FAQ

Check out our page Become a partner.

Access the Partner Portal.

Check out our page Join us.

Standard support handles requests and incidents according to a defined process. A TAM provides more consistent, contextualized guidance: they understand your environment, your priorities, and your history, and can help you get the most out of your solution over the long term.

The TAM is a named technical contact. Depending on the plan you choose, they are either dedicated to you or shared across a small number of clients. In both cases, it's an identified contact who knows your infrastructure, your teams and your priorities. The exact scope is set out in your contract.

The frequency of communication depends on the level of engagement defined with Tehtris. This may include regular sync meetings, technical discussions, or specific reviews, provided these terms are confirmed in the contract.

Depending on the defined scope, the TAM can prepare product updates, track recurring issues, propose configuration reviews, escalate priority requests, and support teams in optimizing their use of your solution.

Yes, when an organization wants to get more out of your Tehtris solution but lacks the internal resources to manage every technical detail. The TAM provides specialized support without replacing your internal security or IT teams.

No. The TAM is not intended to replace your internal teams. Instead, it supports them in using, prioritizing, and mastering your Tehtris solution, helping to strengthen their ability to leverage the platform within your specific environment.

Tehtris Academy is the cybersecurity training division of Tehtris, operating under the Cyber department.

Tehtris Academy is structured around three programs: the self-paced Tehtris Academy e-learning path for clients and partners, a Partner Training Program dedicated to our partners, and paid, industry-focused Premium Trainings.

No. Tehtris Academy is not a certifying body and does not issue official certifications.

However, the skills covered are assessed against external public standards and recognized frameworks to provide learners with a clear structure for measuring their progress.

Our training courses are led by experienced cybersecurity practitioners, including analysts, consultants, SOC experts, threat hunters, and specialists in DFIR, pentesting, or purple teaming, depending on the program. Many of our instructors also teach at universities and engineering schools.

Two out of three programs are free for customers and partners: the Tehtris Academy e-learning and the Partner Training Program. Premium Trainings are fee-based.

The curricula are based on the ENISA ECSF as the primary framework, with MITRE ATT&CK, NIST, and ANSSI serving as supplementary references. There are no internal frameworks.

The Premium curricula are WSA101 (Tehtris Essentials), SOC-OPS (IR/SOC Analyst), TH-ADV (Threat Intel & Hunting), and SOC-MGR (SOC Manager).

No, the Partner Training Program is exclusively for Tehtris partners. It is designed to train their technical teams so they can better support end customers.

No, the two complement each other. EPP prevents threats from executing in the first place, while EDR detects and responds to suspicious behavior that slips through. Tehtris EDR integrates both, managed from a single console. If you prefer to keep your current EPP, Tehtris EDR can also coexist with it.

Yes: from Windows XP to 11 and Server 2003 to 2025, in both 32 and 64-bit versions, as well as on Linux from kernel 2.6.18 and macOS from Sierra onwards.

Not necessarily. Without a SOC, policy-based automated response blocks and isolates threats without human intervention. With a team of analysts, you retain control over every decision and can fully leverage telemetry and investigation. Everything in between is configurable based on your team's maturity. And if you lack the resources to qualify alerts, our services can take over: MDR (Managed Detection and Response), a dedicated TAM (Technical Account Manager), and Professional Services.

‍

Depending on the configured policies, Tehtris EDR analyzes the event, classifies the behavior, and executes a response: for example, the malicious process is terminated, the workstation is isolated from the network, and an alert is sent to the console. The state of the workstation (processes, network connections) is preserved for investigation.

Yes. The analysis is based on metadata, hashes, and behavioral telemetry, not on the content of your documents. Only certain suspicious files, such as executables or scripts, may be uploaded for automated analysis within the Tehtris infrastructure. If your organization requires it, a setting is available to disable the uploading of Microsoft Office documents.

Data is hosted in Europe on OVHcloud infrastructure and remains stored within that environment. A SecNumCloud option is available.

Tehtris EDR relies on an agent designed to remain lightweight and unobtrusive in daily operations. To balance protection with performance, security policies can be fine-tuned for specific groups of machines. Our TAMs and Professional Services team are here to help you align these policies with your security goals and operational requirements.

Log in to your support portal to create a ticket or contact support-services@tehtris.com.