Portfolio
A lightweight projection of each organisation and the day’s priorities. Quick to scan, even with hundreds of clients.
Platform
An operations layer over your entire portfolio.
Galyct MSP does not copy each client’s environment. It consolidates what needs consolidating at operator level, then lets you drill down into the client’s context when the work requires it.
Architecture
Three levels of view, from the portfolio down to a single client’s detail.
Client 360°
A client’s posture, services, mandate, actions and governance, on a single record.
Client environment
The client’s in-depth business detail and its own actions, in Galyct Pro, under mandate and fully traced.
Home
My day
- clients needing action, under watch and stable;
- incidents and situations to handle;
- SLAs at risk and overdue actions;
- health of services and connectors;
- today’s NARA briefing.
2clients needing action
4under watch
3SLAs at risk
7overdue actions
To handle now
Hotel · city centreIncident in progress, containment phaseSLA 38 min
Notary’s officeMandate to renew within 7 daysD-7
Construction firmBackup failing for 26 hto be assessed
Regional transportEDR connector not syncednot measured
Today’s NARA briefing
The same pattern affects 5 clients: sign-ins from unusual countries on email accounts. A fix is prepared; it awaits your approval, client by client.
Review the proposed campaign
Connector health
41
synced
synced
1
failing
failing
2
not configured
not configured
Portfolio
Who needs action, and why.
Filters by criticality, service, NIS 2 obligation, owner, SLA, mandate and connector. Every status is explained and shows how fresh its measurement is. No opaque score is presented as the truth.
The portfolio reads a projection computed server-side: you only see the clients for whom you hold a mandate.
NIS 2: in scope Mandate: action SLA: at risk Owner: me
ClientMain reasonFreshness
Hotel · city centreMajor incident open4 min ago
Notary’s office3 overdue actions12 min ago
Construction firmBackup failing26 min ago
Medical practiceNo action due9 min ago
Accountancy firmNo action due15 min ago
Regional transportNo measurement for 3 days3 days ago
action needed under watch stable not measured
Client 360°
Everything you need to know about a client, and what you are allowed to do there.
Posture by family, services operated, the mandate and its deadlines, ongoing actions, governance decisions. Access to the client’s environment takes one click, under your own account, within the scope of the mandate, and every access is logged.
Posture by family
Endpoint protection42 of 44 endpoints coveredcovered
BackupLast success 26 h agodegraded
Identities2 administrator accounts without MFAto handle
Vulnerabilities3 critical, open for more than 30 days30 d
Mandate
M-2026-0142 · read and act
expires 31/03/2027
2 categories of pre-approved actions
expires 31/03/2027
2 categories of pre-approved actions
Services operated
Cyber posture managementcompliant
Backup trackingdegraded
Open the client’s environmentAccess logged under your account, within the scope of the mandate
Operations
From signal to evidence, with no step lost.
Signals from your tools are normalised, deduplicated and correlated. A situation is assessed, then closed with a written decision.
- SignalReceived from a connected tool, normalised into a common format.
- SituationSignals correlated by client and by pattern, with no duplicates.
- DecisionAction, incident, campaign, client approval or justified closure.
- ActionCreated in the client’s environment, under the mandated account.
- EvidenceTimestamped log, with the author and reason for each decision.
Situation S-2291
Unusual sign-ins on email accounts
High 3 correlated signals Microsoft 365 · Sophos
Decide
Close with justificationRequest client approvalPropose a campaignOpen an incidentCreate an action
Log
08:41 signal normalised, identity category · corr 7f3a
08:43 linked to S-2291, same fingerprint · corr 7f3a
08:52 situation assessed · L. Moreau
08:55 action created in the client’s environment, under the mandated account
08:43 linked to S-2291, same fingerprint · corr 7f3a
08:52 situation assessed · L. Moreau
08:55 action created in the client’s environment, under the mandated account
Delivery
The team’s work, across all clients, without losing the context.
Board, list, workload, calendar, waiting on client and SLA. Every task keeps its client. When you are waiting on the client, the SLA clock stops, and the pause is logged.
To do5
Enable MFA for the 2 administratorsConstruction firm · SLA 3 h
Restart the backupConstruction firm
In progress4
Contain endpoint 14Hotel · SLA 38 min
Firewall patchNotary’s office
Waiting on client2
Approve the exemptionMedical practice · clock stopped
Done9
Quarterly access reviewAccountancy firm
Campaigns
Same pattern, eligible clients, separate actions.
The campaign identifies eligible clients, prepares a shared fix, then opens a separate action for each client. Approval is given client by client; progress is tracked overall, evidence is kept per client.
