{"id":1689,"date":"2026-06-08T04:19:37","date_gmt":"2026-06-08T04:19:37","guid":{"rendered":"https:\/\/cortexorigin.com\/?page_id=1689"},"modified":"2026-07-09T16:27:36","modified_gmt":"2026-07-09T16:27:36","slug":"1689-2","status":"publish","type":"page","link":"https:\/\/cortexorigin.com\/index.php\/1689-2\/","title":{"rendered":""},"content":{"rendered":"\n\n\nMenu ORIGIN\u2122<\/title>\n<style>\n@import url('https:\/\/fonts.googleapis.com\/css2?family=DM+Sans:wght@400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap');\n \nbody { margin: 0; padding: 0; background: #F4F0EB; font-family: 'DM Sans', sans-serif; min-height: 600px; }\n \n\/* Wrapper full-width \u2014 isolation stricte (all:initial) + 100vw, identique \u00e0 .cidor-page\n pour \u00e9chapper aux contraintes de largeur du th\u00e8me WordPress et garantir le bandeau jusqu'aux bords. *\/\n.menu-bar-wrapper {\n all: initial;\n display: block;\n box-sizing: border-box;\n width: 100vw;\n position: relative;\n left: calc(50% - 50vw);\n background: #0C1829;\n z-index: 9999;\n font-family: 'DM Sans', sans-serif;\n}\n \n.menu-bar {\n width: 100%;\n background: #0C1829;\n padding: 0 2rem;\n display: flex;\n align-items: center;\n justify-content: space-between;\n position: relative;\n z-index: 100;\n box-sizing: border-box;\n}\n.menu-logo {\n font-family: 'DM Sans', sans-serif; font-weight: 700; font-size: 0.95rem;\n color: #fff; padding: 1rem 0; letter-spacing: 0.03em; white-space: nowrap;\n}\n.menu-logo span { color: #C9A96E; }\n.menu-items { display: flex; align-items: center; gap: 0; }\n \n\/* \u2500\u2500 AETZU ARROW AI BUTTON \u2500\u2500 *\/\n.menu-aetzu {\n display: flex; align-items: center;\n padding: 0.45rem 1rem;\n background: rgba(201,169,110,0.12);\n border: 1px solid rgba(201,169,110,0.35);\n border-radius: 3px;\n font-family: 'JetBrains Mono', monospace;\n font-size: 0.65rem; font-weight: 500;\n letter-spacing: 0.08em; text-transform: uppercase;\n color: #C9A96E;\n text-decoration: none;\n transition: all 0.25s;\n white-space: nowrap;\n gap: 0.5rem;\n}\n.menu-aetzu::before {\n content: '\u2b21';\n font-size: 0.75rem;\n opacity: 0.7;\n}\n.menu-aetzu::after {\n content: '\u25be';\n margin-left: 0.4rem;\n font-size: 0.6rem;\n opacity: 0.55;\n}\n.menu-aetzu-wrap {\n position: relative;\n display: flex;\n align-items: center;\n padding: 1rem 0;\n margin-right: 0.5rem;\n}\n.menu-aetzu-wrap:hover .menu-dropdown-aetzu { display: block; }\n.menu-dropdown-aetzu {\n display: none; position: absolute; top: 100%; left: 0;\n background: #0C1829; border: 1px solid rgba(74,144,217,0.15);\n border-top: 2px solid #C9A96E; border-radius: 0 0 4px 4px;\n min-width: 360px; padding: 0.8rem 0; z-index: 99999;\n box-shadow: 0 12px 40px rgba(0,0,0,0.4);\n}\n.menu-aetzu:hover {\n background: rgba(201,169,110,0.25);\n border-color: rgba(201,169,110,0.6);\n color: #fff;\n}\n \n\/* \u2500\u2500 CORTEX WEB & API BUTTON \u2500\u2500 *\/\n.menu-webapi {\n display: flex; align-items: center;\n padding: 0.45rem 1rem;\n background: rgba(201,169,110,0.12);\n border: 1px solid rgba(201,169,110,0.35);\n border-radius: 3px;\n font-family: 'JetBrains Mono', monospace;\n font-size: 0.65rem; font-weight: 500;\n letter-spacing: 0.08em; text-transform: uppercase;\n color: #C9A96E;\n text-decoration: none;\n transition: all 0.25s;\n white-space: nowrap;\n gap: 0.5rem;\n}\n.menu-webapi::before {\n content: '\u25a3';\n font-size: 0.75rem;\n opacity: 0.7;\n}\n.menu-webapi::after {\n content: '\u25be';\n margin-left: 0.4rem;\n font-size: 0.6rem;\n opacity: 0.55;\n}\n.menu-webapi-wrap {\n position: relative;\n display: flex;\n align-items: center;\n padding: 1rem 0;\n margin-right: 0.5rem;\n}\n.menu-webapi-wrap:hover .menu-dropdown-webapi { display: block; }\n.menu-dropdown-webapi {\n display: none; position: absolute; top: 100%; left: 0;\n background: #0C1829; border: 1px solid rgba(74,144,217,0.15);\n border-top: 2px solid #C9A96E; border-radius: 0 0 4px 4px;\n min-width: 360px; padding: 0.8rem 0; z-index: 99999;\n box-shadow: 0 12px 40px rgba(0,0,0,0.4);\n}\n.menu-webapi:hover {\n background: rgba(201,169,110,0.25);\n border-color: rgba(201,169,110,0.6);\n color: #fff;\n}\n \n\/* \u2500\u2500 CORTEX APP\u00c2T & LEURRE BUTTON (avec dropdown \u2014 BAITS \/ EAS) \u2500\u2500 *\/\n.menu-appat-wrap {\n position: relative;\n display: flex;\n align-items: center;\n padding: 1rem 0;\n margin-right: 0.5rem;\n}\n.menu-appat {\n display: flex; align-items: center;\n padding: 0.45rem 1rem;\n background: rgba(201,169,110,0.12);\n border: 1px solid rgba(201,169,110,0.35);\n border-radius: 3px;\n font-family: 'JetBrains Mono', monospace;\n font-size: 0.65rem; font-weight: 500;\n letter-spacing: 0.08em; text-transform: uppercase;\n color: #C9A96E;\n text-decoration: none;\n transition: all 0.25s;\n white-space: nowrap;\n gap: 0.5rem;\n}\n.menu-appat::before {\n content: '\u2b22';\n font-size: 0.7rem;\n opacity: 0.7;\n}\n.menu-appat::after {\n content: '\u25be';\n margin-left: 0.4rem;\n font-size: 0.6rem;\n opacity: 0.55;\n}\n.menu-appat:hover {\n background: rgba(201,169,110,0.25);\n border-color: rgba(201,169,110,0.6);\n color: #fff;\n}\n.menu-appat-wrap:hover .menu-dropdown-appat { display: block; }\n.menu-dropdown-appat {\n display: none; position: absolute; top: 100%; left: 0;\n background: #0C1829; border: 1px solid rgba(74,144,217,0.15);\n border-top: 2px solid #C9A96E; border-radius: 0 0 4px 4px;\n min-width: 360px; padding: 0.8rem 0; z-index: 99999;\n box-shadow: 0 12px 40px rgba(0,0,0,0.4);\n}\n \n\/* \u2500\u2500 CORTEX NK BUTTON (avec dropdown) \u2500\u2500 *\/\n.menu-cortexnk-wrap {\n position: relative;\n display: flex;\n align-items: center;\n padding: 1rem 0;\n margin-right: 0.5rem;\n}\n.menu-cortexnk {\n display: flex; align-items: center;\n padding: 0.45rem 1rem;\n background: rgba(201,169,110,0.12);\n border: 1px solid rgba(201,169,110,0.35);\n border-radius: 3px;\n font-family: 'JetBrains Mono', monospace;\n font-size: 0.65rem; font-weight: 500;\n letter-spacing: 0.08em; text-transform: uppercase;\n color: #C9A96E;\n text-decoration: none;\n transition: all 0.25s;\n white-space: nowrap;\n gap: 0.5rem;\n}\n.menu-cortexnk::before {\n content: '\u25c6';\n font-size: 0.7rem;\n opacity: 0.7;\n}\n.menu-cortexnk::after {\n content: '\u25be';\n margin-left: 0.4rem;\n font-size: 0.6rem;\n opacity: 0.55;\n}\n.menu-cortexnk:hover {\n background: rgba(201,169,110,0.25);\n border-color: rgba(201,169,110,0.6);\n color: #fff;\n}\n.menu-cortexnk-wrap:hover .menu-dropdown-cortexnk { display: block; }\n.menu-dropdown-cortexnk {\n display: