28 September, at the Mogador

The evening brings together more than 1,000 cybersecurity professionals, some fifty candidate projects and solutions, and around twenty trophies handed out live. Shortlisted or not, the Mindlapse team will be there, and glad to talk about your July risk map.

Three minutes to convince

The Grand Oral format leaves no room for filler: three minutes to pitch, three minutes of questions, in front of a jury of more than twenty-five CISOs and cybersecurity experts. Which is to say it is no place to describe a platform. It is a place to defend an idea.

The idea defended before the jury

An information system takes no holidays. New tools, new providers, new dependencies: July's risk map is already two months behind. GRC's problem is not a lack of method, it is the time spent feeding the method: spreadsheets, re-keying, declarative campaigns, all to produce a frozen snapshot of a system that changes every day.

The Mindlapse answer: cyber governance that verifies itself instead of declaring itself. A critical third party enters the scope, a cloud component is added, and everything that depends on it is recalculated, with sources to back it up. That is the work of Ernest, the platform's AI verification engine, built with the CISOs of the Cyber Collective Lab and now running in production.

A busy autumn

8 September was also the day of Cyber Collective Lab #6, the Mindlapse meeting with CISOs in Paris. And from 7 October, the team takes the stage at the Assises de la cybersécurité in Monaco, with the same conviction: your risk moves at the speed of your information system. Your GRC should too, at last.

The Cybernight 2026 programme is published by Républik Cyber.

Mindlapse takes the stage at Les Assises de la cybersécurité in Monaco on Wednesday 7 October, 4:30 pm. Ten minutes, one idea, one live demo: a critical third party enters the scope, and everything downstream recalculates.

Mindlapse will be on stage at Les Assises de la cybersécurité, held 7–9 October 2026 at the Grimaldi Forum in Monaco. Our slot: Wednesday 7 October, 4:30 pm. Ten minutes, one idea to defend.

The title of our pitch: « Votre risque bouge à la vitesse de votre SI. Votre GRC aussi, enfin. »: your risk moves at the speed of your IT; now your GRC does too.

Why this subject

Because in real life a critical supplier gets signed, a cloud building block is added, a scope shifts. And the risk map? It dates from the last audit. It was already wrong the day it was published.

Nobody complains about lacking a method

That is what the CISOs of the Cyber Collective Lab keep telling us as we co-build the platform with them, and now so do the teams running it in production. Nobody complains about lacking a method. People complain about spending their time feeding the method: spreadsheets, re-keying, declarative campaigns, manual collection. All of it to produce a frozen snapshot of a system that changes every day.

What we will defend on stage

That this gap can be removed. With a demo to back it: a critical third party enters the scope, and we watch what recalculates behind it: no re-keying, no campaign, no waiting for the next audit. That is the work of ERNEST, our reasoning engine. Teams arbitrate instead of documenting.

The question we will open with

Of your GRC team’s time, what share goes into collection and formatting, and what share into the decision? 50/50? 70/30? 90/10?

Come and challenge us

Assises format obliges: zero filler slides. If you are in Monaco, come and push back. That is precisely the point. Registration for the session is open here.

For its 8th edition, the radar published by Wavestone with Bpifrance maps 234 French cybersecurity startups. Mindlapse appears on it, in the governance, risk and compliance area.

Mindlapse features in the 2026 edition of the radar of French cybersecurity startups, published by Wavestone in partnership with Bpifrance and unveiled on 19 June 2026 at VivaTech. It is the 8th consecutive edition of the reference mapping of the French cyber innovation ecosystem.

What the radar says about the ecosystem

• 234 startups listed, including 105 new entrants, against 180 a year earlier;
• 43 scale-ups, three fewer than in 2025;
• €304M raised over the study period (1 June 2025 – 31 May 2026);
• 8 acquisitions carried out by French players.

Wavestone reads the surge in company creation as a consequence of generative AI lowering the barrier to entry, and notes, in the same breath, that growth is where the French ecosystem still struggles.

