Securing products since 2017

Accelerate market access

Security by design, audit-ready compliance evidence and upskilled teams, to meet the Cyber Resilience Act (CRA), RED and regulations worldwide.
50+
Manufacturers advised
20
Countries
100%
RED cyber compliance success
2,500+
People trained

They trust us

Advisory

What we do

Your products, secure, compliant and on the market on time. From the first assessment to the last piece of evidence, across the CRA, RED and the standards behind them.

Talk to us
  1. CRA readiness Assessment, roadmap and delivery with your teams, in time for 11 December 2027. For manufacturers with products to keep on the EU market, whatever their category.
  2. CRA portfolio assessment Three weeks, fixed scope: where your portfolio stands against the CRA, the roadmap and the budget to close the gaps. For the board that has to decide what to fund first.
  3. RED cyber and EN 18031 Your products through RED cyber with EN 18031: scope, risk assessment, the technical file and the route to the CE mark, weeks faster than a first attempt. For manufacturers of wireless products sold in the EU.
  4. Product security strategy A product security strategy your teams can run: governance, people, processes and tools across the product lifecycle, from the first design review to the vulnerabilities after release. For CTOs and product security leads building the capability.
  5. Retained advisor A named senior advisor on a monthly allocation of days: portfolio oversight, written recommendations within days and board briefings, without a full-time hire. For product, engineering and legal leadership.
  6. Awareness & Training Product security as a skill for every role, from a ninety-minute board briefing to hands-on labs for engineers, on your premises and on your own products. For whole companies, from the board to customer support.

Success story

Unlocking security by design

Embedded security by design and by default in the existing development process of a leading consumer IoT manufacturer, and trained 100 developers.

Success story

Accelerating secure product release

Developed a bespoke FAST tool to identify risks, appropriate cyber security requirements and automatically evaluate compliance for a multi-market Industrial IoT manufacturer. Product owners now integrate cyber security in their products with no prior knowledge.

Success story

Compliance in a short timeframe

Delivered cyber security risk assessments, product documentation and support to engineers to achieve regulatory compliance in time for the launch of multiple connected products.

Success story

Supporting the product strategy

We highlighted how cyber security supports the product functionalities while reducing risks to end users. With our work, our customer could win several tenders and reach new markets.

The people

Who you work with

The people you meet are the people who deliver, no juniors. Real experience of taking products from design to compliance, in time for release.

We don’t just interpret EU cyber security regulations. We helped build the foundations they are based on.

Dr Cédric LÉVY-BENCHETON, founder of cetome, created the IoT security programme at ENISA in 2014.

  • Dr Cédric LÉVY-BENCHETON

    CEO and founder

    Member of ENISA’s ad hoc working group on security architecture, engineering and vulnerability management. Runs the strategy and compliance work.

  • Sylvain DELAGRANGE

    Senior product security advisor

    Twenty-five years building secure IoT products, from R&D engineer to CTO. Reviews and comments the draft CRA standards, and works with your product team to implement and document secure products.

More about the team →

Insights

Points of view

What we learn in client work and in our research, written for the people who decide.

All insights →

Work together

Contact us