none; position: absolute; top: 100%; left: 0;\n background: #0C1829; border: 1px solid rgba(74,144,217,0.15);\n border-top: 2px solid #C9A96E; border-radius: 0 0 4px 4px;\n min-width: 360px; padding: 0.8rem 0; z-index: 99999;\n box-shadow: 0 12px 40px rgba(0,0,0,0.4);\n}\n \n\/* \u2500\u2500 SECURE BOOT BUTTON (avec dropdown) \u2500\u2500 *\/\n.menu-secureboot-wrap {\n position: relative;\n display: flex;\n align-items: center;\n padding: 1rem 0;\n margin-right: 0.5rem;\n}\n.menu-secureboot {\n display: flex; align-items: center;\n padding: 0.45rem 1rem;\n background: rgba(201,169,110,0.12);\n border: 1px solid rgba(201,169,110,0.35);\n border-radius: 3px;\n font-family: 'JetBrains Mono', monospace;\n font-size: 0.65rem; font-weight: 500;\n letter-spacing: 0.08em; text-transform: uppercase;\n color: #C9A96E;\n text-decoration: none;\n transition: all 0.25s;\n white-space: nowrap;\n gap: 0.5rem;\n}\n.menu-secureboot::before {\n content: '\u26bf';\n font-size: 0.75rem;\n opacity: 0.7;\n}\n.menu-secureboot::after {\n content: '\u25be';\n margin-left: 0.4rem;\n font-size: 0.6rem;\n opacity: 0.55;\n}\n.menu-secureboot:hover {\n background: rgba(201,169,110,0.25);\n border-color: rgba(201,169,110,0.6);\n color: #fff;\n}\n.menu-secureboot-wrap:hover .menu-dropdown-secureboot { display: block; }\n.menu-dropdown-secureboot {\n display: none; position: absolute; top: 100%; left: 0;\n background: #0C1829; border: 1px solid rgba(74,144,217,0.15);\n border-top: 2px solid #C9A96E; border-radius: 0 0 4px 4px;\n min-width: 360px; padding: 0.8rem 0; z-index: 99999;\n box-shadow: 0 12px 40px rgba(0,0,0,0.4);\n}\n \n\/* \u2500\u2500 BENCHMARK BUTTON (avec dropdown) \u2500\u2500 *\/\n.menu-benchmark-wrap {\n position: relative;\n display: flex;\n align-items: center;\n padding: 1rem 0;\n margin-right: 0.5rem;\n}\n.menu-benchmark {\n display: flex; align-items: center;\n padding: 0.45rem 1rem;\n background: rgba(74,144,217,0.10);\n border: 1px solid rgba(74,144,217,0.30);\n border-radius: 3px;\n font-family: 'JetBrains Mono', monospace;\n font-size: 0.65rem; font-weight: 500;\n letter-spacing: 0.08em; text-transform: uppercase;\n color: rgba(184,212,240,0.85);\n text-decoration: none;\n transition: all 0.25s;\n white-space: nowrap;\n gap: 0.5rem;\n}\n.menu-benchmark::before {\n content: '\u25c8';\n font-size: 0.7rem;\n opacity: 0.65;\n}\n.menu-benchmark:hover {\n background: rgba(74,144,217,0.22);\n border-color: rgba(74,144,217,0.55);\n color: #fff;\n}\n.menu-benchmark-wrap:hover .menu-dropdown-benchmark { display: block; }\n.menu-dropdown-benchmark {\n display: none; position: absolute; top: 100%; left: 0;\n background: #0C1829; border: 1px solid rgba(74,144,217,0.15);\n border-top: 2px solid #C9A96E; border-radius: 0 0 4px 4px;\n min-width: 320px; padding: 0.8rem 0; z-index: 99999;\n box-shadow: 0 12px 40px rgba(0,0,0,0.4);\n}\n \n.menu-item {\n position: relative; padding: 1rem 1rem;\n font-size: 0.78rem; font-weight: 500; color: rgba(184,212,240,0.75);\n cursor: pointer; letter-spacing: 0.02em; transition: color 0.2s;\n white-space: nowrap;\n}\n.menu-item:hover { color: #fff; }\n.menu-item::after {\n content: '\u25be'; margin-left: 0.3rem; font-size: 0.6rem; opacity: 0.5;\n}\n.menu-item.no-drop::after { content: ''; }\n.menu-cta {\n font-family: 'JetBrains Mono', monospace; font-size: 0.65rem; font-weight: 500;\n letter-spacing: 0.08em; text-transform: uppercase;\n padding: 0.5rem 1.2rem; border-radius: 2px;\n background: rgba(201,169,110,0.15); color: #C9A96E; border: 1px solid rgba(201,169,110,0.3);\n cursor: pointer; transition: all 0.3s; white-space: nowrap;\n}\n.menu-cta:hover { background: rgba(201,169,110,0.25); color: #fff; }\n \n.menu-dropdown {\n display: none; position: absolute; top: 100%; left: 0;\n background: #0C1829; border: 1px solid rgba(74,144,217,0.15);\n border-top: 2px solid #C9A96E; border-radius: 0 0 4px 4px;\n min-width: 320px; padding: 0.8rem 0; z-index: 99999;\n box-shadow: 0 12px 40px rgba(0,0,0,0.4);\n}\n.menu-item:hover .menu-dropdown { display: block; }\n.menu-dropdown a {\n display: block; padding: 0.5rem 1.5rem; font-size: 0.8rem; color: rgba(184,212,240,0.6);\n text-decoration: none; transition: all 0.2s; line-height: 1.5;\n}\n.menu-dropdown a:hover { color: #fff; background: rgba(74,144,217,0.08); }\n.menu-dropdown .drop-label {\n font-family: 'JetBrains Mono', monospace; font-size: 0.58rem; font-weight: 600;\n letter-spacing: 0.15em; color: #C9A96E; text-transform: uppercase;\n padding: 0.6rem 1.5rem 0.3rem; display: block;\n}\n.menu-dropdown .drop-sep {\n border: none; border-top: 1px solid rgba(74,144,217,0.08);\n margin: 0.5rem 1.5rem;\n}\n \n.menu-dropdown a.drop-highlight {\n display: flex; align-items: center; justify-content: space-between;\n margin: 0.4rem 0.8rem 0.2rem;\n padding: 0.55rem 1rem;\n background: rgba(201,169,110,0.08);\n border: 1px solid rgba(201,169,110,0.2);\n border-radius: 3px;\n color: #C9A96E;\n font-weight: 600; font-size: 0.78rem;\n transition: all 0.2s;\n}\n.menu-dropdown a.drop-highlight:hover {\n background: rgba(201,169,110,0.18); color: #fff; border-color: rgba(201,169,110,0.45);\n}\n.drop-highlight-arrow { font-size: 0.65rem; opacity: 0.6; margin-left: 8px; }\n \n.menu-dropdown a.drop-sim {\n display: flex; align-items: center; justify-content: space-between;\n margin: 0.25rem 0.8rem;\n padding: 0.5rem 1rem;\n background: rgba(74,144,217,0.06);\n border: 1px solid rgba(74,144,217,0.18);\n border-radius: 3px;\n color: rgba(184,212,240,0.85);\n font-size: 0.78rem;\n transition: all 0.2s;\n}\n.menu-dropdown a.drop-sim:hover {\n background: rgba(74,144,217,0.14); color: #fff; border-color: rgba(74,144,217,0.4);\n}\n.drop-sim-icon { font-size: 0.7rem; opacity: 0.55; margin-left: 8px; }\n.mega-dropdown {\n display: none; position: absolute; top: 100%; left: -100px;\n background: #0C1829; border: 1px solid rgba(74,144,217,0.15);\n border-top: 2px solid #C9A96E; border-radius: 0 0 4px 4px;\n width: 640px; padding: 1.5rem; z-index: 99999;\n box-shadow: 0 12px 40px rgba(0,0,0,0.4);\n}\n.menu-item:hover .mega-dropdown { display: block; }\n.mega-cols { display: grid; grid-template-columns: 1fr 1fr; gap: 0 2rem; }\n.mega-col .drop-label { padding: 0 0 0.3rem; }\n.mega-col a {\n display: block; padding: 0.35rem 0; font-size: 0.78rem; color: rgba(184,212,240,0.6);\n text-decoration: none; transition: color 0.2s;\n}\n.mega-col a:hover { color: #fff; }\n.mega-col a.drop-highlight {\n margin: 0.5rem 0 0.2rem; padding: 0.5rem 0.8rem;\n background: rgba(201,169,110,0.08); border: 1px solid rgba(201,169,110,0.2);\n border-radius: 