Certified Operator
- cyber posture management;
- action plan and remediation tracking;
- vulnerability tracking;
- backup and endpoint protection monitoring;
- periodic cyber reporting.
Services
Standardised services, operated by certified partners.
Galyct defines the baseline of each service: name, purpose, main certification, minimum obligations and deliverables. You keep your commercial presentation; the core promise stays the same everywhere.
Catalogue
Every service depends on a certification.
You can only display or sell a service if at least one person on your team holds the matching certification, currently valid.
Certified Administrator
- Galyct Pro deployment;
- client onboarding;
- environment configuration;
- users, roles and rights;
- integrations and connectors;
- day-to-day administration.
Certified Incident Operator
- incident qualification;
- handling and follow-up;
- playbooks;
- crisis coordination;
- initial collection and timeline;
- incident report;
- escalation to the Galyct firm, on request.
Certified GRC Consultant
- cyber governance and risk analysis;
- compliance;
- GDPR and DPO;
- virtual CISO;
- business continuity and disaster recovery;
- supplier management;
- audits and remediation plans.
Catalogue rules
Flexible in presentation, locked on the essentials.
What you customise
- how the service is presented;
- your contacts;
- your prices, within authorised limits;
- your commercial terms.
What Galyct locks
- scope and prerequisites;
- responsibilities and limits;
- minimum obligations;
- Galyct references and the official service name.
Naming
Each service is shown as "GALYCT [official service name]", followed by the partner's name. Galyct provides templates for the service sheet, the commercial proposal and the client report.
Deliverables
Each service sets a baseline of deliverables, with a frequency range set by Galyct. The platform checks that they are produced and flags any gap.
Lost certification
90 days to fix it. During that period, clients already engaged continue; no new client can be signed for the service. Galyct is informed and a warning is shown.
Maturity packs
Three official packs, plus services on their own.
Services can still be sold separately. The three packs have content and a public price set by Galyct; a pack costs less than the sum of its services.
| Pack | Positioning | Sales rule |
|---|---|---|
| Essential | The minimum baseline. | All certifications required by the included services are present in your team. |
| Reinforced | Fuller posture and follow-up. | Same rule. |
| Complete | Advanced management, governance and wider coverage, for more mature or more exposed organisations. | Same rule. |
The detailed composition and public prices of the packs are shared with partners in the official catalogue. You can include a Galyct service in your own offers: it stays a separate line, at its official price.
Maturity assessment
The right pack comes from an assessment, not a hunch.
The assessment is strongly recommended before choosing a pack, but never mandatory. It produces an overall score and a score per framework: ANSSI, ISO 27001, NIS 2 and CIS Controls.
The overall score is weighted by the client's profile: sector, size, headcount, obligations, criticality, data sensitivity and exposure. Galyct proposes the profile; you confirm or adjust it, and every adjustment is logged with its author and reason.
Galyct recommends Essential, Reinforced or Complete. The final decision is yours. Assessment history tracks progress, visible in reports and in the client portal.
ServiceClientState
Cyber posture managementMedical practicecompliant
Backup monitoringConstruction firmdegraded
Vulnerability trackingNotary officenon-compliant
Periodic cyber reportingRegional carriernot measured
Deadline compliance · portfolio
Quality
Transparent rules, a private score.
Breaches
Minor, major or critical. Galyct publishes the severity rules for each type of breach, and you can see all of them.
Quality score
Deliverables, delays, certifications, SLAs and operating quality. Only you and Galyct can see it, never the directory.
Appeal
15 calendar days to contest a measure. During the appeal, the measure is suspended, unless there is a critical risk to security or client protection.
Selling a Galyct service starts with a certification.
Discover the Academy tracks and the partner program levels.