Stormshield is France’s most certified network security company — a subsidiary of Airbus CyberSecurity that develops and manufactures ANSSI-qualified firewalls, endpoint protection software, and encrypted communications products for the most security-demanding environments in France and Europe. Deployed across French nuclear power plants, defense ministry networks, national critical infrastructure, police and gendarmerie communications, and EU institutional networks, Stormshield occupies the highest tier of French sovereign cybersecurity: ANSSI’s EAL3+ and EAL4 certifications, used in classified government networks and facilities where no foreign-supplied security equipment is permitted. As France 2030 accelerates industrial digitization of critical infrastructure, Stormshield’s qualified products are the mandated security layer protecting the OT networks and industrial control systems that France’s strategic industries depend upon.
Company Overview
Stormshield traces its origins to Arkoon and Netasq — two French network security companies founded in the late 1990s and early 2000s that Airbus Defence and Space acquired and merged in 2013 to create Stormshield. The Airbus ownership brings both commercial strength (Airbus’s defense customer relationships across Europe) and strategic alignment: Airbus Defence and Space is the European defense company with the broadest dual-use technology portfolio, and Stormshield’s qualified security products protect both Airbus’s own networks and its government customers’ infrastructure.
Headquartered in Paris (Issy-les-Moulineaux), Stormshield employs approximately 300 people and generates revenue estimated at €100-150 million annually. The company’s product portfolio — all manufactured and operated under French sovereignty controls — includes network security appliances (firewalls), endpoint detection and response (EDR) software, and secure communications infrastructure.
The Airbus parentage creates a unique competitive position: Stormshield has the backing of a €12 billion revenue defence and space group for product R&D investment, yet operates with the focused product specialization of a dedicated cybersecurity vendor. This combination — scale of parent, focus of subsidiary — has enabled Stormshield to achieve ANSSI certifications that require sustained engineering investment across multiple product generations.
ANSSI (Agence Nationale de la Sécurité des Systèmes d’Information) is France’s national cybersecurity agency, responsible for both securing French government networks and certifying security products for use in sensitive environments. ANSSI’s qualification program is the most rigorous in Europe: it requires source code review, architectural assessment, physical security evaluation, and ongoing compliance monitoring. Fewer than 50 products hold ANSSI qualification at any given time. Stormshield holds multiple qualifications — for its SNS (Stormshield Network Security) firewall platform and its SES (Stormshield Endpoint Security) endpoint protection — making it uniquely positioned as a full-stack sovereign security provider.
France 2030 Digital Sovereignty Context
Stormshield is a structural beneficiary of France 2030’s digital sovereignty investment, which funds both the deployment of qualified security solutions in French critical infrastructure and the development of next-generation sovereign cybersecurity products.
The industrial OT security dimension is directly France 2030-relevant. As France 2030 drives digitization of industrial control systems at nuclear plants, hydrogen facilities, battery gigafactories, and semiconductor fabs, each new industrial IoT deployment expands the attack surface that requires qualified security monitoring. Stormshield’s industrial-grade firewalls and endpoint protection products — designed for the operational constraints of industrial environments (deterministic traffic handling, legacy protocol support, passive monitoring that cannot disrupt production processes) — are the mandated security solution for these environments under French nuclear and energy sector regulations.
France’s nuclear fleet receives particular attention. The 56 EDF-operated nuclear reactors use industrial control systems that communicate via legacy protocols (Modbus, DNP3, IEC 61850) and require security monitoring that simultaneously detects threats and preserves the determinism that safety systems require. Stormshield’s nuclear-grade firewall products are deployed in this environment — a reference that no foreign competitor can replicate given ANSSI’s qualification requirements.
The EU NIS2 Directive creates a broader European market for qualified network security products. As NIS2 requires operators of essential services across all EU member states to implement adequate network security measures, Stormshield’s Airbus-backed international sales capability positions it to capture this procurement wave across Germany, Italy, Spain, and other European markets where ANSSI-qualified products are recognized as meeting the highest security bar.
Technology: Stormshield Product Portfolio
SNS (Stormshield Network Security): The core firewall platform is a next-generation firewall (NGFW) available as hardware appliances (ranging from small office 100 Mbps models to datacenter 40 Gbps platforms) and virtual appliances for cloud and hypervisor deployment. SNS provides stateful packet inspection, application-layer deep packet inspection (identifying protocols within protocols), intrusion prevention (IPS), VPN (IPsec and SSL), and content filtering. The product is ANSSI-qualified at multiple levels, with the highest qualification levels approved for use in restricted government networks and nuclear critical infrastructure.
SES Evolution (Endpoint Security): The endpoint protection platform provides antivirus, behavior-based malware detection, device control (USB, Bluetooth, removable storage), application whitelisting, and policy-based security hardening for Windows workstations. For industrial environments where endpoints run specialized HMI (Human Machine Interface) software that cannot be disrupted, SES’s application whitelisting — allowing only explicitly approved applications to run — provides protection without the false positive risk that signature-based detection generates on legacy industrial software.
SMC (Stormshield Management Center): Centralized management of SNS firewall deployments across large organizations, providing policy deployment, log aggregation, and security event monitoring. For organizations with tens or hundreds of firewall sites (utility companies, government agencies), SMC is the operational management layer that makes large-scale deployment economical.
SDS (Stormshield Data Security): File encryption and digital rights management for sensitive data protection. Approved for classified data protection in French government environments, SDS provides the cryptographic protection layer for sensitive files shared across networks and stored on endpoint devices.
Nuclear and Critical Infrastructure Deployment
Stormshield’s most strategically significant deployments are in French nuclear critical infrastructure. EDF’s 56 nuclear reactors use Stormshield firewalls at the boundary between corporate IT networks and operational OT networks — the segmentation point that prevents cyber threats from reaching safety systems.
The technical requirements for nuclear-grade firewall products are extreme: deterministic performance (guaranteed latency bounds that cannot be exceeded under any traffic conditions), fail-secure behavior (the firewall blocks all traffic if it fails, rather than failing open), extensive logging for nuclear regulatory compliance, and physical security features (tamper detection, geographic restriction of management interfaces). Stormshield’s nuclear product line addresses all of these requirements — capabilities that no foreign vendor has submitted for ANSSI nuclear-grade qualification.
Competitive Landscape
Stormshield competes in France and Europe against US NGFW leaders Palo Alto Networks, Fortinet, and Check Point. These vendors have vastly larger R&D budgets and global scale. In the open enterprise market, Stormshield’s market share is modest. In French government and critical infrastructure procurement where ANSSI qualification is required, Stormshield has near-monopoly position — the qualification barriers are simply too high for foreign vendors to invest in for the French-only market segment.
Investor Perspective
Stormshield is not independently investable — it is an Airbus CyberSecurity subsidiary. Investment exposure comes through Airbus (Euronext Paris, CAC 40). For France 2030 industrial decarbonization and nuclear renaissance investors, Stormshield’s qualified security products represent the cybersecurity infrastructure enabling the digital transformation of France’s most sensitive industrial assets.
Related Companies
- Airbus Defence and Space — Parent company
- Thales — Defense cybersecurity, competitor and complementary in some markets
- TEHTRIS — French XDR platform, complementary sovereign security
- Wallix — French PAM, sovereign security stack complement
- Harfang Lab — French OT/critical infrastructure EDR, Stormshield complement