3px; color: #C9A96E; font-weight: 600;\n display: flex; align-items: center; justify-content: space-between;\n}\n.mega-col a.drop-highlight:hover {\n background: rgba(201,169,110,0.18); color: #fff; border-color: rgba(201,169,110,0.45);\n}\n.mega-col a.drop-sim {\n margin: 0.35rem 0; padding: 0.45rem 0.8rem;\n background: rgba(74,144,217,0.06); border: 1px solid rgba(74,144,217,0.18);\n border-radius: 3px; color: rgba(184,212,240,0.85);\n display: flex; align-items: center; justify-content: space-between;\n font-size: 0.78rem;\n}\n.mega-col a.drop-sim:hover {\n background: rgba(74,144,217,0.14); color: #fff; border-color: rgba(74,144,217,0.4);\n}\n\/* \u2500\u2500 BOUTON INVESTISSEURS (CTA primaire, dor\u00e9 plein) \u2500\u2500 *\/\n.menu-investor {\n font-family: 'JetBrains Mono', monospace; font-size: 0.65rem; font-weight: 600;\n letter-spacing: 0.08em; text-transform: uppercase;\n padding: 0.5rem 1.2rem; border-radius: 2px;\n background: #C9A96E; color: #0C1829; border: 1px solid #C9A96E;\n cursor: pointer; transition: all 0.3s; white-space: nowrap; margin-right: 0.6rem;\n text-decoration: none; display: inline-block;\n}\n.menu-investor:hover { background: #d9bd87; border-color: #d9bd87; }\n.preview-hint {\n text-align: center; color: #6b7280; font-family: 'JetBrains Mono', monospace;\n font-size: 0.7rem; padding: 3rem 1rem 1rem; letter-spacing: 0.05em;\n}\n.preview-hint strong { color: #C9A96E; }\n<\/style>\n \n \n \n<div class=\"menu-bar-wrapper\">\n<div class=\"menu-bar\">\n <div class=\"menu-logo\"><span>ORIGIN\u2122<\/span><\/div>\n <div class=\"menu-items\">\n \n <!-- AETZU ARROW AI (avec dropdown) -->\n <div class=\"menu-aetzu-wrap\">\n <a href=\"https:\/\/cortexorigin.com\/index.php\/aetzu-arrow-ai\/\" class=\"menu-aetzu\">\n AETZU ARROW AI\u2122\n <\/a>\n <div class=\"menu-dropdown menu-dropdown-aetzu\">\n <span class=\"drop-label\">AETZU ARROW AI<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/aetzu-arrow-ai\/\" class=\"drop-sim\">\n AETZU ARROW AI\u2122 \u00b7 D\u00e9fense active\n <span class=\"drop-sim-icon\">\u2197<\/span>\n <\/a>\n <hr class=\"drop-sep\">\n <span class=\"drop-label\">Analyse strat\u00e9gique<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/marche-et-positionnement-2\/\" class=\"drop-highlight\">\n March\u00e9 et positionnement\n <span class=\"drop-highlight-arrow\">\u2197<\/span>\n <\/a>\n <\/div>\n <\/div>\n \n <!-- WEB & API (avec dropdown) -->\n <div class=\"menu-webapi-wrap\">\n <a href=\"https:\/\/cortexorigin.com\/index.php\/cortex-idor\/\" class=\"menu-webapi\">\n WEB & API\n <\/a>\n <div class=\"menu-dropdown menu-dropdown-webapi\">\n <span class=\"drop-label\">Web & API<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/cortex-idor\/\" class=\"drop-sim\">\n IDOR \u00b7 Passerelle d’autorisation\n <span class=\"drop-sim-icon\">\u2197<\/span>\n <\/a>\n <hr class=\"drop-sep\">\n <span class=\"drop-label\">Analyse strat\u00e9gique<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/1689-2\/\" class=\"drop-highlight\">\n March\u00e9 et positionnement\n <span class=\"drop-highlight-arrow\">\u2197<\/span>\n <\/a>\n <\/div>\n <\/div>\n \n <!-- APP\u00c2T & LEURRE (avec dropdown \u2014 BAITS \/ EAS) -->\n <div class=\"menu-appat-wrap\">\n <a href=\"https:\/\/cortexorigin.com\/index.php\/appat-leurre-lanterne\/\" class=\"menu-appat\">\n APP\u00c2T & LEURRE\n <\/a>\n <div class=\"menu-dropdown menu-dropdown-appat\">\n <span class=\"drop-label\">Famille App\u00e2t & Leurre<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/appat-leurre-lanterne\/\" class=\"drop-sim\">\n App\u00e2t & Leurre \u00b7 Vue d’ensemble\n <span class=\"drop-sim-icon\">\u2197<\/span>\n <\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/baist\/\" class=\"drop-highlight\">\n BAITS \u00b7 D\u00e9ception active\n <span class=\"drop-highlight-arrow\">\u2197<\/span>\n <\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/cortex-eas\/\" class=\"drop-highlight\">\n EAS \u00b7 Surface d’attaque externe\n <span class=\"drop-highlight-arrow\">\u2197<\/span>\n <\/a>\n <hr class=\"drop-sep\">\n <span class=\"drop-label\">Analyse strat\u00e9gique<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/marche-positionnement\/\" class=\"drop-sim\">\n March\u00e9 & positionnement\n <span class=\"drop-sim-icon\">\u2197<\/span>\n <\/a>\n <\/div>\n <\/div>\n \n <!-- NK (avec dropdown) -->\n <div class=\"menu-cortexnk-wrap\">\n <a href=\"https:\/\/cortexorigin.com\/index.php\/cortex-nk\/\" class=\"menu-cortexnk\">\n NOYAU NK\n <\/a>\n <div class=\"menu-dropdown menu-dropdown-cortexnk\">\n <span class=\"drop-label\">Famille NK<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/cortex-nk\/\" class=\"drop-sim\">\n NK \u00b7 Micronoyau souverain\n <span class=\"drop-sim-icon\">\u2197<\/span>\n <\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/cortex-nk-3d\/\" class=\"drop-highlight\">\n NK 3D \u00b7 Cybers\u00e9curit\u00e9 active\n <span class=\"drop-highlight-arrow\">\u2197<\/span>\n <\/a>\n <hr class=\"drop-sep\">\n <span class=\"drop-label\">Secure Boot<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/cortex-nk-secure-boot\/\" class=\"drop-sim\">\n Secure Boot S1-S10 \u00b7 Module natif\n <span class=\"drop-sim-icon\">\u2197<\/span>\n <\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/secure-boot-tf-a-post-quantique\/\" class=\"drop-highlight\">\n Secure Boot TF-A \u00b7 Post-Quantique\n <span class=\"drop-highlight-arrow\">\u2197<\/span>\n <\/a>\n <hr class=\"drop-sep\">\n <span class=\"drop-label\">Analyse strat\u00e9gique<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/marche-et-positionnement\/\" class=\"drop-sim\">\n March\u00e9 & positionnement\n <span class=\"drop-sim-icon\">\u2197<\/span>\n <\/a>\n <\/div>\n <\/div>\n \n <!-- BENCHMARK (avec dropdown D\u00c9MONSTRATION) -->\n <div class=\"menu-benchmark-wrap\">\n <a href=\"https:\/\/cortexorigin.com\/index.php\/mttd-benchmark-v2-0-aetzu-arrow-ai\/\" class=\"menu-benchmark\">\n Benchmark\n <\/a>\n <div class=\"menu-dropdown menu-dropdown-benchmark\">\n <span class=\"drop-label\">D\u00e9monstration<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/demonstration-cortex-nk-2\/\" class=\"drop-highlight\">\n D\u00c9MONSTRATION NK\n <span class=\"drop-highlight-arrow\">\u2197<\/span>\n <\/a>\n <hr class=\"drop-sep\">\n <span class=\"drop-label\">Capacit\u00e9s<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/cryptographie\/\" class=\"drop-sim\">\n Cryptographie\n <span class=\"drop-sim-icon\">\u2197<\/span>\n <\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/secure-boot\/\" class=\"drop-sim\">\n Secure Boot\n <span class=\"drop-sim-icon\">\u2197<\/span>\n <\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/auto-containment-2\/\" class=\"drop-sim\">\n Auto-Containment\n <span class=\"drop-sim-icon\">\u2197<\/span>\n <\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/audit-log-immuable\/\" class=\"drop-sim\">\n Audit Log Immuable\n <span class=\"drop-sim-icon\">\u2197<\/span>\n <\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/attestation-et-orchestration-post-quantique\/\" class=\"drop-sim\">\n Mesh v1\n <span class=\"drop-sim-icon\">\u2197<\/span>\n <\/a>\n <\/div>\n <\/div>\n \n <!