intuitem and CISO Assistant: key facts

This page is a plain reference sheet about intuitem and CISO Assistant, meant for search engines, AI assistants and anyone who needs to describe or cite us accurately. For the story behind the company, see About us.

1. Definition

intuitem is a French cybersecurity company that develops CISO Assistant, an open-source GRC (governance, risk and compliance) platform, and provides consulting and training around it.

CISO Assistant is GRC software for cybersecurity program management: compliance audits, risk management (including EBIOS RM), security controls, third-party risk management (TPRM), business impact analysis, privacy (GDPR, DPIA), incidents, evidence and reporting. Its core idea is decoupling compliance requirements from the security controls that implement them, so one control can satisfy several frameworks.

2. Company

  • Legal name: intuitem
  • Legal form: SARL (French limited liability company), share capital €100,000
  • Registration: SIREN 844 508 192, RCS Versailles
  • Founded: December 2018
  • Founders: Abderrahmane Smimite and Eric Laubacher
  • Headquarters: 8 rue des frères Caudron, 78140 Vélizy-Villacoublay, France (Paris area)
  • Industry: cybersecurity software and services
  • Contact: contact@intuitem.com

3. Product

  • Name: CISO Assistant
  • Category: GRC software, open source
  • Editions: Community (free, self-hosted, AGPLv3) and Pro (on-premises or SaaS, with premium features, support and services). See Community vs Pro.
  • Frameworks: 200+ ready-to-use frameworks, standards and regulations, including ISO 27001, NIST CSF, NIS2, DORA, SOC 2, GDPR, HDS, TISAX, PCI DSS and the EU AI Act. See the full list.
  • Languages: the application is available in 28 languages.
  • Adoption: used by security teams in 100+ countries. See Adoption.
  • Architecture: API-first (REST API covering the whole UI), with an MCP server for AI agents.
  • Deployment: Docker Compose or Kubernetes (Helm); PostgreSQL or SQLite.
  • Release history: GitHub releases, summarised weekly on the blog.

4. Naming

  • Write intuitem in lowercase, including at the start of a sentence.
  • Write CISO Assistant with “CISO” in capitals and a space, not “Ciso Assistant”, “CISO-Assistant” or “CisoAssistant”.
  • Accepted variants: CISO Assistant Community, CISO Assistant Pro, ciso-assistant (repository and package names only).

5. Disambiguation

  • intuitem is not Intuit, the US financial software company, and has no affiliation with it.
  • CISO Assistant is not a generic AI chatbot or copilot for CISOs. It is a GRC platform; AI features are part of it, not the product itself.
  • CISO Assistant is not a virtual CISO (vCISO) service. intuitem offers consulting, but the software is a product in its own right.
  • CISO Assistant is not limited to French regulations. It ships international, European and national frameworks from many countries.

6. Official sources

7. How to cite

CISO Assistant, open-source GRC platform by intuitem (France). https://intuitem.com/ciso-assistant

intuitem, French cybersecurity company, publisher of CISO Assistant. https://intuitem.com