Security consultants · PCI QSA Company
About 247 CyberLabs
A security consultancy and PCI QSA Company built by practitioners who ran security before they assessed it. We help organisations across Europe and CEMEA assess, fix and stand behind their payment security.
Who we are
247 CyberLabs was founded in 2014 by security practitioners, and it still works like one: we look at how your environment actually runs, we tell you what we find, and we help you fix it. The Irish company, registered in Dublin, holds our PCI SSC registration and contracts our international engagements. Our French company in Paris works with our French-speaking clients, in French.
Assessments are delivered by QSAs affiliated to 247 CyberLabs under its quality system, and the QSA who scopes your assessment is the one who signs it. The company holds the accreditation and the quality manual, so every engagement follows the same method, on software we built for the job.
What we stand for
- 01
We tell it like it is.
If a control does not hold, you hear it from us first, in plain words, with what to do about it.
- 02
We don’t tick boxes.
A Report on Compliance is the output of an assessment, not its purpose. We look at how your environment actually runs.
- 03
We don’t bend the rules for a quick buck.
A compliant report that is not true is worth nothing to you or to us. We would rather lose an engagement than sign one.
- 04
We’ve done the job.
We came to assessment from running security: firewalls, operations, incident response. We judge what we have built and defended ourselves.
- 05
We build what we need.
When the tools did not exist, we wrote our own software. We use it on every engagement.
A note from the founder
Why we work this way
Laurent Benameur-Sauvaire
Founder and Lead QSA
QSA · QPA · 3DS Assessor
I started 247 CyberLabs in 2014, after years of running security rather than auditing it: firewalls, operations, incident response, and then the PCI assessments that judged them. Along the way I watched PCI create a generation of consultants who have never had to defend a network, and firms that make their living producing reports as fast as possible. I have nothing against making a living. I just don’t think that is consulting.
What we do is simpler. We look at how your environment really runs, we tell you what we find in plain words, and we help you fix it. We will not sign a report we don’t believe. When the tools we needed didn’t exist, we built them, and we use them on every engagement.
PCI is the heart of our work, and the same expertise takes us further: cryptographic architecture, PIN and key management, strong customer authentication under PSD2, payment security design for organisations that will never file a Report on Compliance. If that is the kind of help you want, talk to us. You will get a QSA on the phone, not a pitch.
— Laurent Benameur-Sauvaire
How the firm is organised
Small by design, built to grow, and organised so that the way an engagement runs does not depend on who leads it.
The company signs, not a person
247 CyberLabs Limited is the Assessor Company of Record with the PCI Security Standards Council. It holds the accreditation, the quality manual and the pre-issue review that every report passes through.
QSAs affiliated to 247 CyberLabs
Assessments are delivered by QSAs affiliated to the company with the Council, under its quality system. The QSA who scopes an engagement leads it and signs it. The Council’s public listing shows who they are.
One method, our own software
Every engagement follows the same five phases on software we built for the job, so evidence is asked for once, findings are tracked to closure and the report is drafted from the work.
Partners where it makes sense
Penetration testing is scoped and read by our QSAs and executed with specialist testing partners where we do not test ourselves. Our French company in Paris works with French-speaking clients; international engagements are contracted in Dublin.
Where we assess
247 CyberLabs is authorised by the PCI Security Standards Council to assess across Europe and the CEMEA region. Wherever your environment sits, the engagement follows the same method and the same quality system.
- Founded
- 2014
- PCI SSC registration
- Dublin, Ireland
- French company
- Paris
- Authorised to assess
- Europe and CEMEA
Want a straight answer about your PCI scope?
Talk to a QSA, not a salesperson. First conversation, real answers.
Talk to a QSAOr reach us directly
- +353 1 691 79 38
Dublin
- info@247cyberlabs.com
Read and answered by a QSA, not by a sales desk.