-- V\u00c9RIFICATION (m\u00e9ga-d\u00e9roulant \u2014 preuve \/ CFVL) -->\n <div class=\"menu-item\">\n V\u00e9rification\n <div class=\"mega-dropdown\" style=\"width:680px; left:auto; right:0;\">\n <div class=\"mega-cols\">\n <div class=\"mega-col\">\n <span class=\"drop-label\">CFVL \u2014 Laboratoire formel<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/689-2\/\">CFVL \u2014 Page principale<\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/841-2\/\">Journal R&D<\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/833-2\/\">Publications & \u00e9valuations<\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/827-2\/\">M\u00e9thodologie<\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/rapport-mttd-mttb\/\">Rapport MTTD \/ MTTB<\/a>\n <hr class=\"drop-sep\" style=\"margin:0.6rem 0\">\n <span class=\"drop-label\" style=\"padding:0.4rem 0 0.3rem\">Recherche<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/604-2\/\">AGI Exp\u00e9rimental<\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/cortex-origin-2\/\">MVP<\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/814-2\/\">IA expliqu\u00e9e simplement<\/a>\n <\/div>\n <div class=\"mega-col\">\n <span class=\"drop-label\">Simulations interactives<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/test\/\" class=\"drop-sim\">\n Simulations Attaque\n <span class=\"drop-sim-icon\">\u26a1<\/span>\n <\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/simulation\/\" class=\"drop-sim\">\n Sch\u00e9ma & Simulations\n <span class=\"drop-sim-icon\">\u25ce<\/span>\n <\/a>\n <hr class=\"drop-sep\" style=\"margin:0.6rem 0\">\n <span class=\"drop-label\" style=\"padding:0.4rem 0 0.3rem\">Tableaux de bord<\/span>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/mttd-benchmark-v2-0-aetzu-arrow-ai\/\" class=\"drop-highlight\">\n MTTD Benchmark v2.0\n <span class=\"drop-highlight-arrow\">\u2197<\/span>\n <\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/1043-2\/\" class=\"drop-highlight\">\n Evaluation Dashboard\n <span class=\"drop-highlight-arrow\">\u2197<\/span>\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n <!-- INVESTISSEURS (lien \u00e0 ajouter ult\u00e9rieurement) -->\n <a href=\"https:\/\/cortexorigin.com\/index.php\/investisseurs-partenaires-strategiques\/\" class=\"menu-investor\">Investisseurs<\/a>\n \n <!-- CTA -->\n <a href=\"mailto:press@cortexorigin.com\" style=\"text-decoration:none\">\n <div class=\"menu-cta\">Contact<\/div>\n <\/a>\n \n <\/div>\n<\/div>\n<\/div>\n \n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<!-- ============================================================\n CORTEX IDOR\u2122 \u2014 March\u00e9 & positionnement\n Charte CORTEX NK 3D \u00b7 \u00c9diteur : CORTEX AI\u2122 SAS\n Auteur : David Salomon \u2014 Fondateur & CEO, CORTEX AI\u2122 SAS\n ============================================================ -->\n<style>\n@import url('https:\/\/fonts.googleapis.com\/css2?family=Playfair+Display:ital,wght@0,400;0,500;1,400;1,500&family=Inter:wght@300;400;500;600&display=swap');\n \n:root {\n --navy: #0a1628;\n --navy-deep: #060f1e;\n --navy-light: #15233a;\n --cream: #f0e9dc;\n --cream-bright: #f7f1e5;\n --cream-warm: #e8ddc8;\n --gold: #d4a857;\n --gold-bright: #e4bd6d;\n --gold-soft: #b89042;\n --accent-blue: #5a7a9e;\n --text-on-dark: #f0e9dc;\n --text-on-dark-muted: #b8bdc7;\n --text-on-dark-faint: #8590a3;\n --text-on-light: #0a1628;\n --text-on-light-muted: #4a5568;\n --text-on-light-faint: #6a7280;\n --border-dark: #1d2c44;\n --border-light: #d8cdb6;\n --check: #4a9d65;\n --cross: #b85450;\n --partial: #c9a961;\n}\n \n\/* \u2500\u2500\u2500\u2500\u2500 WORDPRESS-KILLER \u00b7 pleine largeur \u2500\u2500\u2500\u2500\u2500 *\/\n.entry-title, .page-title, h1.wp-block-heading:first-child { display: none !important; }\n.entry-content, .post-content, .wp-block-group, .wp-block-group__inner-container,\n.is-layout-constrained > *, .is-layout-flow > * {\n max-width: none !important; width: 100% !important;\n padding-left: 0 !important; padding-right: 0 !important;\n margin-left: 0 !important; margin-right: 0 !important;\n}\n.cidm-fullwidth-wrapper { all: initial; display: block; }\n.cidm-fullwidth-wrapper * { box-sizing: border-box; }\n.cidm-page-wrapper {\n width: 100vw; position: relative; left: 50%; transform: translateX(-50%);\n overflow-x: hidden;\n font-family: 'Inter', -apple-system, BlinkMacSystemFont, system-ui, sans-serif;\n background: var(--cream); color: var(--text-on-light);\n line-height: 1.7; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale;\n}\n.cidm-page-wrapper * { box-sizing: border-box; margin: 0; padding: 0; }\n \n.cidm-page-wrapper h1, .cidm-page-wrapper h2, .cidm-page-wrapper h3, .cidm-page-wrapper h4 {\n font-family: 'Playfair Display', Georgia, serif; font-weight: 400; letter-spacing: -0.005em;\n}\n.cidm-page-wrapper a { color: var(--accent-blue); text-decoration: none; transition: color .2s ease; }\n.cidm-page-wrapper a:hover { color: var(--gold-soft); }\n.cidm-page-wrapper .eyebrow {\n font-family: 'Inter', sans-serif; font-size: .78rem; font-weight: 500;\n letter-spacing: .22em; text-transform: uppercase;\n}\n.cidm-page-wrapper .container { max-width: 1200px; margin: 0 auto; padding: 0 2rem; }\n.cidm-page-wrapper .container-wide { max-width: 1400px; margin: 0 auto; padding: 0 2rem; }\n \n\/* NAV *\/\n.cidm-page-wrapper .nav {\n position: sticky; top: 0; left: 0; right: 0;\n background: rgba(10,22,40,.95); backdrop-filter: blur(20px); -webkit-backdrop-filter: blur(20px);\n border-bottom: 1px solid var(--border-dark); z-index: 100; padding: 1.1rem 0;\n}\n.cidm-page-wrapper .nav-inner { display: flex; justify-content: space-between; align-items: center; max-width: 1200px; margin: 0 auto; padding: 0 2rem; flex-wrap: wrap; gap: .8rem; }\n.cidm-page-wrapper .nav-logo { font-family: 'Playfair Display', serif; font-size: 1.25rem; font-weight: 500; letter-spacing: .04em; color: