Portfolio
A light projection of each organisation and today's priorities. Fast to scan, even with hundreds of clients.
Platform
An operations layer above your whole portfolio.
Galyct MSP does not copy each client's environment. It consolidates what belongs at operator level, then lets you step into the client's context when the work calls for it.
Architecture
Three levels of reading, from portfolio to client detail.
Client 360°
A client's posture, services, mandate, actions and governance, on a single record.
Client environment
Business depth and client-specific actions, in Galyct Pro, under mandate and on the record.
Home
My day
- clients needing action, on watch and stable;
- incidents and situations to handle;
- SLAs at risk and overdue actions;
- service and connector health;
- today's NARA briefing.
2clients need action
4on watch
3SLAs at risk
7overdue actions
Needs you now
Hotel · city centreIncident open, containment phaseSLA 38 min
Notary officeMandate renewal due in 7 daysJ-7
Construction firmBackup failing for 26 hto qualify
Regional carrierEDR connector not syncednot measured
Today's NARA briefing
One pattern affects 5 clients: sign-ins from unusual countries on mailbox accounts. A response is prepared; it awaits your validation, client by client.
Review the proposed campaign
Connector health
41
in sync
in sync
1
failing
failing
2
not configured
not configured
Portfolio
Who needs action, and why.
Filter by criticality, service, NIS 2 obligation, owner, SLA, mandate and connector. Every state is explained and shows how fresh its measurement is. No opaque score is ever presented as the truth.
The portfolio reads a projection computed server-side: you only see clients you hold a mandate for.
NIS 2: in scope Mandate: act SLA: at risk Owner: me
ClientTop reasonFreshness
Hotel · city centreMajor incident open4 min ago
Notary office3 overdue actions12 min ago
Construction firmBackup failing26 min ago
Medical practiceNo action due9 min ago
Accounting firmNo action due15 min ago
Regional carrierNo measurement for 3 days3 d ago
action required watch stable not measured
Client 360°
Everything you need to know about a client, and what you are allowed to do.
Posture by family, operated services, mandate and its deadlines, open actions, governance decisions. Access to the client's environment is one click away, under your account, within the mandate's scope, and every access is logged.
Posture by family
Endpoint protection42 of 44 endpoints coveredcovered
BackupLast success 26 h agodegraded
Identities2 admin accounts without MFAto fix
Vulnerabilities3 critical open for over 30 d30 d
Mandate
M-2026-0142 · read and act
expires 31/03/2027
2 pre-approved action categories
expires 31/03/2027
2 pre-approved action categories
Operated services
Cyber posture managementcompliant
Backup monitoringdegraded
Open the client environmentAccess logged under your account, within the mandate scope
Operations
From signal to evidence, with no lost step.
Signals from your tools are normalised, deduplicated and correlated. A situation is qualified, then closed with a written decision.
- SignalReceived from a connected tool, normalised into a common format.
- SituationSignals correlated by client and pattern, without duplicates.
- DecisionAction, incident, campaign, client validation or justified closure.
- ActionCreated at the client, under the mandated account.
- EvidenceTime-stamped log, with the author and reason for each decision.
Situation S-2291
Unusual sign-ins on mailbox accounts
High 3 correlated signals Microsoft 365 · Sophos
Decide
Close with justificationRequest client validationPropose a campaignOpen an incidentCreate an action
Log
08:41 signal normalised, identity category · corr 7f3a
08:43 attached to S-2291, same fingerprint · corr 7f3a
08:52 situation qualified · L. Moreau
08:55 action created at the client, under the mandated account
08:43 attached to S-2291, same fingerprint · corr 7f3a
08:52 situation qualified · L. Moreau
08:55 action created at the client, under the mandated account
Production
The team's work, across all clients, without losing context.
Board, list, workload, calendar, waiting-on-client and SLAs. Every task keeps its client. When you are waiting on the client, the SLA clock stops, and the pause is logged.
To do5
Enforce MFA on 2 adminsConstruction firm · SLA 3 h
Restart backupConstruction firm
In progress4
Contain endpoint 14Hotel · SLA 38 min
Firewall patchNotary office
Waiting on client2
Approve the exceptionMedical practice · clock paused
Done9
Quarterly access reviewAccounting firm
Campaigns
Same pattern, eligible population, separate actions.
A campaign identifies eligible clients, prepares one common response, then opens a separate action at each client. Validation happens client by client; progress is tracked globally, evidence is kept per client.
