Since
SINCE 2011, WE FIND THE FLAWS BEFORE THEY’RE EXPLOITED.
Quarkslab is a cybersecurity company founded in 2011 in Paris. Our goal: to force attackers, not defenders, to adapt constantly. We work toward this at every level — from the hardware component up to the application.
By combining offensive and defensive security, we help companies and government organizations understand their real vulnerabilities and durably strengthen their security posture.
QUARKSLAB BORN FROM A VISION FORGED IN THE FIELD.
Before Quarkslab, Fred Raynal founded MISC in 2001 — the first French information-security magazine. He co-founded SSTIC, the reference conference for technical security. In 2004, he launched the first Red Team at EADS, the future Airbus.
Quarkslab grew out of that trajectory. With a precise ambition: to go where most don’t — from the hardware component up to the application, where a partial analysis would leave blind spots.
A RESEARCH CULTURE WOVEN INTO DAILY WORK.
At Quarkslab, research isn’t a department sitting alongside operations. It’s structured into every engineer’s time. What we discover on one engagement feeds the next. What we publish — CVEs, open-source tools, conferences — is the visible trace of what we build for our clients.
Each offering — QRedTeam, QLab, QShield — is the direct extension of this offensive research. Expertise built from the inside, over 14 years, at every level.
OUR VISION
Digital technology is spreading into every part of our lives; we contribute to its adoption by eliminating security problems.
We use our knowledge:
- to inspire creative thinking to build the state of the art
- to keep pace with the rapid evolution of the threats targeting every system
- to anticipate and adapt to attacks, which come from everywhere
At Quarkslab, we challenge the status quo in cybersecurity. We believe in creating knowledge through security research in order to protect digital assets.
We develop that knowledge by making it accessible to everyone. Because we believe security is everyone’s business — for there is no freedom without security. So let’s protect freedom!
ACCREDITATIONS & CERTIFICATIONS
OFFICIAL VALIDATIONS, ISSUED AFTER RIGOROUS EVALUATION.
ANSSI
CSPN Security Certification — Accredited Laboratory
Quarkslab is an ANSSI-accredited CESTI authorized to evaluate products for First-Level Security Certification in the areas of reverse engineering, cryptography, and vulnerability testing.
EMVCO
Software-Based Mobile Payment — QShield
QShield is EMVCo certified for the three software protection components: code obfuscation, white-box cryptography, and data-at-rest protection.★ First in the world to certify a white-box cryptography component.
NIST / FIPS 140-2
Algorithmic Validation — QShield
QShield's cryptographic algorithms have been validated according to the American standard FIPS 140-2, the international reference for cryptographic modules deployed in sensitive environments.
FRANCE 2030
Award Winner — Two Critical Cyber Projects
Quarks Remote Attestation (QRA) — solo winner. SMART-CTI — consortium with Chapvision, Exatrack, Olfeo and Beware Cyberlabs. Two projects selected by the French government through a competitive call for projects.
STMICROELECTRONICS
Partner Program Member
Certified STMicroelectronics partner for the integration of QShield with STM32 microcontrollers — one of the world's largest semiconductor manufacturers. Present at the IoT Solutions World Congress 2024.