Campaign C-118 · critical firewall patch
| Client | Approval | Action | Evidence |
|---|---|---|---|
| Construction firm | approved · 14:02 | executed | attached |
| Medical practice | pre-approved in mandate | executed | attached |
| Notary’s office | pending | not started | |
| Hotel | declined · maintenance window | postponed | |
| Town hall | not eligible |
2 of 4 eligible clients handled, evidence per client
Incidents
The portfolio view of incidents.
Galyct MSP aggregates the phase, priority, owner, SLA and escalation of each incident. Detailed handling stays in the client’s environment: playbooks, timeline, evidence, report.
When a case is beyond your team, you request escalation to the Galyct firm, as a separate engagement.
- phase and priority of each open incident;
- owner and time remaining;
- escalation requested or in progress;
- direct link to the client’s case.
Services and SLAs
What you sold, measured.
A managed service links a commitment, a scope, controls, evidence and an SLA. Its status reads in four words: compliant, degraded, non-compliant, not measured.
ServiceClientStatus
Cyber posture managementMedical practicecompliant
Backup trackingConstruction firmdegraded
Vulnerability trackingNotary’s officenon-compliant
Periodic cyber reportingRegional transportnot measured
On-time delivery · portfolio
Portfolio GRC
Your clients’ compliance, at a glance.
Where each client stands on NIS 2, ISO 27001, GDPR or its own commitments, and which deadlines are approaching. The view is aggregated; the detail of controls, evidence and exemptions stays in each client’s environment. Galyct MSP does not recreate a second compliance engine.
- portfolio compliance deadlines;
- exemptions to renew;
- open gaps by framework;
- maturity assessments and their progress.
Reports
Demonstrate the work done.
Monthly reports, services and SLAs, steering committees, portfolio and campaigns. They carry your brand and the mention “Service operated with GALYCT”.
Monthly report
Construction firm · August 2026
12actions closed
1incident handled
98.4%deadlines met
4documented decisions
Posture improving on identity and backup. Two exemptions approved by the client, with their expiry dates. Recommendation: move to the Renforcé pack.
SERVICE OPERATED WITH GALYCT
NARA
An assistant that prepares and explains. You decide.
NARA analyses the portfolio, a client, an incident, a campaign, a service or your progress in the programme. It recommends, prepares, and only executes within authorised categories, after your explicit approval.
It explains before acting
The recommendation, the signals used, the clients concerned, the expected impact, the risks, the prerequisites and the approval required.
It respects isolation
Multi-client analyses rely on normalised signals, metadata and indicators. No raw data from one client is ever exposed to another.
It follows published lists
Galyct publishes and versions the list of actions that can be pre-approved and the list of actions forbidden to NARA, even after approval.
The AI provider is chosen and administered by Galyct; a partner cannot change it. The artificial intelligence engine processes data in France or the European Union.
Mandates
No access to a client without a mandate.
The mandate
- mandatory Galyct template, optional appendices, mandatory clauses that cannot be changed;
- start date, expiry date, revocable at any time;
- reminders 90, 60, 30, 15, 7 and 1 day before expiry;
- renewal only after the client’s explicit approval.
After the mandate
- on expiry without renewal, your action rights are suspended immediately;
- you keep read-only access to your own intervention history only;
- a change of provider is scheduled with no overlap;
- the client keeps the full history, without having to recreate its environment.
Client portal
Your client views, comments, approves and uploads its evidence.
In its Galyct Pro environment, your client consults its assessment, its maturity score and its history, comments, approves actions and uploads documents. It can revoke a mandate or request a transfer.
Some decisions require its approval before closure. Each approval is named, timestamped and audited: it is a formal, traceable approval, distinct from an electronic signature.
Mandatory client approvals
- risk acceptance;
- closure of a major incident;
- exemption or non-compliance;
- approval of the BCP or DRP;
- sensitive change of scope;
- any decision that commits the client.
Galyct sets these minimum categories; you can add more.
Team and routing
Each alert goes to the certified role that knows how to handle it.
Galyct defines the routing matrix; a critical alert can be sent to several roles. Teams, Slack and email are the normal channels.
| Type of alert | Certified role that receives it |
|---|---|
| Administration, connectors, exports | Certified Administrator |
| Posture, vulnerabilities, remediation | Certified Operator |
| Incident, compromise | Certified Incident Operator |
| Compliance, risk, GDPR | Certified GRC Consultant |
White label
Your brand in the foreground. Galyct always visible.
Logo, colours, reports, emails, portal and domain can all be customised. Galyct remains visible everywhere, through a standard mention: “Service operated with GALYCT” or “Secured by GALYCT”. Your client always knows which platform its data relies on.
- partner logo and colours;
- PDF reports and emails under your brand;
- customised portal and domain;
- standard Galyct mention, placement set by the partner charter.
See the platform with your own roles.
The 15-day sandbox opens every role and every workflow, on an empty environment that you configure yourself.