var(--cream); }\n.cidm-page-wrapper .nav-logo .accent { color: var(--gold); font-style: italic; }\n.cidm-page-wrapper .nav-links { display: flex; gap: 2.2rem; font-size: .78rem; letter-spacing: .15em; text-transform: uppercase; font-weight: 500; align-items: center; }\n.cidm-page-wrapper .nav-links a { color: var(--text-on-dark-muted); }\n.cidm-page-wrapper .nav-links a:hover { color: var(--gold); }\n.cidm-page-wrapper .nav-links a.back { color: var(--gold); }\n@media (max-width: 820px) { .cidm-page-wrapper .nav-links { display: none; } }\n \n\/* HERO *\/\n.cidm-page-wrapper .hero { background: var(--navy); color: var(--text-on-dark); padding: 7rem 2rem 5rem; position: relative; overflow: hidden; }\n.cidm-page-wrapper .hero-bg { position: absolute; inset: 0; opacity: .025; background-image:\n repeating-linear-gradient(0deg, transparent, transparent 80px, var(--gold) 80px, var(--gold) 81px),\n repeating-linear-gradient(90deg, transparent, transparent 80px, var(--gold) 80px, var(--gold) 81px); pointer-events: none; }\n.cidm-page-wrapper .hero-inner { max-width: 1100px; margin: 0 auto; position: relative; z-index: 1; }\n.cidm-page-wrapper .hero-overline { display: inline-block; margin-bottom: 1.6rem; font-size: .78rem; letter-spacing: .18em; text-transform: uppercase; color: var(--gold); font-weight: 500; }\n.cidm-page-wrapper .hero h1 { font-size: clamp(2.4rem, 5vw, 4rem); font-weight: 400; line-height: 1.1; letter-spacing: -.02em; margin-bottom: 1.2rem; color: var(--cream-bright); }\n.cidm-page-wrapper .hero h1 em { display: block; font-style: italic; color: var(--gold); font-weight: 500; font-size: .55em; margin-top: .6rem; }\n.cidm-page-wrapper .hero-subtitle { font-size: clamp(1.02rem, 1.6vw, 1.25rem); color: var(--text-on-dark-muted); font-weight: 300; line-height: 1.6; max-width: 860px; }\n.cidm-page-wrapper .hero-subtitle i { color: var(--gold-bright); font-style: italic; }\n \n\/* SECTIONS *\/\n.cidm-page-wrapper section { padding: 5.5rem 0; position: relative; }\n.cidm-page-wrapper section.cream { background: var(--cream); color: var(--text-on-light); }\n.cidm-page-wrapper section.cream-warm { background: var(--cream-warm); color: var(--text-on-light); }\n.cidm-page-wrapper section.navy { background: var(--navy); color: var(--text-on-dark); }\n.cidm-page-wrapper section.navy-deep { background: var(--navy-deep); color: var(--text-on-dark); }\n \n.cidm-page-wrapper .section-header { max-width: 920px; margin: 0 auto 3.5rem; text-align: center; }\n.cidm-page-wrapper section.navy .section-header .eyebrow, .cidm-page-wrapper section.navy-deep .section-header .eyebrow { color: var(--gold); }\n.cidm-page-wrapper section.cream .section-header .eyebrow, .cidm-page-wrapper section.cream-warm .section-header .eyebrow { color: var(--accent-blue); }\n.cidm-page-wrapper .section-eyebrow { display: inline-block; margin-bottom: 1.1rem; }\n.cidm-page-wrapper .section-title { font-size: clamp(1.9rem, 4vw, 2.9rem); font-weight: 400; line-height: 1.15; letter-spacing: -.015em; margin-bottom: 1.3rem; }\n.cidm-page-wrapper .section-title em { font-style: italic; font-weight: 500; }\n.cidm-page-wrapper section.navy .section-title em, .cidm-page-wrapper section.navy-deep .section-title em { color: var(--gold); }\n.cidm-page-wrapper section.cream .section-title em, .cidm-page-wrapper section.cream-warm .section-title em { color: var(--gold-soft); }\n.cidm-page-wrapper .section-subtitle { font-size: 1.02rem; font-weight: 300; line-height: 1.7; max-width: 760px; margin: 0 auto; }\n.cidm-page-wrapper section.navy .section-subtitle, .cidm-page-wrapper section.navy-deep .section-subtitle { color: var(--text-on-dark-muted); }\n.cidm-page-wrapper section.cream .section-subtitle, .cidm-page-wrapper section.cream-warm .section-subtitle { color: var(--text-on-light-muted); }\n.cidm-page-wrapper .section-subtitle b { color: var(--gold-soft); font-weight: 500; }\n.cidm-page-wrapper section.navy .section-subtitle b, .cidm-page-wrapper section.navy-deep .section-subtitle b { color: var(--gold); }\n \n\/* SUBLABEL (intra-section) *\/\n.cidm-page-wrapper .sublabel { font-size: .72rem; letter-spacing: .18em; text-transform: uppercase; font-weight: 600; color: var(--gold-soft); margin: 2.6rem auto 1.2rem; max-width: 1100px; }\n.cidm-page-wrapper section.navy .sublabel, .cidm-page-wrapper section.navy-deep .sublabel { color: var(--gold); }\n \n\/* GENERIC CARDS *\/\n.cidm-page-wrapper .lcard { background: var(--cream-bright); border: 1px solid var(--border-light); border-radius: 4px; padding: 2rem; transition: all .25s ease; }\n.cidm-page-wrapper .lcard:hover { border-color: var(--gold); box-shadow: 0 8px 24px rgba(10,22,40,.06); }\n.cidm-page-wrapper .dcard { background: var(--navy-light); border: 1px solid var(--border-dark); border-radius: 4px; padding: 2rem; transition: all .25s ease; }\n.cidm-page-wrapper .dcard:hover { border-color: var(--gold); transform: translateY(-2px); }\n \n\/* CALLOUTS *\/\n.cidm-page-wrapper .callout { max-width: 1000px; margin: 2.5rem auto 0; padding: 2rem 2.4rem; background: var(--navy); border-left: 3px solid var(--gold); border-radius: 0 4px 4px 0; color: var(--text-on-dark-muted); font-size: 1rem; line-height: 1.75; }\n.cidm-page-wrapper .callout b, .cidm-page-wrapper .callout strong { color: var(--cream); font-weight: 500; }\n.cidm-page-wrapper section.navy .callout, .cidm-page-wrapper section.navy-deep .callout { background: rgba(212,168,87,.07); }\n.cidm-page-wrapper .callout-light { max-width: 1000px; margin: 2.5rem auto 0; padding: 1.8rem 2.4rem; background: rgba(10,22,40,.04); border-left: 3px solid var(--gold); border-radius: 0 4px 4px 0; color: var(--text-on-light-muted); font-size: .98rem; line-height: 1.75; }\n.cidm-page-wrapper .callout-light b { color: var(--navy); font-weight: 500; }\n \n\/* FINEPRINT \/ sources *\/\n.cidm-page-wrapper .fineprint { max-width: 1100px; margin: 1.4rem auto 0; font-size: .76rem; line-height: 1.65; letter-spacing: .01em; }\n.cidm-page-wrapper section.cream .fineprint, .cidm-page-wrapper section.cream-warm .fineprint { color: var(--text-on-light-faint); }\n.cidm-page-wrapper section.navy .fineprint, .cidm-page-wrapper section.navy-deep .fineprint { color: var(--text-on-dark-faint); }\n.cidm-page-wrapper .fineprint b { color: var(--gold-soft); font-weight: 600; }\n.cidm-page-wrapper section.navy .fineprint b, .cidm-page-wrapper section.navy-deep .fineprint b { color: var(--gold); }\n.cidm-page-wrapper .note-box { max-width: 1100px; margin: 1.6rem auto 0; padding: 1.3rem 1.6rem; border-radius: 4px; font-size: .86rem; line-height: 