About Wisec

Making trust verifiable.

Software now sits at the heart of almost every activity. Yet organisations still have few ways to prove precisely how their software is built, which components it ships and whether what is delivered really matches what was approved.

Wisec was born from that observation. Our ambition is simple: turn every CI/CD pipeline into a source of reliable, verifiable and usable evidence, instead of leaving teams to reconstruct that information during an audit or after an incident.

Why Wisec?

Software security can no longer stop at detecting vulnerabilities.

Scanners, code analysis tools and pipeline protection play an essential role. But they do not answer every question.

How do you prove that an artifact really comes from the expected source code?
Which components went into a release?
Which checks were performed?
Can that information be found and verified months after going to production?

As development chains grow more complex and European regulatory requirements tighten, the Cyber Resilience Act first among them, traceability and the ability to provide evidence become major concerns. Wisec was designed for that need.

Our mission

Make evidence a native part of the software development life cycle.

Wisec supports technical teams by automating the collection, signing and retention of the evidence produced build after build. Our approach rests on three principles.

Prove rather than declare.

Every build should come with verifiable elements about its provenance, its dependencies and the checks performed.

Preserve rather than reconstruct.

Evidence should be produced when events happen, not reconstructed months later.

Complement rather than replace.

Wisec fits into existing environments and security tools to add to their value.

Our goal is to contribute to a software supply chain that is more transparent, better controlled and verifiable.

Behind Wisec

Thomas Pons

Wisec is an independent venture, founded by Thomas Pons, an engineer specialised in Cloud, DevOps and infrastructure.

Born in the field, the project comes from a conviction: security and compliance should not be handled only through extra tools or paperwork. They should be built straight into everyday technical practice.

Wisec is built that way: start from the real needs of technical teams, favour open standards, and build a solution that is transparent, pragmatic and ready for what comes next.

The ambition is to contribute to a European software ecosystem in which trust no longer rests on statements alone, but on verifiable evidence.

Read the agent's code

Our commitments

What you can count on.

European sovereigntyBuilt and hosted in France.Wisec's SaaS infrastructure is hosted on Scaleway, in the Paris region. We want to offer European organisations a solution that puts control of their data and their digital sovereignty at its centre.
Technical transparencyTrust should not rest on a sales promise.The Wisec agent that runs in CI/CD pipelines is open source, under the Apache 2.0 licence. How it works and what it sends to the platform can be examined.
Security and verifiabilityCryptography is at the heart of our approach.Digital signatures, provenance attestations and retention mechanisms produce evidence whose integrity can be verified independently.
Easy integrationSecurity should not slow delivery down.Wisec is designed to fit existing DevOps practices, without forcing a rebuild of the technical environment.

Where we stand

Backed by the French tech and cybersecurity ecosystem, and holder of the Cybersecurity Made in Europe label.