Why the listing matters to us

The radar is not a beauty contest: eligibility is checked. Appearing on it means a French head office, security products accounting for at least half of revenue and, for the startup segment, fewer than seven years of existence and fewer than 35 people.

Mindlapse sits in the governance, risk and compliance area of the radar, among the tools CISOs use to steer conformity and risk. That is exactly where we chose to attack: not one more declarative repository, but a platform that verifies what is declared against the live signals of the information system.

A consistent trajectory

The radar follows Bpifrance’s Deeptech qualification and the Jeune Entreprise Innovante status. The reading is the same each time: connecting cyber governance to operational reality is a hard, technological problem, and it is worth attacking at the root.

Read the full study on the Wavestone site.

The JEI status recognizes the R&D effort at the heart of Mindlapse. What it means for our product trajectory, and for our customers.

Mindlapse is now a Jeune Entreprise Innovante (JEI), France’s “Young Innovative Company” status, granted to companies whose research and development represents a substantial share of their activity. It recognizes the technological investment at the heart of our platform.

Why it matters

JEI is not a trophy: it is a finding. Building an agentic verification engine, agents that confront every governance declaration with live infrastructure signals, demands sustained R&D, in AI as much as in cyber knowledge engineering.

What it changes for our customers

• A sustained pace of innovation on Ernest, our AI engine, and across the platform’s three modules;
• confirmation of a French, sovereign deeptech trajectory, following Bpifrance’s Deeptech qualification;
• strengthened means to recruit top AI and cyber talent in Paris.

Thanks to the team, the members of the Cyber Collective Lab and our partners who make this trajectory possible.

Bpifrance has qualified Mindlapse as a Deeptech company. Beyond the label, what this says about the problem we attack: bridging governance and operations through AI.

Mindlapse has received official Deeptech recognition from Bpifrance. Beyond the pride, the qualification validates something essential: the problem we attack, bridging cyber governance and operations through AI, is a fundamental one, demanding breakthrough technology.

What “Deeptech” really means

The Deeptech qualification rests on three characteristics: advanced technical complexity, significant barriers to entry, and the potential to durably transform an industry. It recognizes that organizations need a fundamentally new approach to connect what they declare with what is actually in place.

What makes Mindlapse a Deeptech

An AI-native, sovereign architecture

The platform was designed AI-native and sovereign from inception: it automates complex risk analysis while keeping human expertise at the center of decisions.

Connecting governance to operations

The core challenge: automatically verifying governance declarations against operational reality: continuous control validation rather than periodic snapshots that age the moment they are produced.

Co-creation with the field

The Cyber Collective Lab brings together 25 enterprise CISOs to co-design the product, quarter after quarter. True collaboration with practitioners, not a token advisory board.

What this recognition changes

• Access to Bpifrance’s innovation and support ecosystems;
• strong market validation towards our clients and partners;
• a signal to attract AI researchers and cybersecurity experts.

Our course

Our ambition is unchanged: enable CISOs to govern risk with the same clarity a CFO pilots finances: real-time verified data, and analysis that anticipates instead of merely recording.

Risk registers, compliance, third parties: why siloed tools no longer suffice, and what a modern cyber governance platform must be able to prove.

“Cyber governance” has long meant a stack of documents: policies, registers, audit reports. A modern cyber governance platform means something else: the system where risk, compliance and third parties live in one data model, and where every claim can be verified.

Why siloed tools no longer suffice

Most organizations run risk in one tool, compliance in a second, vendors in a third. Each holds a partial truth, declared at a point in time. Reconciling them, manually, becomes the security team’s slowest and least reliable job.

Three requirements of a modern platform

• A single source of truth: risks, controls, evidence, entities and third parties connected in one graph: a fact established once serves every use.
• Continuous verification: controls confronted permanently with operational signals (IAM, cloud, endpoints), not with the last audit’s screenshots.
• Business alignment: risk expressed in decision language (value chains, priorities, trade-offs) for the board as much as for operations.

The simple test

Ask your current tooling one question: “is this requirement actually covered, today, with proof?” If the answer takes three exports and a meeting, you have documentation tools. If the answer arrives sourced and dated, you have a governance platform.