Your client stays your client.
The contract, the billing and first-line support stay with you. Galyct only steps in with your client when you ask.
Galyct MSP · platform, partner program, services
Run cyber security for your whole client portfolio from one console.
Galyct MSP brings posture, incidents, services, SLAs, compliance and evidence together across your clients. You keep the commercial relationship; every organisation stays isolated, under mandate and in its own context.
Understand the partner programFranceFrench and EnglishMFA for every accountAccess under mandate
No subscription.
MSP access is included for a validated partner, as long as at least one Galyct Pro client is active. The Academy is included within your level's quota.
France and the European Union.
Hosted in France, processed in France or the European Union, including by the AI engine.
Expertise when you ask for it.
The Galyct firm backs you up on heavy cases, at your request, as a separately billed engagement.
01 · The problem
You already have tools. What's missing is the layer that runs them across all your clients.
EDR, backup, identity, Microsoft 365, PSA: each tool does its job well, one client at a time. Trouble starts at client number ten: consoles multiply, spreadsheets appear, tickets live in isolation and reports get rebuilt by hand every month.
- Your toolsEDR, backup, identity, password vault, PSA.
- Galyct MSPNormalise, correlate, qualify, orchestrate, prove.
- Your clientsEach under mandate, with its own actions and evidence.
Galyct MSP links their signals to your clients' context, your decisions, your services and the evidence of the work done. It aggregates, correlates, qualifies, orchestrates, supervises and proves. It does not replace your tools.
Galyct MSP is
- a multi-client operations and orchestration layer;
- a command post: portfolio, client record, client environment;
- a system of managed services, SLAs, quality and evidence;
- a partner program with an Academy and certification;
- a trust framework: mandates, audit, reversibility.
Galyct MSP is not
- a native 24/7 SOC;
- an autonomous MDR;
- an EDR, XDR or antivirus;
- a general-purpose RMM;
- a PSA meant to replace yours;
- a second compliance engine duplicating your clients' own.
02 · The platform
Six building blocks to run a portfolio, not six more tools.
01
Portfolio
Know, every morning, which client needs action and why.
02Operations
Qualify signals into situations and decide, in writing.
03Production
Share out the team's work and track deadlines.
04Campaigns
Prepare one response, then act client by client.
05Services
Check that what you sold is actually delivered.
06Reports and evidence
Show the work, the decisions and the progress.
My day
Every morning, the home screen ranks your portfolio by real urgency.
Clients needing action, SLAs at risk, mandates about to expire, silent connectors, and today's NARA briefing. A client that is no longer measured shows as not measured: it is never counted as stable.
2clients need action
4on watch
3SLAs at risk
7overdue actions
Needs you now
Hotel · city centreIncident open, containment phaseSLA 38 min
Notary officeMandate renewal due in 7 daysJ-7
Construction firmBackup failing for 26 hto qualify
Regional carrierEDR connector not syncednot measured
Today's NARA briefing
One pattern affects 5 clients: sign-ins from unusual countries on mailbox accounts. A response is prepared; it awaits your validation, client by client.
Review the proposed campaign
Connector health
41
in sync
in sync
1
failing
failing
2
not configured
not configured
03 · Multi-client
One common pattern. One prepared response. Validation client by client.
Galyct spots that the same problem affects several clients, prepares a response and proposes a campaign. Validations, actions and evidence stay separate, client by client. Nothing is applied in bulk across the portfolio.
Only very low-risk actions, pre-approved in the client's mandate, can run without case-by-case validation. Galyct publishes and versions the list of those actions.
Campaign C-118 · critical firewall patch
| Client | Validation | Action | Evidence |
|---|---|---|---|
| Construction firm | approved · 14:02 | done | attached |
| Medical practice | pre-approved in mandate | done | attached |
| Notary office | pending | not started | |
| Hotel | declined · maintenance window | postponed | |
| Town hall | not eligible |
2 of 4 eligible clients done, evidence per client
04 · Partner program
Three levels, public criteria, automatic progression.
Your level depends on two verifiable facts: your active clients and your team's certifications. It goes up on its own once the criteria are met.
MSP Partner
Validated partner with at least 1 active client.
MSP Certified Partner
At least 3 active clients and 1 fully certified person.
MSP Strategic Partner
At least 50 active clients and 3 fully certified people.
05 · Academy
Four certifications, a demanding exam, verifiable badges.
Each certification starts with mandatory online training in short modules, then a 50-question exam with a 90% pass mark. Every badge links to a public verification page.
Certified Operator
Posture, remediation, vulnerabilities, reporting.
Certified Administrator
Deployment, onboarding, rights, connectors.
Certified Incident Operator
Qualification, playbooks, crisis coordination.
Certified GRC Consultant
Risk, compliance, GDPR, business continuity.
06 · Integrations
Connect what you already use.
Every public integration shows its official status, scope, limits and last validation date. "Available" means connection, data, health check and revocation verified end to end.
| Integration | Family | Status |
|---|---|---|
| Acronis | Backup | Available |
| Sophos | EDR / XDR | Available |
| HarfangLab | EDR | Available |
| Microsoft 365 / Entra ID | Identity and email | Available |
| Keeper | Password vault | Available |
| GLPI, HaloPSA, Datto Autotask, ConnectWise, Jira Service Management | PSA and ticketing | Available |
| Backup SMS | Communication | Planned |
07 · Trust
What protects your clients is documented, and can be checked.
Mandatory mandates
One standard mandate, dated, revocable at any time by the client. After the mandate ends, you keep read access to your own history only.
Identity and access
MFA for every account, no exceptions. Passkeys (WebAuthn) and OIDC single sign-on for client organizations on the Performance or Sovereignty plan. Every action is logged.
Continuity and reversibility
99.9% availability target, one-hour RPO, four-hour RTO, 30-day immutable backups, full exit package.
Start with a 15-day sandbox.
Test the roles, the workflows and the Academy before you activate your first client.