CyberIndexBeta

Product

TEHTRIS EDR (EDR OPTIMUS) is an endpoint agent from French vendor TEHTRIS that combines endpoint detection and response with next-generation antivirus, using machine-learning engines and automated response. It is aimed at organisations. It runs on Linux, macOS and Windows. Among the capabilities recorded for it are behavioral detection, central management console, device control and heuristic detection. Its record also notes malware detection, ransomware protection and sandbox analysis. The stated market is Critical Infrastructure, Enterprise and Government.

Current Version
1.7.0.0
Market
Critical InfrastructureEnterpriseGovernment
Licence
Paid
Price
Paid · price unknown
Record Created
2026-08-20
Last Updated
2026-10-10

Vendor

TEHTRIS is a French security company founded in 2010 by Elena Poincet, formerly of the French external intelligence service, and Laurent Oudot. Its position is European and sovereign: the platform is developed in France, can be run entirely on the customer's own infrastructure, and holds French state certification, which is why it is bought by French government bodies and critical infrastructure operators. Its products are modules of one platform — the TEHTRIS XDR Platform — with TEHTRIS EDR and TEHTRIS EPP at the endpoint, listed here, and network detection, mobile, honeypot, SIEM and threat intelligence modules around them. Its emphasis is on automated response without a human in the loop, on the argument that attacks move faster than analysts can. The company previously traded as TEHTRI-Security, which also appears in this index under its older product name. Vendor page →

Country
France
Headquarters
Pessac, France
Year Established
2010
Customers
200 organisations
Users
700K devices protected
Revenue
≈ $6.4M (2021)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Critical Infrastructure secondaryEnterprise primaryGovernment secondary

Capabilities

Malware Detectionkeynative
Ransomware Protectionkeynative
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox Analysisnative
Cloud-Assisted ScanningNot known
Heuristic Detectionnative
Device Controlnative
Vulnerability ShieldingNot known
Central Management Consolenative

5 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPaidnot statedno recurring chargeNot known

Versions

  • 1.7.0.0Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

MITRE ATT&CK Evaluations (Enterprise)

2024-12-11lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

MITRE ATT&CK Evaluations (Enterprise)MITRE ATT&CK Evaluations — Enterprise 20242024-12-11
Technique-level detection: 22.5%Any detection: 46.2%Benign activity not alerted: 45%Attack sub-steps evaluated: 80

Certifications

OESIS Framework SupportSupported1 activeSupported

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-10-10Product updatedNo longer sold to: Consumerevidence
  • 2026-10-10Product updatedSold to: Enterpriseevidence
  • 2026-10-07Test result addedNew MITRE ATT&CK Evaluations (Enterprise) resultevidence
  • 2026-09-23Capability addedCentral Management Console: built inevidence
  • 2026-09-23Capability addedDevice Control: built inevidence
  • 2026-09-23Capability addedSandbox Analysis: built inevidence
  • 2026-09-23Capability addedHeuristic Detection: built inevidence
  • 2026-09-23Capability addedRansomware Protection: built inevidence
  • 2026-09-23Capability addedMalware Detection: built inevidence
  • 2026-09-23Product updatedAlso sold to: Governmentevidence
  • 2026-09-23Product updatedAlso sold to: Critical Infrastructureevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Home Antimalwareevidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Platform addedRuns on macOSevidence
  • 2026-09-09New versionNew version: 1.7.0.0 (Windows)evidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedBehavioral Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-08-20Product updatedAlso sold to: Consumerevidence
  • 2026-08-20New versionNew version: 1.7.0.0evidence
  • 2026-08-20Platform addedRuns on Windowsevidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.