Manage cyber risk
Risk analysis, compliance, penetration testing and governance — powered by Elyys360, the GRC platform we build.
- Elyys360, our GRC platform
- EBIOS RM risk analysis
- Penetration tests & audits
- Third-party risk (TPRM) and compliance
Wavatec is an independent consultancy and the maker of Elyys360, our cyber-risk management platform. Since 2009 we have secured our clients' systems and modernised their operations — with deep supply-chain expertise.
WHAT WE DO
Two autonomous practices that reinforce each other.
We do not resell someone else's platform: we write it. Here is what it does, screen by screen.
Rate impact and likelihood, add mitigations, and residual risk recalculates as the actions land. The Current / Initial switch shows the ground covered.
From compliance audits to risk scenarios, from vulnerability management to incident response: the whole posture is steered from a single platform.
Build named filtered views that apply across every module. Group entities, compose scopes, switch context from the global selector.
Every module feeds the same action plan. Drag to reschedule, assign RACI roles, track progress without stitching three spreadsheets together.
For each risk scenario the platform proposes mitigations with their estimated impact — enough to decide, not enough to replace the analyst.
Compliance, risk, vulnerabilities, TPRM: every action on one timeline. Drag to reschedule, resize to move a deadline.





We work where data is most complex and most valuable: the supply chain. Forecasting, supplier quality, document flows — we start from a measurable use case, then industrialise it.
Mapping flows, data and on-the-ground pain points.
A costed scope, an expected gain and a stop criterion.
Production rollout, IT integration, security and compliance.
Team training, run and continuous improvement.
−23 %
Demand models trained on customer history, seasonality and supplier variability.
×4
Automated non-conformity analysis and supplier-audit prioritisation.
−70 %
Extraction of delivery notes, invoices and customs documents, fed back into the ERP.
LICENCE RESELLING
Your licences, renewal dates and quote requests are managed from the client portal.
RESOURCES
DORA, NIS2, NIST CSF 2.0, TPRM, EBIOS RM — the frameworks we apply with our clients, explained in depth.
THEY TRUST US
2009
Founded
50+
Clients supported
6
Frameworks covered
2
Offices — Paris & Aix