About — Red Team, SOC & CISO Cybersecurity Experts
CyberAct is the all-in-one Cyber Range platform by CAPVALUE CYBER SECURITY, built by a team of certified cybersecurity experts active since 2008. Hands-on labs, training, exams, Red Team, Blue Team, CISO-level governance: it's all concrete, measurable and engaging, made to train and assess your SOC analysts, pentesters and security leaders against real threats.
2008
Founded in
15+
Years of experience
100+
Audits completed
98%
Client satisfaction
Published by CAPVALUE CYBER SECURITY
CAPVALUE CYBER SECURITY is a subsidiary of CAPVALUE, a company specialized in cybersecurity and information systems protection since 2008. For over 15 years, CAPVALUE has supported companies, financial institutions and public-sector bodies toward a robust and resilient security posture. Our certified expert teams (OSCP, CRTP, CREST, GCFA, CISSP) deliver offensive audits, incident response, governance and training, with solutions aligned on ISO 27001, OWASP and CIS Benchmarks.
Our mission
Strengthening our clients' cybersecurity posture against current and emerging threats is what drives us. Technical expertise, an innovative Cyber Range platform and proven methodologies come together to upskill teams, secure information systems and stay on top of regulatory compliance (ISO 27001, NIS2, DORA). CyberAct distills over 15 years of field experience from our consultants in offensive and defensive security into one platform.
Areas of expertise
Penetration testing & security audits
Penetration testing (black, grey, white box), Red Team operations, configuration audits and compliance assessment against OWASP, CIS Benchmarks and ISO 27001.
Governance, Risk & Compliance (GRC)
Cybersecurity master plan development, risk management, regulatory support for NIS2, DORA, ISO 27001 and security policy drafting.
Application & infrastructure protection
Security of web, mobile, API and microservice applications; hardening of critical infrastructures and cloud and hybrid environments.
Training & Cyber Range
Hands-on labs on real VMs, structured training paths, assessment exams and attack simulations (phishing, ransomware) to test and strengthen team reflexes.
Detection, incident response & forensics
SOC monitoring, alert correlation, post-incident digital investigation, memory and disk analysis, containment and detailed incident report writing.
Our expert profiles
Our teams bring together certified specialists in offensive security (Red Team, pentesting, exploitation), defensive security (SOC, Blue Team, DFIR) and advisory (Cloud, GRC, compliance) — with years of experience in the most demanding environments.
Mohamed TMART
Chief Executive Officer
- Certifications : ISO 27001 / ISO 27002 audits, DNSSI compliance
- Experience : 20+ years in cybersecurity, including 16 years leading CAPVALUE CYBER SECURITY
- Specialties : Cybersecurity strategy, compliance audits, crisis management, business continuity (BCP/DRP), identity and access management
- Responsibilities : Executive leadership, strategic security oversight for enterprise clients (financial services, insurance, telecom) across Morocco and Sub-Saharan Africa
Team Lead
- Certifications : OSCP, CRTP, CREST CRT
- Experience : 10+ years
- Specialties : Mission management, methodological compliance, client relations
- Responsibilities : Operations supervision, executive reporting, risk management
Web & Application Security Expert
- Certifications : OSCP, OSWE, BSCP
- Experience : 8+ years
- Specialties : Web, mobile and API application security — business logic, authentication, injections
- Responsibilities : In-depth application layer testing, secure code review, OWASP vulnerability exploitation
Systems & Infrastructure Expert
- Certifications : OSCP, CRTO
- Experience : 8+ years
- Specialties : Server environments, internal networks, enterprise directories and protocols
- Responsibilities : Infrastructure auditing, privilege escalation testing, exposure mapping
Advanced Exploitation Expert
- Certifications : OSWE, OSED, OSMR
- Experience : 10+ years
- Specialties : Complex vulnerability research, exploit development, low-level security analysis
- Responsibilities : Proof-of-concept development, exploitation testing on critical systems
Red Team Consultant
- Certifications : CRTP, CRTE, CRTO
- Experience : 6+ years
- Specialties : Adversary simulation, stealthy intrusion, lateral movement, social engineering
- Responsibilities : Realistic attack scenario execution, tactical report writing
SOC Analyst & Detection Expert
- Certifications : GCIH, CySA+, SC-200
- Experience : 5+ years
- Specialties : Security event monitoring, alert correlation, real-time incident management
- Responsibilities : Log and network flow analysis, alert triage, initial response coordination
Forensics & Incident Response Expert
- Certifications : GCFA, GCFE, GCFR
- Experience : 7+ years
- Specialties : Post-incident digital investigation, memory and disk analysis, attack chain reconstruction
- Responsibilities : Artifact collection and analysis, containment of compromised systems, incident report writing
Cloud & Hybrid Environments Expert
- Certifications : CCSP, AWS Security Specialty, AZ-500
- Experience : 6+ years
- Specialties : Cloud infrastructure security, identity and access management, container and CI/CD pipeline protection
- Responsibilities : Cloud posture assessment, configuration and permissions auditing, hardening recommendations
GRC & Compliance Expert
- Certifications : CISSP, ISO 27001 Lead Auditor, CISM
- Experience : 9+ years
- Specialties : Cybersecurity governance, risk management, NIS2, DORA, ISO 27001 and GDPR compliance
- Responsibilities : Security master plan development, ISMS policy writing, regulatory audit support
Our values
Innovation
We track the latest technologies and methodologies to anticipate threats and keep training environments at the cutting edge.
Excellence
Attention to detail and pedagogical effectiveness in every piece of content, with no compromise on quality.
Trust
The confidentiality and integrity of our clients' data is non-negotiable, in line with applicable standards and regulations.
Practice
Every theoretical concept leads to a hands-on exercise in a real environment. Skills you can actually use, not theory that stays on the page.
Published by CAPVALUE CYBER SECURITY
CyberAct is a brand published by CAPVALUE CYBER SECURITY. For any business inquiry or partnership, our team is available via the Contact page.