SYLink
Free diagnostic
Total sovereignty

SYLink on-premise — not a single byte outside your perimeter

For sovereign missions, OIV operators, the defense industry and sensitive public actors: SYLink is delivered, signed and executed at your site. No cloud callback, no telemetry. MCO and MCS operated by our cleared teams from France.

Your premises
Hosting
0%
Telemetry
Compatible
Air-gap
Included
MCO + MCS
Sovereign commitments

Four pillars of on-premise deployment

  • Total sovereignty

    No cloud callback, no outbound telemetry, no foreign dependency. Your perimeter stays your perimeter.

  • Air-gap compatible

    Compatible with isolated zones and classified environments (II 901, IGI 1300). Updates transferred via controlled channels.

  • Code delivered & signed

    Signed source, auditable. Documented reversibility plans (code delivery at end of contract).

  • 24/7 MCO + MCS

    Operational maintenance AND security maintenance, operated from national territory by cleared teams.

All our products, on your infrastructure

Deployable on-premise stack

  • SYLink Pro on-premise

    10 G SFP+ / RJ45 firewall, multi-VLAN up to 10,000 IPs. Configurable in air-gapped zone.

  • SYLink DPI Pro / Mini / VM

    On-premise DPI probes — 2.5 G to 10 G physical or virtualized (VMware / Proxmox). 5 years of compressed 1:350 storage.

  • SYLink Protect

    Self-hosted multi-protocol VPN platform (WireGuard / OpenVPN / IKEv2). Exit nodes under your control, no third-party agent.

  • SYLink EDR on-premise

    EDR agent with no outbound telemetry. Console deployed in your datacenter. Supervised by your SOC or ours.

  • SYLink AI

    Cybersecurity-specialized language models, deployable in air-gap. Signed models, full audit trail.

  • SYLink Audit + Pentest

    Audit and pentest tools running on your infrastructure. Sovereign reports, white-label available.

Full regulatory perimeter

Frameworks covered

  • NATO / Armed Forces · PSSIE
  • II 901
  • IGI 1300
  • RGS
  • LPM (OIV / OSE)
  • NIS2
  • ISO 27032
  • NATO
  • PASSI format
  • ISO 27001 / 27032
  • GDPR
  • HDS (Healthcare)

Our stack meets the strictest requirements of the French government and the Atlantic Alliance. For air-gapped zones, updates are transferred via controlled channels (encrypted key, local repository).

6 steps from scoping to annual audit

Deployment journey

  1. 01

    Accreditation scoping

    NATO / Armed Forces, ISO 27032 doctrine, specific requirements (II 901, IGI 1300). Mapping of your perimeter.

  2. 02

    Signed code delivery

    Code and binaries delivered on sovereign infrastructure, no cloud callback. Verifiable signatures.

  3. 03

    CERT / SOC integration

    SIEM connectors, shared runbooks, encrypted exchanges with your CERT or internal SOC.

  4. 04

    Continuous MCO

    24/7 platform health monitoring, escalation, hotfixes by cleared teams.

  5. 05

    Continuous MCS

    Controlled application of NATO / Armed Forces / CERT-FR patches, recurring audits, LPM compliance.

  6. 06

    Annual audit & reversibility

    NATO / Armed Forces compliance review, improvement plan, exit-plan documentation.

Sensitive missions

Sovereign use cases

  • Ministries & central administrations

    Classified networks, II 901 / IGI 1300, deployment in isolated zone. SYLink AI on-premise for the internal SOC.

  • OIV / OSE (LPM)

    Hardened LPM compliance, recurring NATO / Armed Forces audits, integration with the sectoral CERT.

  • Defense industry

    Hardened workstations, EDR without telemetry, on-premise DPI for production.

  • Diplomacy

    Sensitive delegations, biometric SafeKey, anonymized workstations, VIP supervision.

Start an on-premise deployment

Accreditation scoping, signed code delivery, CERT integration — our cleared teams support you from Clermont-Ferrand, Marseille and Rennes.