Legal Notice.

This site is published by Eshay Advisory, a firm providing cybersecurity advisory, security engineering and proprietary security software.

• Legal form and share capital: to be completed before publication
• Registered office: to be completed before publication
• Trade and companies register (RCS) and city of registration: to be completed before publication
• SIRET number: to be completed before publication
• Intra-community VAT number: to be completed before publication
• Principal activity code (APE/NAF): to be completed before publication

General enquiries: contact@eshay-advisory.com

The director of publication, within the meaning of Article 6-III of French Law no. 2004-575 of 21 June 2004 on confidence in the digital economy (LCEN), is to be completed before publication.

Editorial responsibility for the content of this site rests with the publisher.

This site is hosted by to be completed before publication.

• Legal form and registered office of the host: to be completed before publication
• Contact telephone number of the host: to be completed before publication
• Location of the servers: to be completed before publication

Under Article 6-I-2 of the LCEN, the host may be required to retain data enabling the identification of any person who contributed to the creation of content on this site.

France
8 rue de Berri
75008 Paris
+33 1 80 83 73 78

Israel
Gan HaTechnologia (Malha)
1 Agoudat Sport Hapoal
Jerusalem
+972 52 389 26 56

Correspondence relating to this site should be addressed to the French office or to contact@eshay-advisory.com.

This site presents the services, methodology and proprietary products of Eshay Advisory. It is an information and contact channel for professional clients, prospective clients, partners and candidates.

It is not a transactional site. No product is sold, no account is created and no payment is processed here.

Browsing this site implies acceptance of the terms set out on this page. If you do not accept them, please do not use the site.

You undertake not to attempt to gain unauthorised access to the site or its underlying infrastructure, not to disrupt its availability, and not to extract its content by automated means for the purpose of reconstituting a substantial part of it.

Security research conducted in good faith is welcome and is governed by section 14 below rather than by this clause.

The structure of this site, its texts, its visual identity, its typographic arrangements, its illustrations, its schematics, its iconography and its underlying software are the property of Eshay Advisory unless stated otherwise, and are protected by French and international intellectual property law.

Any reproduction, representation, adaptation, translation or distribution, in whole or in part and on any medium, requires the prior written authorisation of Eshay Advisory. Unauthorised use constitutes an infringement under Articles L.335-2 and following of the French Intellectual Property Code.

Quotation of short extracts for the purposes of review, teaching or news reporting is permitted, provided the source is clearly attributed and a link to this site is included.

DevSec Champions, Threat Sentinel and AgentForce Shield are proprietary products of Eshay Advisory. Their names, interfaces and associated visual elements may not be used without written authorisation.

Third-party names, marks and logos cited on this site — including but not limited to Salesforce, AgentForce, AWS, Microsoft Azure, Google Cloud, OWASP, ISO, NIST and MITRE ATT&CK — remain the property of their respective owners. They are used for descriptive and interoperability purposes only, and their mention implies no partnership, endorsement, certification or affiliation unless expressly stated.

Outbound links. This site may link to third-party resources. Eshay Advisory exercises no control over those sites and accepts no responsibility for their content, their availability or their privacy practices. A link does not constitute an endorsement.

Inbound links. Links to this site are permitted provided they open the page in a new context without framing, do not misrepresent the origin of the content, and do not associate Eshay Advisory with content contrary to public order or to its reputation. We reserve the right to request the removal of any link that does not meet these conditions.

We aim to keep this site available continuously, but no availability commitment is given. Access may be interrupted for maintenance, upgrade, security response or for reasons outside our control, without notice and without entitlement to compensation.

The information published here is provided for general information. It describes our services and methodology in general terms and does not constitute a security assessment of your environment, nor professional advice applicable to your specific situation. No advisory engagement arises from consulting this site.

We take reasonable care to keep the content accurate and current, but give no warranty of completeness, accuracy or fitness for a particular purpose. Any reliance you place on it is at your own risk.

To the extent permitted by law, Eshay Advisory shall not be liable for indirect or consequential loss arising from the use of this site, including loss of data, loss of profit or business interruption. Nothing in this notice excludes liability that cannot lawfully be excluded.

Processing of personal data carried out through this site is described in our Privacy Policy, which sets out what is collected, the legal basis for each purpose, retention periods, recipients, transfers and the rights you may exercise.

Requests relating to personal data: privacy@eshay-advisory.com.

The use of cookies and equivalent technologies on this site is described in our Cookie Policy.

This site makes no third-party requests. Fonts, stylesheets, scripts and images are served from our own origin, which means no external provider receives your IP address as a result of your visit.

We operate a coordinated disclosure policy. If you identify a security issue affecting this site or one of our products, write to security@eshay-advisory.com.

In scope: this website, its subdomains, and the DevSec Champions, Threat Sentinel and AgentForce Shield products where you have lawful access to them.

Out of scope: client environments we assess on their behalf, third-party services we merely use, findings that require physical access, social engineering of our staff or clients, denial-of-service testing, and reports produced solely by an automated scanner without a demonstrated impact.

What we ask: act in good faith, access only the minimum data necessary to demonstrate the issue, do not exfiltrate, alter or destroy data, do not degrade our service, and give us a reasonable period to remediate before any public disclosure.

What we commit to: acknowledgement within 48 hours, an initial assessment within five business days, regular status updates until closure, public credit if you wish it, and no legal action against researchers who respect the conditions above. We do not currently operate a paid bounty.

Under Article 6-I-5 of the LCEN, any person may report content they consider unlawful. Reports concerning this site should be sent to contact@eshay-advisory.com with a description of the content, its precise location and the legal grounds relied upon.

We draw attention to the fact that a knowingly abusive or false report is itself punishable under Article 6-I-4 of the same law.

This site is designed to meet WCAG 2.1 level AA: text and background contrast ratios are verified on every surface including over photography, the interface is operable by keyboard, focus is visible, images carry alternative text, headings follow a logical order, and motion is limited to a single entrance transition that is suppressed entirely when prefers-reduced-motion is set.

Content remains readable and navigable if JavaScript fails to load.

If you encounter an accessibility barrier, tell us at contact@eshay-advisory.com and we will correct it and confirm back to you.

Eshay Advisory holds professional indemnity insurance covering its advisory, testing and engineering activities.

• Insurer: to be completed before publication
• Policy number: to be completed before publication
• Geographical scope of cover: to be completed before publication

A certificate of insurance is provided on request during a procurement process.

This legal notice and the use of this site are governed by French law.

The parties will seek an amicable resolution of any dispute before referring it to a court. Failing agreement, and subject to any mandatory rule of jurisdiction to the contrary, the competent French courts shall have exclusive jurisdiction.

This site addresses professional clients. The consumer mediation scheme provided for in Articles L.611-1 and following of the French Consumer Code does not apply.

Design and development — Eshay Advisory.

Typography — Newsreader, Inter and IBM Plex Mono, published under the SIL Open Font License 1.1 and self-hosted on our own servers.

Iconography and schematics — drawn specifically for Eshay Advisory.

Photography — see the mention accompanying each image. Photographs are licensed for use on this site and may not be extracted from it.

This notice may be amended to reflect changes to the site, to our organisation or to the applicable law. The version in force is the one published on this page.

Current version 1.0, dated 5 August 2026.