Law 25 — run your compliance in our platform, 1 month free
About

A Montréal cybersecurity firm, built for SMEs

Detection, offensive testing, secure engineering and compliance — operated by named people, with verifiable certifications and a portal hosted in Canada.

Who we are

Clavéa is a cybersecurity firm based in Montréal. We operate detection, run offensive testing and guide compliance — ISO 27001 and Law 25 — for Québec SMEs that face the same threats as large organisations without the same resources.

We are a small team, on purpose: the people who sell the service are the people who deliver it. What we publish on this site is what we can actually stand behind — precise commitments are made in contracts, not slogans.

How we work

The portal is hosted in Canada

The portal and your compliance documents are hosted in Toronto. We tell you which operational tooling sits elsewhere instead of promising nothing ever leaves the country.

We monitor ourselves with the tools we sell

Our own infrastructure runs on the same detection and monitoring stack as our clients'. When it has a blind spot, we find it before you do.

Scope boundaries are published up front

Every service page states what is included and what is not, before the first call. Engagements that go wrong almost always start with fuzzy scope.

We take our own advice

Our ISMS is going through ISO 27001 certification on exactly the method we sell. The journey we propose to you is one we are living.

Certifications and standards
ISO 27001:2022 — our ISMS in certificationISO 27005ISO 22301eWPTXCRTPPJPTMITRE ATT&CKOWASP WSTG / ASVS / SAMMPTESCIS BenchmarksLaw 25

Come see how we work