Build
Secure development
Platforms secured from the architecture up, not patched after go-live.
- Web, mobile and API platforms
- Threat modeling from the design stage
- Code reviewed every sprint
Cybersecurity R&D startup · Dakar, since 2025
We design our own cybersecurity technologies.
From research to production code, PCYBOX designs, builds and secures its technologies end to end, then puts that expertise to work for you: platforms secure by design, security testing, incident management. And when an existing solution is the right choice, we adapt it.
Supported by
Our approach
An R&D startup, not just another IT services firm.
Our products are not resold solutions: we design, build and secure them ourselves. That R&D practice feeds every project and every engagement we run for our clients.
- Where tools come from
- Typical:Resale or integration of third-party solutions
- PCYBOX:Technologies designed and built in-house, from research to product
- Security
- Typical:Added at the end of the project, after go-live
- PCYBOX:Designed into the architecture, tested by the same team that does penetration testing
- Control
- Typical:Dependence on the vendor and its roadmap
- PCYBOX:Code fully mastered end to end, handed over to the client on custom projects
- Existing solutions
- Typical:Imposed as they are
- PCYBOX:Used, adapted or extended when that is the best choice for the client
From the lab to the field.
Each of our technologies sits at a real stage of our R&D pipeline.
Research and development
Start from a field problem, design a new technology and build it with its future users.
- SENTINEL
Open prototype
Release a tool, put it in front of users, learn fast.
- AttackGraph
- Orbis Community
Hardening
Threat modeling, security testing, on-premise deployment, documentation.
- CERT Platform
Production
Operate, maintain and evolve with users.
- ThreatShare
- Orbis
Designing our own technologies does not stop us from using what already works: if you prefer, we start from an existing solution and adapt or extend it. How we work with existing solutions
What we do
Four areas, one security standard.
Security is not bolted on. It is designed in. We apply to our own platforms what we deliver to our clients.
Test
Application security
We find the flaws before anyone else, then help you fix them.
- Web, API and infrastructure penetration testing
- Manual and tool-assisted code review
- Remediation and retest
Protect
Custom cybersecurity
Incident management setups tailored to your organization and its context.
- CERT / CSIRT setups
- Threat intelligence and detection
- Crisis management and on-call
Train
Advisory and training
Building your teams' skills, beyond handing over a report.
- Maturity assessment
- Prioritized roadmap
- Hands-on workshops
Our products
Products designed, built and maintained in-house.
Three are in production or ready to deploy, one is in R&D, and one open source tool comes from our Lab.
- CERT PlatformReady to deployEvery cyber incident tracked, from report to closure.
- ThreatShareIn productionShare threat intelligence between organizations, on their terms.
- OrbisIn productionWhich application on your machine talks to whom, in real time.
- SENTINELR&DObserve. Understand. Coordinate. Act. Operational command, even without a network.
- AttackGraphOpen sourceSimulate an attack path through a fictional infrastructure, and check that your defense holds.
Flagship product
CERT Platform
Every cyber incident tracked, from report to closure.
- Report
- Assign and triage
- Coordinate and escalate
- Follow up
- Close and report
Finalized and tested, ready to deploy, including on-premise. It is not certified or officially approved to date.
- Traceability
- Unique identifier and full history of every action, from report to closure.
- Coordination
- Assignment and follow-up of a single incident across several teams.
- Escalation
- Automatic escalation when handling deadlines are missed.
- Oversight
- Dashboard: active incidents, categories, trends and mean time to resolution.
Traction
Early signals, concrete and verifiable.
Your code, your data: we hold our own platforms to the same security standard as our clients', and we claim neither market leadership nor certification. Figures as of October 13, 2026.
- GitHub stars
- 192
- Orbis Community, 25 forks, AGPL v3 license.
- people reached
- 115,000
- Orbis demos.
- products
- 4 + 1
- Three in production or ready to deploy, one in R&D, one Lab tool.
- programs
- 2
- Claude for Startups and NVIDIA Inception.
After the Orbis demo, readers spontaneously asked for a self-hosted version that centralizes several machines. That is the scope of Orbis Enterprise, in preparation. See the repository
Frequently asked questions
The essentials in four questions.
What is PCYBOX?
PCYBOX is a cybersecurity R&D startup founded in 2025 in Dakar, Senegal. It designs its own cybersecurity technologies end to end (CERT Platform, ThreatShare, Orbis, SENTINEL, AttackGraph) and works in four areas: secure development, application security (penetration testing, code review), custom cybersecurity (CERT / CSIRT setups) and advisory and training.
Is PCYBOX an IT services firm?
No. PCYBOX is an R&D startup: it designs and maintains its own cybersecurity technologies, from research to production code, and applies to its own products what it delivers to clients. It also runs custom projects and security engagements with that same expertise.
Do you build your own technologies or use existing solutions?
Both. We design our own technologies when nothing existing fits. If the client prefers, we also use proven solutions, open source or commercial, which we configure, adapt, harden or extend to their environment.
How do we get started with PCYBOX?
The entry point is a first conversation through the contact form or at contact@pcybox.com. We work as custom projects, security engagements, product licenses, pilots, advisory and training, or partnerships.
Let's talk about your project.
Describe your need in a few lines. We usually get back to you within two business days.