SYLink on-premise — not a single byte outside your perimeter
For sovereign missions, OIV operators, the defense industry and sensitive public actors: SYLink is delivered, signed and executed at your site. No cloud callback, no telemetry. MCO and MCS operated by our cleared teams from France.
Four pillars of on-premise deployment
Total sovereignty
No cloud callback, no outbound telemetry, no foreign dependency. Your perimeter stays your perimeter.
Air-gap compatible
Compatible with isolated zones and classified environments (II 901, IGI 1300). Updates transferred via controlled channels.
Code delivered & signed
Signed source, auditable. Documented reversibility plans (code delivery at end of contract).
24/7 MCO + MCS
Operational maintenance AND security maintenance, operated from national territory by cleared teams.
Deployable on-premise stack
SYLink Pro on-premise
10 G SFP+ / RJ45 firewall, multi-VLAN up to 10,000 IPs. Configurable in air-gapped zone.
SYLink DPI Pro / Mini / VM
On-premise DPI probes — 2.5 G to 10 G physical or virtualized (VMware / Proxmox). 5 years of compressed 1:350 storage.
SYLink Protect
Self-hosted multi-protocol VPN platform (WireGuard / OpenVPN / IKEv2). Exit nodes under your control, no third-party agent.
SYLink EDR on-premise
EDR agent with no outbound telemetry. Console deployed in your datacenter. Supervised by your SOC or ours.
SYLink AI
Cybersecurity-specialized language models, deployable in air-gap. Signed models, full audit trail.
SYLink Audit + Pentest
Audit and pentest tools running on your infrastructure. Sovereign reports, white-label available.
Frameworks covered
- NATO / Armed Forces · PSSIE
- II 901
- IGI 1300
- RGS
- LPM (OIV / OSE)
- NIS2
- ISO 27032
- NATO
- PASSI format
- ISO 27001 / 27032
- GDPR
- HDS (Healthcare)
Our stack meets the strictest requirements of the French government and the Atlantic Alliance. For air-gapped zones, updates are transferred via controlled channels (encrypted key, local repository).
Deployment journey
- 01
Accreditation scoping
NATO / Armed Forces, ISO 27032 doctrine, specific requirements (II 901, IGI 1300). Mapping of your perimeter.
- 02
Signed code delivery
Code and binaries delivered on sovereign infrastructure, no cloud callback. Verifiable signatures.
- 03
CERT / SOC integration
SIEM connectors, shared runbooks, encrypted exchanges with your CERT or internal SOC.
- 04
Continuous MCO
24/7 platform health monitoring, escalation, hotfixes by cleared teams.
- 05
Continuous MCS
Controlled application of NATO / Armed Forces / CERT-FR patches, recurring audits, LPM compliance.
- 06
Annual audit & reversibility
NATO / Armed Forces compliance review, improvement plan, exit-plan documentation.
Sovereign use cases
Ministries & central administrations
Classified networks, II 901 / IGI 1300, deployment in isolated zone. SYLink AI on-premise for the internal SOC.
OIV / OSE (LPM)
Hardened LPM compliance, recurring NATO / Armed Forces audits, integration with the sectoral CERT.
Defense industry
Hardened workstations, EDR without telemetry, on-premise DPI for production.
Diplomacy
Sensitive delegations, biometric SafeKey, anonymized workstations, VIP supervision.
Start an on-premise deployment
Accreditation scoping, signed code delivery, CERT integration — our cleared teams support you from Clermont-Ferrand, Marseille and Rennes.