1.7; }\n.cidm-page-wrapper section.cream .note-box, .cidm-page-wrapper section.cream-warm .note-box { background: rgba(10,22,40,.04); color: var(--text-on-light-muted); }\n.cidm-page-wrapper section.navy .note-box, .cidm-page-wrapper section.navy-deep .note-box { background: rgba(212,168,87,.05); color: var(--text-on-dark-muted); }\n.cidm-page-wrapper .note-box b { color: var(--gold-soft); font-weight: 500; }\n.cidm-page-wrapper section.navy .note-box b, .cidm-page-wrapper section.navy-deep .note-box b { color: var(--gold); }\n \n\/* PROOF BAND (Validation technique) *\/\n.cidm-page-wrapper .proof-band { display: grid; grid-template-columns: repeat(5, 1fr); gap: 1.2rem; max-width: 1100px; margin: 0 auto; }\n@media (max-width: 900px) { .cidm-page-wrapper .proof-band { grid-template-columns: repeat(2, 1fr); } }\n.cidm-page-wrapper .proof-cell { background: var(--cream-bright); border: 1px solid var(--border-light); border-radius: 4px; padding: 1.6rem 1.3rem; text-align: center; }\n.cidm-page-wrapper .proof-cell.pending { border-style: dashed; border-color: var(--gold-soft); background: rgba(212,168,87,.06); }\n.cidm-page-wrapper .proof-cell .n { font-family: 'Playfair Display', serif; font-size: 2rem; font-weight: 500; color: var(--gold-soft); line-height: 1; margin-bottom: .6rem; }\n.cidm-page-wrapper .proof-cell .l { font-size: .82rem; color: var(--text-on-light-muted); line-height: 1.45; }\n \n\/* MARKET GRID (tam-like, dark) *\/\n.cidm-page-wrapper .tam-grid { display: grid; grid-template-columns: repeat(2, 1fr); gap: 1.5rem; max-width: 1100px; margin: 0 auto; }\n@media (max-width: 800px) { .cidm-page-wrapper .tam-grid { grid-template-columns: 1fr; } }\n.cidm-page-wrapper .tam-card .tlabel { font-size: .7rem; color: var(--gold); letter-spacing: .16em; text-transform: uppercase; font-weight: 600; margin-bottom: .9rem; }\n.cidm-page-wrapper .tam-card .tval { font-family: 'Playfair Display', serif; font-size: 2.6rem; font-weight: 500; color: var(--gold); line-height: 1; margin-bottom: .2rem; }\n.cidm-page-wrapper .tam-card .tval small { font-size: .35em; color: var(--text-on-dark-faint); font-style: italic; margin-left: .4rem; letter-spacing: .05em; }\n.cidm-page-wrapper .tam-card h3 { font-size: 1.12rem; font-weight: 500; color: var(--cream); margin: .4rem 0 .8rem; }\n.cidm-page-wrapper .tam-card p { color: var(--text-on-dark-muted); font-size: .9rem; line-height: 1.65; }\n.cidm-page-wrapper .tam-card p b { color: var(--cream); font-weight: 500; }\n.cidm-page-wrapper .tam-card .src { display: block; margin-top: 1.2rem; padding-top: 1rem; border-top: 1px solid var(--border-dark); font-size: .7rem; color: var(--text-on-dark-faint); line-height: 1.5; }\n \n\/* OWASP coverage (dark) *\/\n.cidm-page-wrapper .owbar { display: flex; gap: 1.6rem; flex-wrap: wrap; align-items: baseline; max-width: 1100px; margin: 0 auto 1rem; font-size: .82rem; color: var(--text-on-dark-muted); }\n.cidm-page-wrapper .owbar .big { font-family: 'Playfair Display', serif; font-size: 1.9rem; font-weight: 500; color: var(--gold); }\n.cidm-page-wrapper .owbar .dy { color: var(--check); } .cidm-page-wrapper .owbar .dp { color: var(--partial); } .cidm-page-wrapper .owbar .dn { color: var(--cross); }\n.cidm-page-wrapper .owasp { display: grid; grid-template-columns: repeat(2, 1fr); gap: 0 1.6rem; max-width: 1100px; margin: 0 auto; background: var(--navy-light); border: 1px solid var(--border-dark); border-radius: 4px; padding: 1rem 1.6rem; }\n@media (max-width: 800px) { .cidm-page-wrapper .owasp { grid-template-columns: 1fr; } }\n.cidm-page-wrapper .owasp .it { display: flex; align-items: baseline; gap: .6rem; font-size: .86rem; color: var(--text-on-dark-muted); padding: .5rem 0; border-bottom: 1px solid var(--border-dark); }\n.cidm-page-wrapper .owasp .it .p { font-weight: 700; flex: none; width: 14px; text-align: center; }\n.cidm-page-wrapper .owasp .it .p.y { color: var(--check); } .cidm-page-wrapper .owasp .it .p.pa { color: var(--partial); } .cidm-page-wrapper .owasp .it .p.no { color: var(--cross); }\n.cidm-page-wrapper .owasp .it .code { font-family: 'Inter', sans-serif; font-size: .72rem; font-weight: 700; color: var(--gold); flex: none; letter-spacing: .03em; }\n.cidm-page-wrapper .owasp .it small { color: var(--text-on-dark-faint); font-size: .72rem; }\n \n\/* SHIFT (Hier\/Aujourd'hui) *\/\n.cidm-page-wrapper .shift { display: grid; grid-template-columns: 1fr 1fr; gap: 1.5rem; max-width: 1000px; margin: 0 auto; }\n@media (max-width: 700px) { .cidm-page-wrapper .shift { grid-template-columns: 1fr; } }\n.cidm-page-wrapper .shift .col { background: var(--cream-bright); border: 1px solid var(--border-light); border-radius: 4px; padding: 1.8rem; }\n.cidm-page-wrapper .shift .col.new { border-left: 3px solid var(--gold); }\n.cidm-page-wrapper .shift .hd { font-family: 'Playfair Display', serif; font-style: italic; font-size: 1.1rem; color: var(--navy); margin-bottom: 1rem; }\n.cidm-page-wrapper .shift .col.new .hd { color: var(--gold-soft); }\n.cidm-page-wrapper .shift ul { list-style: none; }\n.cidm-page-wrapper .shift li { font-size: .92rem; color: var(--text-on-light-muted); padding: .35rem 0 .35rem 1.2rem; position: relative; }\n.cidm-page-wrapper .shift li::before { content: '\u2014'; position: absolute; left: 0; color: var(--gold-soft); }\n \n\/* BREACH TABLE (light) *\/\n.cidm-page-wrapper .tw { max-width: 1200px; margin: 0 auto; overflow-x: auto; border-radius: 4px; }\n.cidm-page-wrapper .breach { width: 100%; min-width: 760px; border-collapse: collapse; background: var(--cream-bright); border: 1px solid var(--border-light); border-radius: 4px; overflow: hidden; font-size: .9rem; }\n.cidm-page-wrapper .breach thead { background: rgba(10,22,40,.06); }\n.cidm-page-wrapper .breach th { padding: 1rem 1.1rem; text-align: left; font-family: 'Inter', sans-serif; font-size: .68rem; font-weight: 600; letter-spacing: .14em; text-transform: uppercase; color: var(--accent-blue); border-bottom: 1px solid var(--border-light); }\n.cidm-page-wrapper .breach td { padding: .9rem 1.1rem; border-bottom: 1px solid var(--border-light); color: var(--text-on-light-muted); line-height: 1.55; vertical-align: top; }\n.cidm-page-wrapper .breach tr:last-child td { border-bottom: none; }\n.cidm-page-wrapper .breach td.yr { font-family: 'Inter', sans-serif; font-weight: 600; color: var(--gold-soft); white-space: nowrap; }\n.cidm-page-wrapper .breach td.tgt { font-weight: 600; color: var(--navy); }\n.cidm-page-wrapper .breach td.sc { font-family: 'Playfair Display', serif; font-style: italic; color: