Built by Phishia, Galea automates your EBIOS RM risk assessment, centralises your multi-framework compliance and generates recommendations using sovereign AI. A consulting firm's full expertise, in one platform.
Galea absorbs your environment and your priorities, then generates actionable risk scenarios and compliance deliverables — in a fraction of the time a consulting firm would take.
65 prioritised actions, tracked over time
Severity × likelihood, your scenarios placed automatically on ANSSI's 4×4 matrix. Filter in one click, track how risk drifts over time.
Galea maps your entry points, confirms every vulnerability through real exploitation and reconstructs the full compromise path — from injection to session theft, with the associated business impact.
EBIOS RM, workshops 1 to 5
ANSSI's 5 EBIOS RM workshops run with AI: scoping and security baseline, risk sources, strategic and operational scenarios, then risk treatment. TARS proposes 3 to 5 scenarios per asset; your expert approves and adjusts the score.
assets, flows, dependencies
An inventory of your assets — applications, servers, data, suppliers — with their classification and dependencies. Flows and interconnections are visualised in both 2D and 3D, and feed straight into the risk assessment.
penetration testing
Automated penetration testing: discovery of entry points, confirmation of vulnerabilities through controlled exploitation and reconstruction of the full compromise path, with the associated business impact.
phishing & training
Simulated phishing campaigns and e-learning modules to measure and then improve your people's vigilance, with results tracked by team.
identities and access
Identity and access governance: entitlement reviews, privileged accounts, joiners and leavers. Any gaps found feed into your action plan to be fixed and tracked.
BCP / DRP
Business continuity and disaster recovery planning: impact analysis, recovery objectives, crisis scenarios and exercises. Your BCP stays aligned with your risk assessment.
NIS2, ISO 27001, DORA
Multi-framework auditing with controls pre-filled by TARS from your document base. Galea tracks the gap to target and assembles the evidence pack for your auditors.
threat intelligence
Intelligence on the threats that concern you: dark web monitoring, credential leaks and your organisation's digital exposure, with alerts as soon as a signal appears.
metrics and reports
Dashboards and metrics to steer your programme: action plan progress, residual risk, compliance. Reports ready for your executives, in one click.
Click a module to see what it does.
Audit several regulatory and normative frameworks at once. Galea calculates your coverage rate in real time.
Information security management system. All 93 Annex A controls are pre-loaded, with scoring by domain and tracking of the Statement of Applicability (SoA).
The European framework for essential and important entities. Galea pre-loads the risk management measures and provides tooling for incident notification (24 h / 72 h).
Digital operational resilience for the financial sector. Galea covers ICT risk management, resilience testing and oversight of critical providers.
Health data hosting and personal data protection. Galea centralises your processing activities, your register and your impact assessments.
In an uncertain geopolitical climate, where your risk and compliance data sits is a strategic matter. Galea guarantees that nothing leaves European soil — neither your data, nor the AI models that analyse it.
European data centres certified to ISO 27001 and HDS. No transfer to the United States.
TARS, your sovereign AI agent powered by Mistral AI, hosted in France. No dependency on OpenAI, Google or Amazon.
Built for European compliance from day one. Not a US product retrofitted.
A 30-minute demonstration to see the platform applied to your own context.