← All use casesMSPs · Valise

Offer security audits, without an in-house pentester

Clients are asking for security audits, often required by an insurer or a prime contractor. Without an in-house pentester, the MSP subcontracts. With the Valise, it delivers the audit itself, under its own brand.

Oxyscan Valise

< 90 minfor a full audit

150+types of vulnerability detected

100+ pagesof white-label report

100% localanalyses, AI and reports on the Valise

1 in 4

French SMEs call on no specialist cybersecurity provider, and 39% turn first to their IT provider for help: audits belong in the MSP's catalogue.

Source: Cybermalveillance.gouv.fr, baromètre de la maturité cyber des TPE-PME (OpinionWay, 588 companies), 7 October 2025

NIS 2

The directive requires the entities concerned to cover the security of their direct suppliers and service providers (Art. 21). Managed service providers are themselves listed in Annex I: the audit becomes an expected deliverable, for clients and MSPs alike.

Source: Directive (EU) 2022/2555 (NIS 2), Annex I and Article 21, OJ L 333 of 27 December 2022

Oxyscan Valise open, showing the interface screen and Wi-Fi antennas

One-off audit

The Oxyscan Valise, a pentester in a case

Plugged into the client's network, the Valise runs a full pentest autonomously, from reconnaissance to exploitation, then generates the report on site. The technician follows the progress, with no pentesting skills required. Designed and made in France, with 100% local analyses and AI.

A turnkey auditAutomatic network detection, guided steps: internal (Wi-Fi, Active Directory, web applications, network) or external.
A report ready to deliverWhite-label executive and technical reports. Each fixed flaw switches to “Fixed”, timestamped in the report.
One environment per clientEach engagement starts from a clean base. No data passes from one client to another: each environment has its own database, reports and score.
An auditor for back-upThe supplied USB key opens a secure tunnel on demand: for an extra token, an Oxydian auditor investigates a finding remotely.

Oxyscan ValiseManual pentestScanner

Audit durationUnder 90 minutesSeveral weeksA few hours

Expertise requiredNoneExpert consultantAnalyst

Real exploitation of flawsYesYesNo

Consistency across engagementsSame method at every clientDepends on the consultantDepends on the configuration

How it works

Plug inA network cable at the client's site, with routing open to its VLANs, as for an auditor.
Let it workReconnaissance, exploitation, passwords: progress and time remaining shown live.
DeliverThe co-branded report is generated on site, and the data stays in the client's environment.
RecheckAfter fixes, each flaw can be replayed in one click, without rerunning the whole audit.

A model designed for MSPs

Partner model

The Valise belongs to the partner, a one-time purchase, then audit tokens individually or in packs.
One token, one audit, billed to the client at the partner's rate.
Updates included, new detections, automatic in connected mode or by file offline.

And after the audit

An offering that continues, an Oxyscan BOX takes over continuously at the client's site.
The follow-up visit, the client's environment is reactivated to measure progress.
Comparable reports, the same structure for every engagement: progress is clear from one audit to the next.

A 30-minute demonstration of the Oxyscan Valise. Partner programme for MSPs.

Book a Valise demo Become a partner