Campaign C-118 · critical firewall patch
| Client | Validation | Action | Evidence |
|---|---|---|---|
| Construction firm | approved · 14:02 | done | attached |
| Medical practice | pre-approved in mandate | done | attached |
| Notary office | pending | not started | |
| Hotel | declined · maintenance window | postponed | |
| Town hall | not eligible |
2 of 4 eligible clients done, evidence per client
Incidents
The portfolio view of incidents.
Galyct MSP aggregates each incident's phase, priority, owner, SLA and escalation. The detailed handling stays in the client's environment: playbooks, timeline, evidence, report.
When a case is beyond your team, you request escalation to the Galyct firm, as a separate engagement.
- phase and priority of every open incident;
- owner and time remaining;
- escalation requested or under way;
- direct link to the client's case.
Services and SLAs
What you sold, measured.
A managed service links a commitment, a scope, controls, evidence and an SLA. Its state reads in four words: compliant, degraded, non-compliant, not measured.
ServiceClientState
Cyber posture managementMedical practicecompliant
Backup monitoringConstruction firmdegraded
Vulnerability trackingNotary officenon-compliant
Periodic cyber reportingRegional carriernot measured
Deadline compliance · portfolio
Portfolio GRC
Your clients' compliance, at a glance.
Where each client stands on NIS 2, ISO 27001, GDPR or its own commitments, and which deadlines are coming. The view is aggregated; the detail of controls, evidence and exceptions stays in each client's environment. Galyct MSP does not rebuild a second compliance engine.
- portfolio compliance deadlines;
- exceptions due for renewal;
- open gaps by framework;
- maturity assessments and their progress.
Reports
Show the work done.
Monthly reports, services and SLAs, steering committees, portfolio and campaigns. They carry your brand and the mention "Service operated with GALYCT".
Monthly report
Construction firm · August 2026
12actions closed
1incident handled
98.4%deadlines met
4documented decisions
Posture improving on identity and backup. Two exceptions approved by the client, with expiry dates. Recommendation: move to the Reinforced pack.
SERVICE OPERATED WITH GALYCT
NARA
An assistant that prepares and explains. You decide.
NARA analyses the portfolio, a client, an incident, a campaign, a service or your progress in the program. It recommends, prepares, and only executes within authorised categories, after your explicit validation.
It explains before it acts
The recommendation, the signals used, the clients concerned, the expected impact, the risks, the prerequisites and the validation required.
It respects isolation
Multi-client analysis relies on normalised signals, metadata and indicators. No raw data from one client is ever exposed to another.
It follows published lists
Galyct publishes and versions the list of pre-approvable actions and the list of actions NARA may never perform, even when validated.
The AI provider is chosen and managed by Galyct; a partner cannot change it. The AI engine processes data in France or the European Union.
Mandates
No access to a client without a mandate.
The mandate
- Galyct's standard template is mandatory; annexes are allowed, mandatory clauses cannot change;
- start date, end date, revocable at any time;
- reminders at 90, 60, 30, 15, 7 and 1 day before expiry;
- renewal only after the client's explicit approval.
After the mandate
- at expiry without renewal, your rights to act are suspended at once;
- you keep read access to your own intervention history only;
- a change of provider is scheduled with no overlap;
- the client keeps its full history, without rebuilding its environment.
Client portal
Your client sees, comments, validates and uploads evidence.
In their Galyct Pro environment, your client views their assessment, maturity score and history, comments, validates actions and uploads documents. They can revoke a mandate or request a transfer.
Some decisions require their validation before closure. Each validation is named, time-stamped and audited: it is a formal, traceable validation, distinct from an electronic signature.
Mandatory client validations
- risk acceptance;
- closure of a major incident;
- exception or non-compliance;
- business continuity or disaster recovery plan approval;
- sensitive change of scope;
- any decision that commits them.
Galyct sets these minimum categories; you can add more.
Team and routing
Every alert goes to the certified role that knows how to handle it.
Galyct defines the routing matrix; a critical alert can go to several roles. Teams, Slack and email are the normal channels.
| Type of alert | Certified role that receives it |
|---|---|
| Administration, connectors, exports | Certified Administrator |
| Posture, vulnerabilities, remediation | Certified Operator |
| Incident, compromise | Certified Incident Operator |
| Compliance, risk, GDPR | Certified GRC Consultant |
White label
Your brand up front. Galyct always visible.
Logo, colours, reports, emails, portal and domain can be customised. Galyct remains visible everywhere through a standard mention: "Service operated with GALYCT" or "Secured by GALYCT". Your client always knows which platform holds their data.
- partner logo and colours;
- PDF reports and emails in your brand;
- custom portal and domain;
- standard Galyct mention, placement set by the partner charter.
See the platform with your own roles.
The 15-day sandbox opens every role and every workflow, on an empty environment you configure yourself.