About
BEAROPS is a French offensive cybersecurity vendor based in Vannes, Brittany. Born of dual expertise in Red Team and OSINT, the company has turned this field knowledge into a sovereign suite: Beareye, Bearlink and Bearsploit. Our approach is proactive: seeing your organisation as an attacker sees it, to reduce risk before an incident happens.
Our roots are offensive: Red Team , penetration testing, OSINT , social engineering. We know how an attacker gets in, because that is our job. Our platforms are the industrial version of this know-how: what an expert does by hand during an engagement, they do continuously, at scale, assisted by AI. All of it developed in France.
Red Team, penetration testing, OSINT, social engineering.
What an expert does by hand during an engagement, they do continuously, at scale.
All of it developed in France.
BEAROPS brings together a team of developers and cyber engineers. Our expertise covers Red Team, OSINT, platform development and human risk analysis. We are not a reseller: we design and operate our own engines, which is the basis of our technical credibility with CISOs.
Our method starts from the attacker’s point of view, not from a compliance box to tick. We map your real exposure, validate what is actually exploitable, and measure risk reduction over time. The goal is not to pile up alerts, but to prove that risk is going down.
Offensive work carries a particular responsibility. We always operate under written authorisation, with strict rules of engagement and a non-destructive approach. Our open-source investigations respect data protection and a clear code of ethics. We acknowledge our limits rather than hiding them: that is a condition of trust.
Sovereignty is not a slogan but a set of verifiable guarantees: technology developed in France, hosting on French infrastructure certified ISO/IEC 27001, with no exposure to the US CLOUD Act . We document the entire chain and share our evidence as part of a supplier review.
BEAROPS is part of the French cybersecurity ecosystem and has been featured in the specialist press: RiskIntel Media, 7 Jours, the Pôle d’Excellence Cyber and Le Journal des Entreprises. We work with organisations across a range of sectors, from the food industry to regulated finance. The references cited appear with the agreement of the clients concerned.
Cyber defence and Red Team expert
Author of the articles and editorial pages on this site.
A cyber defence engineer by training, Steven Carrier gained experience in a SOC before helping to set up a Red Team unit in a public-sector organisation, then co-organised the Purple Pill Challenge CTF and went on to found BEAROPS.
BEAROPS is a French offensive cybersecurity vendor based in Vannes, Brittany. Born of dual expertise in Red Team and OSINT, the company has turned this field knowledge into a sovereign suite: Beareye, Bearlink and Bearsploit, complemented by security audit services.
It is the thread running through our story: starting from hands-on offensive experience (Red Team, penetration testing, OSINT) and industrialising it at scale with AI, while remaining a French vendor. Our platforms continuously reproduce what an expert does during an engagement.
Our hosting provider, OVHcloud, is certified ISO/IEC 27001.
On French infrastructure, with no exposure to the US CLOUD Act. For us, sovereignty is a set of verifiable guarantees, which we document and share as part of a supplier review or a DORA requirement.
Whether you are a CISO, in procurement or in senior management, our team is here to understand your needs and respond with concrete answers.