var(--navy); white-space: nowrap; }\n.cidm-page-wrapper .breach td.sc small { font-style: normal; font-size: .7rem; color: var(--text-on-light-faint); }\n.cidm-page-wrapper .breach td.mc { font-size: .86rem; }\n.cidm-page-wrapper .breach td.mc b { color: var(--navy); }\n.cidm-page-wrapper .breach .tag { display: inline-block; font-family: 'Inter', sans-serif; font-size: .62rem; font-weight: 700; letter-spacing: .08em; text-transform: uppercase; color: var(--gold-soft); background: rgba(212,168,87,.14); padding: .15rem .5rem; border-radius: 3px; margin-right: .5rem; }\n \n\/* TIMING (dark) *\/\n.cidm-page-wrapper .timing-grid { display: grid; grid-template-columns: repeat(2, 1fr); gap: 1.5rem; max-width: 1000px; margin: 0 auto; }\n@media (max-width: 800px) { .cidm-page-wrapper .timing-grid { grid-template-columns: 1fr; } }\n.cidm-page-wrapper .timing-item .yr { font-family: 'Playfair Display', serif; font-style: italic; font-size: 1.7rem; font-weight: 500; color: var(--gold); line-height: 1; margin-bottom: .7rem; }\n.cidm-page-wrapper .timing-item h3 { font-size: 1.1rem; font-weight: 500; color: var(--cream); margin-bottom: .7rem; }\n.cidm-page-wrapper .timing-item p { color: var(--text-on-dark-muted); font-size: .9rem; line-height: 1.65; }\n.cidm-page-wrapper .timing-item p b { color: var(--cream); font-weight: 500; }\n \n\/* ROI (light) *\/\n.cidm-page-wrapper .roi-grid { display: grid; grid-template-columns: repeat(3, 1fr); gap: 1.4rem; max-width: 1150px; margin: 0 auto; }\n@media (max-width: 900px) { .cidm-page-wrapper .roi-grid { grid-template-columns: 1fr; } }\n.cidm-page-wrapper .roi h3 { font-size: 1.04rem; font-weight: 500; color: var(--navy); margin-bottom: .7rem; line-height: 1.35; }\n.cidm-page-wrapper .roi p { color: var(--text-on-light-muted); font-size: .9rem; line-height: 1.65; }\n.cidm-page-wrapper .roi p b { color: var(--navy); font-weight: 500; }\n \n\/* FUNNEL (dark) *\/\n.cidm-page-wrapper .funnel { max-width: 1000px; margin: 0 auto; display: flex; flex-direction: column; gap: 1rem; align-items: center; }\n.cidm-page-wrapper .funnel .lvl { width: 100%; background: var(--navy-light); border: 1px solid var(--border-dark); border-radius: 4px; padding: 1.4rem 1.8rem; }\n.cidm-page-wrapper .funnel .l2 { width: 86%; } .cidm-page-wrapper .funnel .l3 { width: 72%; border-color: var(--gold-soft); }\n.cidm-page-wrapper .funnel .t { font-size: .68rem; letter-spacing: .16em; text-transform: uppercase; font-weight: 600; color: var(--gold); margin-bottom: .5rem; }\n.cidm-page-wrapper .funnel .n { font-family: 'Playfair Display', serif; font-size: 1.15rem; color: var(--cream); margin-bottom: .5rem; line-height: 1.3; }\n.cidm-page-wrapper .funnel .d { font-size: .86rem; color: var(--text-on-dark-muted); line-height: 1.6; }\n@media (max-width: 700px) { .cidm-page-wrapper .funnel .l2, .cidm-page-wrapper .funnel .l3 { width: 100%; } }\n \n\/* SEGMENTS (dark) *\/\n.cidm-page-wrapper .segments { display: grid; grid-template-columns: repeat(2, 1fr); gap: 1.4rem; max-width: 1100px; margin: 0 auto; }\n@media (max-width: 800px) { .cidm-page-wrapper .segments { grid-template-columns: 1fr; } }\n.cidm-page-wrapper .segment { background: var(--navy-light); border: 1px solid var(--border-dark); border-radius: 4px; padding: 2rem; transition: all .25s ease; }\n.cidm-page-wrapper .segment:hover { border-color: var(--gold); transform: translateY(-2px); }\n.cidm-page-wrapper .segment .shead { display: flex; justify-content: space-between; align-items: baseline; gap: .6rem; flex-wrap: wrap; margin-bottom: 1rem; padding-bottom: 1rem; border-bottom: 1px solid var(--border-dark); }\n.cidm-page-wrapper .segment .sname { font-family: 'Playfair Display', serif; font-size: 1.25rem; font-weight: 500; color: var(--cream); }\n.cidm-page-wrapper .segment .stk { font-size: .76rem; color: var(--gold); letter-spacing: .04em; font-weight: 500; white-space: nowrap; }\n.cidm-page-wrapper .segment .svol { font-family: 'Playfair Display', serif; font-style: italic; color: var(--gold-bright); font-size: 1.05rem; margin-bottom: .15rem; }\n.cidm-page-wrapper .segment .svl { font-size: .76rem; color: var(--text-on-dark-faint); margin-bottom: .9rem; }\n.cidm-page-wrapper .segment .sbd { color: var(--text-on-dark-muted); font-size: .9rem; line-height: 1.65; margin-bottom: 1rem; }\n.cidm-page-wrapper .segment .pill { display: inline-block; font-size: .68rem; letter-spacing: .1em; text-transform: uppercase; font-weight: 600; color: var(--gold-soft); border: 1px solid var(--border-dark); border-radius: 999px; padding: .3rem .9rem; }\n \n\/* MATRIX (concurrence, light) *\/\n.cidm-page-wrapper .matrix { width: 100%; min-width: 880px; border-collapse: collapse; background: var(--cream-bright); border: 1px solid var(--border-light); border-radius: 4px; overflow: hidden; font-size: .88rem; }\n.cidm-page-wrapper .matrix thead { background: rgba(10,22,40,.06); }\n.cidm-page-wrapper .matrix th { padding: 1.1rem .9rem; text-align: center; font-family: 'Playfair Display', serif; font-size: .92rem; font-weight: 500; color: var(--navy); border-bottom: 2px solid var(--gold); vertical-align: bottom; line-height: 1.3; }\n.cidm-page-wrapper .matrix th small { display: block; font-family: 'Inter', sans-serif; font-weight: 400; font-size: .68rem; color: var(--text-on-light-faint); margin-top: .3rem; }\n.cidm-page-wrapper .matrix th:first-child { text-align: left; color: var(--accent-blue); font-family: 'Inter', sans-serif; font-size: .68rem; font-weight: 600; letter-spacing: .14em; text-transform: uppercase; min-width: 230px; }\n.cidm-page-wrapper .matrix th.cx { background: rgba(212,168,87,.14); color: var(--gold-soft); }\n.cidm-page-wrapper .matrix td { padding: .85rem .9rem; text-align: center; color: var(--text-on-light-muted); border-bottom: 1px solid var(--border-light); vertical-align: middle; }\n.cidm-page-wrapper .matrix td:first-child { text-align: left; color: var(--navy); font-weight: 500; font-size: .86rem; }\n.cidm-page-wrapper .matrix td:first-child b { color: var(--gold-soft); }\n.cidm-page-wrapper .matrix tr:last-child td { border-bottom: none; }\n.cidm-page-wrapper .matrix td.cx { background: rgba(212,168,87,.06); }\n.cidm-page-wrapper .matrix .ck { color: var(--check); font-weight: 700; font-size: 1.05rem; }\n.cidm-page-wrapper .matrix .cr { color: var(--cross); font-weight: 700; font-size: 1.05rem; }\n.cidm-page-wrapper .matrix .pa { color: var(--partial); font-weight: 700; font-size: 1.05rem; }\n.cidm-page-wrapper .matrix .ts { display: block; font-size: .68rem; color: var(--text-on-light-faint); line-height: 