A European alliance already running in Sopra Steria's security operations centres in France and Norway.
Paris, 7 September 2026 – Cyberattacks no longer arrive one at a time. Bot-orchestrated campaigns now generate and mutate malware faster than most security teams can analyse it, changing the nature of the threat as much as its volume. To meet that shift, Sopra Steria is partnering with German software vendor VMRay, a European reference in advanced malware and phishing analysis. The technology is already running in the Group's security operations centres in France and Norway, where it processes close to 1,000 suspicious file analyses every month for clients including a major French industrial group.
A European ecosystem, and a stake in it
Sopra Steria has spent years building a European cyber ecosystem. With VMRay, European partners can now cover up to 30% of Sopra Steria's cybersecurity offering, alongside Sekoia, HarfangLab, Egerie and Glimps – all integrated and operated by Sopra Steria's own experts, in Europe.
What sets Sopra Steria apart is that it does not simply resell this technology. The Group is an indirect shareholder in VMRay through its stake in the specialist fund Tikehau Capital – a position no other European integrator holds. It shapes the roadmap, deploys the technology in its own SOCs and operates it for clients end to end.
Fabien Lecoq, Head of the Cybersecurity business line at Sopra Steria, said: "Our clients want technology that performs and that they can trust. With VMRay, we invest in it, we run it in our own SOCs and we operate it for them – that is what makes the difference. This partnership is a further step in our strategy to become a structuring European player in digital trust and resilience "
Dr. Carsten Willems, CEO and co-founder of VMRay, added: "Sopra Steria has built something increasingly rare, a European ecosystem where specialist technologies reinforce one another. Our part in it is deliberately focused. Since 2013, we have been going deeper on a single, hard problem: understanding what novel, evasive, and targeted threats actually do. And with this partnership, security teams can turn that depth into protection at scale."
When attacks are machine-generated, analysis becomes the bottleneck
Speed now decides the outcome. Security teams need to know what the attack is, how it operates and what it puts at risk – in minutes, not days. That is VMRay's core expertise. Founded in Germany in 2013, the company is the European benchmark in advanced malware analysis and completes the other threat intelligence solutions Sopra Steria already deploys – it sees what the other tools miss. Integrated into the Group's cyber offering, that depth cuts investigation time and strengthens critical infrastructure against the attacks that matter most.
Key takeaways
- Sopra Steria adds VMRay to its European cybersecurity ecosystem ; sovereign partners now cover 30% of Sopra Steria's cybersecurity offering
- Sopra Steria is an indirect shareholder in VMRay, not just a reseller: it invests in the technology, runs it in its own SOCs and operates it for clients.
- This partnership is already a reality on the ground: the solution is deployed within Sopra Steria's SOCs in France and Norway and used by a major French industrial group, with close to 1,000 suspicious file analyses carried out every month.