By organization
Small businessesSecurity done right, your days kept for the business.
Mid-marketA program run every week, across sites and teams.
Enterprise & security teamsQoBot takes the routine, your team does strategy.
Public sectorSteer your cybersecurity, keep agents on their mission.
IT service providers & MSPsYour vCISO service, for every client.
Developers & agentsGive your agents a CISO, through API and MCP.
By need
Security questionnairesAnswered from your evidence, sources cited.
Cyber insuranceRenewal forms drafted, requirements in place.
NIS2, ISO 27001 & other obligationsSOC 2, TISAX, Cyber Essentials too: know what applies, get ready for the auditor.
IncidentsCalm, step-by-step response when something happens.
A security program from scratchA prioritized plan in plain words, then the follow-up.
Support for your CISOBacklog, drafts, evidence and reporting prep.
Somewhere in between? QoBot asks a few quick questions when you join.Join the waitlist
The new way to run cybersecurity

A CISO for your company,
without hiring one.

For companies of 250 to 4,999 people, QoBot does the CISO work your IT team can't fit in: priorities, policies, NIS2 measures, board updates, answers to customers. Your IT head approves and applies a few short, guided tasks a week, and management gets a clear status.

  • A security program with owners, deadlines and a weekly status
  • NIS2 scope and measures, with the texts to back them
  • Board updates and customer questionnaires drafted, you approve

Free desktop app · Your own AI: Claude subscription or API key

  • By the team behind Qontrol, Paris
  • macOS, Windows, Linux
  • Your data stays on your computer
QoBotWaitlist
1 of 6

Hi, I'm QoBot. You're joining the waitlist, and a few quick questions help me get ready for you.

You're a company, right? And how many people work there?

Stays in this browser until you share your email

QoBot at work

A program run every week,
with a clear task for each person.

QoBot keeps the plan: the next three actions, who does them, what they cost and why they matter, with the obligation behind each one.

The new way to run cybersecurity

A CISO on the team, without a new hire.

Mid-sized companies without a CISO used to load security onto the IT team, buy consulting days or buy a compliance platform. Now you can have a CISO on the team.

  1. Step 1

    Load it onto IT

    Your IT head and team handle security on top of everything else.

    Your IT team's time
  2. Step 2

    Buy consulting days

    An outsourced CISO or consultants, a few days a month.

    Billed by the day
  3. Step 3

    Buy a compliance platform

    Checklists, controls and dashboards, while your team still decides, writes and chases.

    An annual licence, plus your team's time
  4. Now

    An AI CISO on the team

    QoBot runs the program every day: priorities, policies, NIS2 measures, board updates. Your IT head approves and applies short tasks.

    Free on your computer, with your own AI
What changes

Four situations you know,
and what QoBot does with them.

Security is one more hat for our IT team.
Your cybersecurity, managed

A program with priorities, owners and a weekly status.

QoBot builds the plan, gives every action a named owner, follows up and sends a status every Monday. Your team applies without losing track.

Thomas (IT head): 4 actions this week, guides ready~1 h 30
NIS2 says management is accountable. Where do we start?
Obligations covered

Your NIS2 status, then the measures, one by one.

QoBot works out whether you are an essential or important entity, with the texts, and tells you when you need legal advice. Then it plans the measures and writes the policies.

Ines (CFO): confirm the scope with your lawyer~15 min
The board wants a ransomware status every quarter.
Management reassured

A clear status, decisions framed.

QoBot drafts a two-page note: where you stand, what moved, the decisions to take and what they cost. No jargon, sources attached.

The board: 2 decisions on November 4Nov 4
Our key accounts send us 200-question security questionnaires.
Customers reassured

Answers ready and sourced, your IT head approves.

QoBot drafts the answers from your policies and evidence, shows where each one comes from and sends the rest to the right person.

Thomas (IT head): 22 questions only IT can answer~20 min

What QoBot does

  • Plays the CISO: priorities, policies, the NIS2 plan
  • Drafts board notes and answers to customers
  • Plans, follows up owners and sends a status every Monday
  • Explains, and says honestly what's still open

What you do

  • Your IT head approves and applies, with step-by-step guides
  • Management decides on risks and budgets
  • Site managers apply the local actions
  • Everyone picks up the habits that matter

In practice: an hour or two a week for your IT team, each task with its duration. QoBot does the CISO work; decisions stay with you.

Why trust us

Before the first customer stories,
here is what we can tell you.

Honest by design
QoBot never invents evidence. It tells you what it knows, what it assumes, and when you need an auditor, a lawyer or your insurer.
QoBot, your AI CISO
  • Years of cybersecurity at Qontrol

    For years, Qontrol has helped companies and part-time CISOs run their cybersecurity. QoBot puts that know-how into an AI CISO that works with your IT team. Articule SAS, Paris.

  • A team you can reach

    A question before you sign up? One of the founders answers, from Paris.

  • Free, with your own AI

    The app is free. It runs on your Claude subscription or an API key from Anthropic, OpenAI or Mistral, and you pay your AI provider directly.

Desktop app

An app on your computer, where your data stays.

QoBot runs on macOS, Windows and Linux. Your security workspace is a folder on your computer with its full history: easy to back up and to keep under your own controls.

  • Your data goes only to your own AI, or wherever you approve
  • Cloud is the only hosted option, opt-in, hosted in France

NIS2, ISO 27001, GDPR, customer questionnaires: QoBot knows the frameworks and gets you ready for them.

  • NIS2
  • ISO 27001
  • GDPR
  • DORA
  • Customer questionnaires
FAQ

Your questions, straight answers.

Another question? Write to hello@qobot.io, one of the founders will answer.

How much time will it take from my IT team?

An hour or two a week, in short tasks with a stated duration. Priorities, writing and follow-ups are QoBot's work.

We don't have a CISO. Can QoBot play that role?

Yes: it runs the program like a CISO would, sets the priorities and writes the documents. Your IT head approves and applies; management makes the risk decisions.

Is it really free?

Yes. The QoBot app is free on macOS, Windows and Linux. It runs on your own AI: your Claude subscription, or an API key from Anthropic, OpenAI or Mistral. You pay your AI provider directly. Two paid plans come later: Cloud (QoBot always-on, hosted in France) and Team (several people, roles, shared approvals).

Where is my data?

On your computer. QoBot is a desktop app, and your security workspace is a folder on your machine with its full history. Your data goes only to your own AI provider, or wherever you approve. QoBot Cloud, hosted in France by OVHcloud, is an option you choose. More: where your data goes.

Is QoBot made for a company our size?

Yes. QoBot is built for companies of 250 to 4,999 people, often spread over several sites. Each action has a named owner on its site, and management gets one status for the whole company.

Will QoBot make us NIS2 compliant?

It gets you ready and does much of the work: scope, measures, policies, evidence. Supervision and certification are done by the authorities and auditors.

And when we hire a CISO?

QoBot becomes their teammate: it keeps the history, the policies and the plan, and takes the routine off their desk.

A CISO for your company, so your IT team keeps its days.

Sign up for free with a few closed questions and your email, or talk to the founders first.

Free desktop app · Your own AI: Claude subscription or API key

See an example: a NIS2 status note for the board

Mid-sized company profile pre-filled · unsubscribe in one click