European Defense Platform: HarfangLab and Sekoia.io’s sovereign cyber response

Our goal is simple: accelerate and optimize threat response by leveraging the strengths of an AI-powered SOC platform to ensure workspace security. We spoke with Alexandre Gestat, Product Marketing Manager at HarfangLab, and Pierre Penhouet, Senior Solutions Engineer at Sekoia.io.

What is the European Defense Platform?

Alexandre Gestat: The European Defense Platform (EDP) was born out of a partnership between HarfangLab and Sekoia.io, with the ambition of meeting the needs of security teams looking for an all-in-one platform that addresses complex sovereignty issues, and whose performance is praised by users and validated by recognized market tests such as MITRE ATT&CK and SE Labs.

Pierre Penhouet: The European Defense Platform provides a best-in-class AI-powered SOC platform that leverages the expertise of HarfangLab and Sekoia.io with an end-to-end European approach. Its value comes from the perfect combination of HarfangLab’s EPP and EDR capabilities with Sekoia.io’s threat detection, including XDR, SOAR, and CTI.

Why was this offering created?

P.P.: We designed the European Defense Platform as a turnkey solution that is easy to deploy and affordable. It meets the demand from organizations wanting to rely on an integrated European solution to secure their information systems.

What are the advantages of this offering and how do HarfangLab and Sekoia.io complement each other?

A.G.: In short, European Defense Platform is more than the sum of its parts. A single deployment is required to get the most out of two solutions whose APIs have historically worked together. The data format is also standardized and common to both our platforms. Likewise, we pool our Cyber Threat Intelligence for the most advanced protection on the market. In the field, security teams manage all data by accessing the Sekoia.io console, which is fed by telemetry, logs from a firewall, antivirus, NDR, and, of course, data from HarfangLab. Everything is centralized so that all this data can be correlated much more easily, facilitating investigations and threat remediation.

P.P.: This technical synergy provides SOC analysts with a single interface for investigation and remediation, where security events and alerts from HarfangLab’s EDR are integrated into the Sekoia console. Customers gain expanded visibility and cybersecurity coverage across their entire IT stack, with the ability to collect additional telemetry from their endpoints and integrate external sources such as firewall logs or cloud application logs. SOAR (incident response), CTI (threat intelligence), and AI (through a natural language assistant, as well as applied to alert processing) are included, improving automation and context enrichment for more effective detection and response.

How does the European Defense Platform specifically address the sovereignty issues facing European organizations?

A.G.: HarfangLab and Sekoia.io are cybersecurity players that comply with all European directives and regulations. In addition, both platforms are fully sovereign, with data hosted in Europe to protect the solutions themselves and any and all users from the impact of extraterritorial laws that could compromise data confidentiality. Moreover, as a guarantee of quality and robustness, HarfangLab is certified and qualified by ANSSI (the French National Cybersecurity Agency).

How can you best leverage the European Defense Platform?

A.G.: The European Defense Platform is delivered by Infinigate, a provider also established in Europe with proven expertise in both of our technologies. 

In short, the European Defense Platform combines cutting-edge technologies to detect and respond to threats with a single agent and a single deployment – all with the data security and confidentiality guaranteed by sovereign solutions.

Find out all the details about the European Defense Platform: