Trust & Security
How CyberAct protects your data
CyberAct is a cybersecurity platform: the security of your data isn't one feature among others, it's the baseline requirement. Segmented hosting per company, encrypted communications, and a team of certified consultants behind every module of the platform — here's how that's concretely implemented.
Segmented hosting
Each client organization's data is hosted on dedicated, segmented infrastructure, with no shared access between organizations. Fully dedicated hosting options remain available for specific needs (regulated sectors, contractual requirements).
Encrypted communications
All communication between your browser and the platform goes through encrypted connections (TLS). Access is protected by authentication, with fine-grained roles and permissions managed per organization.
GDPR compliance
Personal data collected on cyberact.org and on the platform is processed in line with GDPR: defined purposes, limited retention periods, and access, rectification and deletion rights that can be exercised at any time. Full details are available in our privacy policy.
Isolated lab environments
Hands-on labs (vulnerable VMs, intrusion scenarios) run in isolated environments, independent from your production infrastructure. No action performed inside a lab can affect your real systems.
Access and role management
Each client organization manages its own users, groups and permissions. An organization admin never sees another client organization's data on the platform.
Availability and continuity
The platform is continuously monitored, with regular backups of client data to limit the risk of loss in the event of a technical incident.
The expertise behind the platform
CyberAct is built and operated by CAPVALUE CYBER SECURITY, a subsidiary of CAPVALUE specializing in cybersecurity since 2008. The platform's educational content, lab scenarios and methodology are directly grounded in these consultants' field experience.
OSCP
Offensive Security Certified Professional — offensive penetration testing
CRTP
Certified Red Team Professional — advanced Red Team operations
CREST
Internationally recognized accreditation for offensive security audits
GCFA
GIAC Certified Forensic Analyst — digital investigation
CISSP
Certified Information Systems Security Professional — information security
CISM
Certified Information Security Manager — governance and risk management
ISO 27001 Lead Auditor
Auditing and compliance with the ISO 27001 framework
A methodology aligned with recognized frameworks
The audits, training and lab scenarios offered on CyberAct are grounded in the ISO 27001, OWASP and CIS Benchmarks frameworks, and are built to help your teams toward NIS2, DORA and ISO 27001 compliance — without CyberAct replacing your own certification process.
Frequently asked questions
Is my data shared with other client organizations?
No. Each client organization has a segmented space: its users, progress, lab results and training data are never visible to another company on the platform.
Is CyberAct ISO 27001 certified?
CyberAct is grounded in an ISO 27001-aligned methodology and ISO 27001 Lead Auditor-certified consultants, but CyberAct as a platform is not itself certified. For any specific contractual requirement on this point, contact us directly.
What happens if I delete my account or organization?
You can request deletion of your personal data in line with GDPR. Full details on process and timelines are specified in our privacy policy.
Do hands-on labs pose a risk to our infrastructure?
No. Labs run in isolated, disposable environments, fully independent from your production infrastructure — no action inside a lab can affect it.
Can I request dedicated hosting for my organization?
Yes, fully dedicated hosting options are available for organizations with specific regulatory or contractual requirements. Contact our team to discuss it.
A question about the security of your data?
Our team directly answers any technical or contractual question about hosting, compliance or platform security.