The new way to run cybersecurity in the public sector

Your public body's cybersecurity,
finally managed.

QoBot does a CISO's job for your organisation, even on a tight budget: a prioritised action plan, IT providers followed up, reports for elected officials. Your officials decide, your staff apply a few short, guided tasks and stay focused on public service.

A prioritised action plan, sized to your budget
Clear notes so elected officials can decide
A progress update every week

Free desktop app · Your own AI: Claude subscription or API key

By the team behind Qontrol, Paris
Optional Cloud, hosted in France
Your data stays on your workstations
macOS, Windows, Linux

QoBotWaitlist

1 of 6

Hi, I'm QoBot. You're joining the waitlist, and a few quick questions help me get ready for you.

You're a local authority or another public body, right? And how many people work there?

This chat needs JavaScript. Turn it on and reload the page, or write to hello@qobot.io with "waitlist" in the subject and we'll add you.

QoBot at work

Clear documents,
each point backed by its evidence.

QoBot drafts the documents you send and cites the evidence for each point. Here, the answer to the insurer about multi-factor authentication.

QoBot

Northwind LogisticsOn this computer

Conversations

QoBot credits$3.42 left

Answer to the insurer: multi-factor authentication

For the renewal of policy CY-2291, question 4.2: “Is multi-factor authentication enforced for all email and remote access?”

Our answer

Multi-factor authentication is enforced on all 45 personal mailboxes since October 15, and on all 12 remote access (VPN) accounts. Our 3 shared mailboxes (accounting, sales, office) will have it by October 31.

Where it comes from

Access	Status	Evidence
Personal mailboxes	Enforced, 45 of 45	Microsoft 365 report, Oct 15
Remote access (VPN)	Enforced, 12 of 12	Access and passwords policy, v1.3
Shared mailboxes	In progress, due Oct 31	Action assigned to Hugo, IT

Who confirms

Claire, CEO, signs this answer. Hugo, IT, confirms the shared mailboxes once done.

Workspace

Answer to the insurer: multi-factor authentication
Document
Access and passwords
Policy · In use
Backups
Policy · In use
Using laptops and phones
Policy · Draft
Hartmann supplier questionnaire, open questions
Document

The new way to run cybersecurity

A CISO on the team, working for the public.

A public body's cybersecurity used to mean doing it in-house, buying consulting days or buying software. Now you can have a CISO on the team.

Step 1
Do it in-house
Spreadsheets, templates and your IT person or IT department, who also handles security.
Your staff's time
Step 2
Buy consulting days
A consultant, a shared CISO or days from your IT provider, a few days a month.
Billed by the day or through a membership
Step 3
Buy compliance software
Checklists and dashboards. Your staff decide what to do and write it up.
A subscription, plus your staff's time
Now
An AI CISO on the team
QoBot runs the program every day, knows NIS2 and GDPR, writes the notes for elected officials and follows up your IT providers. Officials decide, staff apply a few short tasks.
Free on your workstations, with your own AI

What changes

Three situations you live with,
and what QoBot does with them.

No CISO, no budget to hire one. It all rests on our IT person.

Your cybersecurity, managed

A prioritised action plan, sized to your budget.

QoBot ranks what best protects your public services for the least money. Your staff apply, it follows every action over time.

Nadia (IT): 3 actions, guides ready~1 h / week

Since the attack on the town next door, our elected officials ask where we stand.

Elected officials reassured

A clear report for every council meeting.

Notes for elected officials, board updates, answers to the national cybersecurity agency: written without jargon, sources attached. The officials decide.

Elected officials: 2 decisions at the council meetingThursday

Our IT provider does things. We don't really know which.

IT providers steered

You know what to ask them, and you check.

QoBot reads your contracts, drafts the requests and tracks the answers. Backups, updates, access: 7 commitments followed.

