical of firms balancing hands-on red-team work with audit and compliance delivery. Active projects span red-team simulation, penetration testing campaigns, and internal tool development, while pain points cluster around scaling service delivery (pentest expansion, red-team scaling, audit portfolio diversification) and internal structure (HR function maturity in a high-growth environment).

Tech Stack 14 technologies

Core StackActive Directory C# C++ Python AWS Go Java Ruby Cobalt Strike PowerShell Azure C Perl OWASP

What XMCO Is Building

◆Challenges

Expanding security services
Expanding red team services
Diversifying audit portfolio
Conformité
Vulnérabilités
Tests d’intrusion
Structuring hr function in high growth
Securing social law practices
Supporting teams in demanding tech environment
Expanding pentest activity

▲Active Projects

Audit campaigns
Incident management
Security audit and penetration testing
Internal technical training
Tooling and methodology innovation
Red team simulation campaigns
Tool development for ttp exploitation
Technical audit participation
R&d of internal methodologies
Development of internal tools

Hiring Activity

Minimal9 roles · 0 in 30d

Department

Security

5

Sales

2

HR

1

Seniority

Mid

3

Manager

2

Senior

2

Intern

1

Company intelligence

Find more companies like XMCO by tech stack, pain points and active projects

Get started free

About XMCO

XMCO is an independent French security services firm founded in 2002, headquartered in Paris. The firm operates across penetration testing, security audits, gap analysis, PCI DSS certification support, vulnerability intelligence (through CERT-XMCO), threat intelligence, and digital forensics. The company holds CERT and PCI QSA credentials. Current workforce is 51–200 employees, concentrated in security-focused roles, with minimal hiring velocity and current open positions concentrated in France. Operating model combines compliance-driven audit work (PCI DSS, CERT frameworks) with offensive security services (red-team simulation, penetration testing).

HeadquartersParis, Île-de-France

Company Size51–200 employees

Founded2002

Hiring MarketsFrance

Frequently Asked Questions

What security certifications does XMCO hold?

XMCO holds CERT and PCI QSA (Qualified Security Assessor) certifications, qualifying them to conduct PCI DSS assessments and vulnerability management activities.

What penetration testing tools does XMCO use?

XMCO's tech stack includes Cobalt Strike, C/C++, PowerShell, Python, Go, and OWASP frameworks—standard offensive security tooling for red-team campaigns and penetration testing.