Central IT Services: proof of a backup restore testFriday

What QoBot does

Ranks actions by their impact on public services
Writes notes for officials, IT rules, the continuity plan, requests to providers
Plans, follows up and sends a weekly status
Explains, and says honestly what's still open

What your officials and staff do

Elected officials weigh the options and vote
Senior management approves what goes out in the organisation's name
Staff apply the actions, with short guides
Everyone picks up the right habits: report, lock, back up

Running the program is QoBot's job. Decisions and actions stay with your organisation, with a few short, explained tasks a week.

Your obligations, finally clear.

QoBot tells you what applies to your organisation, with the texts to back it.

NIS2

Essential entity, important entity, or out of scope?

QoBot analyses your situation, cites the texts and tells you when you need legal advice. Then it prepares what is expected.

GDPR

Your obligations met, with your DPO.

Record of processing, data breaches, requests from residents: QoBot prepares, your data protection officer approves.

Continuity of public services

If IT stops, everyone knows what to do.

Civil records, payroll, water, waste collection: a simple continuity plan that staff know and test once a year.

Sovereignty and trust

Made by a French company,
with data that stays under your control.

Desktop app

An app on your workstations, where your data stays.

QoBot installs on your departments' workstations (macOS, Windows, Linux). Your workspace is a local folder with its full history, easy to back up and to keep under your control.

Your data goes only to your own AI, or wherever you approve
Cloud, the only hosted option, is optional and located in France

A French company

QoBot is built in Paris by the team behind Qontrol (Articule SAS), which has helped organisations run their cybersecurity for years. QoBot puts that know-how into an AI CISO that works with your staff.

Free, with your own AI

The app is free. It runs on your Claude subscription or an API key, and you pay your AI provider directly.

Optional Cloud, in France

If you choose QoBot Cloud for continuous follow-up, your data is hosted in France, by OVHcloud.

Honest by design

QoBot never invents evidence. It tells you what it knows, what it assumes, and when you need an auditor, a lawyer or your insurer.

QoBot, your AI CISO

QoBot and your formal steps

It prepares your answers to the national cybersecurity agency or your supervising authority. Certification is the job of an accredited body.
It helps your DPO, your legal adviser and your IT provider work together.

FAQ

Questions public bodies ask us.

Another question? Write to hello@qobot.io, one of the founders will answer.

How much time does it take from our staff?

Little: a few short tasks a week, each with a stated duration. Running the program, writing and follow-ups are QoBot's work. Your staff's time stays on public service.

Are we in scope for NIS2?

It depends on the type of public body, its size and how your country transposed the directive. QoBot analyses your situation, cites the applicable texts and tells you when you need legal advice.

Does QoBot replace a CISO or our IT provider?

It plays the CISO role day to day and steers your IT provider, who stays in place. If you share a CISO with other bodies, QoBot works with them.

Where is our data?

On your workstations. QoBot is a desktop app, and your security workspace is a folder on your computers with its full history. Your data goes only to your own AI provider, or wherever you approve. QoBot Cloud, hosted in France by OVHcloud, is an option you choose. More: where your data goes.

Does it suit a small town?

Yes. QoBot sizes the plan to your means: a town hall with 8 staff gets a plan to match.

Is it really free?

Yes. The QoBot app is free on macOS, Windows and Linux. It runs on your own AI: your Claude subscription, or an API key from Anthropic, OpenAI or Mistral. You pay your AI provider directly. Two paid plans come later: Cloud (QoBot always-on, hosted in France) and Team (several people, roles, shared approvals).

How do we buy the paid plans?

For Cloud and Team, tell us about your public procurement constraints when you sign up, and we take them into account from now on.

Give your organisation a CISO.

Join the waitlist

Free desktop app · Your own AI: Claude subscription or API key

Public-sector profile pre-filled · unsubscribe in one click

Name	Purpose	Duration
qobot.consent	Your cookie choice (local storage)	6 months
qobot.attribution	The page or ad link that brought you here, sent only with a waitlist signup (session storage)	Until you close the tab
Waitlist chat	Your answers before you give your email (session storage)	Until you close the tab

Your public body's cybersecurity, finally managed.

Clear documents, each point backed by its evidence.