1.3; margin-top: .2rem; }\n \n\/* DIFF blocks (dark) *\/\n.cidm-page-wrapper .diff { display: grid; grid-template-columns: 1fr 1fr; gap: 1.5rem; max-width: 1100px; margin: 0 auto; }\n@media (max-width: 800px) { .cidm-page-wrapper .diff { grid-template-columns: 1fr; } }\n.cidm-page-wrapper .diff .b { background: var(--navy-light); border: 1px solid var(--border-dark); border-left: 3px solid var(--accent-blue); border-radius: 4px; padding: 2rem; }\n.cidm-page-wrapper .diff .b h4 { font-size: 1.08rem; font-weight: 500; color: var(--cream); margin-bottom: .9rem; }\n.cidm-page-wrapper .diff .b p { color: var(--text-on-dark-muted); font-size: .92rem; line-height: 1.65; margin-bottom: 1rem; }\n.cidm-page-wrapper .diff .b p b { color: var(--cream); font-weight: 500; }\n.cidm-page-wrapper .diff .b .hon { font-size: .8rem; color: var(--text-on-dark-faint); line-height: 1.6; border-top: 1px solid var(--border-dark); padding-top: .9rem; }\n.cidm-page-wrapper .diff .b .hon b { color: var(--gold); }\n \n\/* VS comparison table (light) *\/\n.cidm-page-wrapper .vs-table { width: 100%; border-collapse: collapse; background: var(--cream-bright); border: 1px solid var(--border-light); border-radius: 4px; overflow: hidden; }\n.cidm-page-wrapper .vs-table thead { background: rgba(10,22,40,.06); }\n.cidm-page-wrapper .vs-table th { padding: 1.1rem 1.4rem; text-align: left; font-family: 'Inter', sans-serif; font-size: .68rem; font-weight: 600; letter-spacing: .14em; text-transform: uppercase; color: var(--accent-blue); border-bottom: 1px solid var(--border-light); }\n.cidm-page-wrapper .vs-table th:nth-child(2), .cidm-page-wrapper .vs-table th:nth-child(3) { font-family: 'Playfair Display', serif; font-style: italic; font-size: .96rem; font-weight: 500; text-transform: none; letter-spacing: 0; color: var(--navy); }\n.cidm-page-wrapper .vs-table th:nth-child(3) { color: var(--gold-soft); }\n.cidm-page-wrapper .vs-table td { padding: 1rem 1.4rem; border-bottom: 1px solid var(--border-light); font-size: .88rem; color: var(--text-on-light-muted); line-height: 1.6; vertical-align: top; }\n.cidm-page-wrapper .vs-table td:first-child { font-weight: 500; color: var(--navy); font-size: .84rem; width: 22%; }\n.cidm-page-wrapper .vs-table td b { color: var(--navy); }\n.cidm-page-wrapper .vs-table tr:last-child td { border-bottom: none; }\n.cidm-page-wrapper .vs-table .cxc { width: 39%; background: rgba(212,168,87,.05); }\n.cidm-page-wrapper .vs-table .cxc b { color: var(--gold-soft); }\n \n\/* QUADRANTS (territoire, dark section) *\/\n.cidm-page-wrapper .quadrants { display: grid; grid-template-columns: repeat(2, 1fr); gap: 1.4rem; max-width: 1000px; margin: 0 auto; }\n@media (max-width: 700px) { .cidm-page-wrapper .quadrants { grid-template-columns: 1fr; } }\n.cidm-page-wrapper .quadrant { background: var(--navy-light); border: 1px solid var(--border-dark); border-radius: 4px; padding: 1.8rem; }\n.cidm-page-wrapper .quadrant.win { background: var(--navy-deep); border-color: var(--gold); }\n.cidm-page-wrapper .quadrant .ql { font-size: .66rem; letter-spacing: .16em; text-transform: uppercase; font-weight: 600; color: var(--accent-blue); margin-bottom: .7rem; }\n.cidm-page-wrapper .quadrant.win .ql { color: var(--gold); }\n.cidm-page-wrapper .quadrant h4 { font-size: 1.05rem; font-weight: 500; color: var(--cream); margin-bottom: .6rem; }\n.cidm-page-wrapper .quadrant.win h4 { font-style: italic; color: var(--gold-bright); }\n.cidm-page-wrapper .quadrant p { font-size: .86rem; line-height: 1.6; color: var(--text-on-dark-muted); }\n \n\/* BARRIERS (light) *\/\n.cidm-page-wrapper .barriers { display: grid; grid-template-columns: repeat(2, 1fr); gap: 1.4rem; max-width: 1100px; margin: 0 auto; }\n@media (max-width: 800px) { .cidm-page-wrapper .barriers { grid-template-columns: 1fr; } }\n.cidm-page-wrapper .barrier .num { font-family: 'Playfair Display', serif; font-style: italic; font-size: 2rem; font-weight: 500; color: var(--gold); line-height: 1; margin-bottom: .6rem; }\n.cidm-page-wrapper .barrier h3 { font-size: 1.08rem; font-weight: 500; color: var(--navy); margin-bottom: .6rem; }\n.cidm-page-wrapper .barrier p { color: var(--text-on-light-muted); font-size: .9rem; line-height: 1.65; }\n \n\/* CTA *\/\n.cidm-page-wrapper .cta { text-align: center; padding: 6rem 2rem; background: var(--navy); position: relative; overflow: hidden; }\n.cidm-page-wrapper .cta::before { content: ''; position: absolute; inset: 0; opacity: .025; background-image: repeating-linear-gradient(45deg, transparent, transparent 60px, var(--gold) 60px, var(--gold) 61px); pointer-events: none; }\n.cidm-page-wrapper .cta-content { position: relative; z-index: 1; max-width: 760px; margin: 0 auto; }\n.cidm-page-wrapper .cta h2 { font-size: clamp(1.7rem, 4vw, 2.6rem); font-weight: 400; margin-bottom: 1.1rem; color: var(--cream); }\n.cidm-page-wrapper .cta h2 em { font-style: italic; color: var(--gold); }\n.cidm-page-wrapper .cta p { font-size: 1.02rem; color: var(--text-on-dark-muted); margin-bottom: 2.5rem; line-height: 1.7; }\n.cidm-page-wrapper .btn { display: inline-block; padding: 1.05rem 2.4rem; border-radius: 2px; font-family: 'Inter', sans-serif; font-size: .8rem; font-weight: 500; letter-spacing: .18em; text-transform: uppercase; transition: all .2s ease; background: var(--gold); color: var(--navy); border: 1px solid var(--gold); }\n.cidm-page-wrapper .btn:hover { background: var(--gold-bright); border-color: var(--gold-bright); color: var(--navy); transform: translateY(-1px); }\n \n\/* FOOTER *\/\n.cidm-page-wrapper footer { background: var(--navy-deep); border-top: 1px solid var(--border-dark); padding: 3.5rem 2rem 2rem; }\n.cidm-page-wrapper .footer-inner { max-width: 1200px; margin: 0 auto 2.5rem; }\n.cidm-page-wrapper .footer-brand h4 { font-family: 'Playfair Display', serif; font-size: 1.3rem; font-weight: 500; margin-bottom: 1rem; color: var(--cream); }\n.cidm-page-wrapper .footer-brand h4 .accent { font-style: italic; color: var(--gold); }\n.cidm-page-wrapper .footer-brand p { color: var(--text-on-dark-muted); font-size: .9rem; line-height: 1.7; max-width: 720px; }\n.cidm-page-wrapper .footer-bottom { max-width: 1200px; margin: 0 auto; padding-top: 1.8rem; border-top: 1px solid var(--border-dark); display: flex; justify-content: space-between; align-items: center; flex-wrap: wrap; gap: 1rem; font-size: .74rem; color: var(--text-on-dark-faint); line-height: 1.6; }\n<\/style>\n \n<div class=\"cidm-fullwidth-wrapper\">\n<div class=\"cidm-page-wrapper\">\n \n<!-- NAV -->\n<nav class=\"nav\">\n <div class=\"nav-inner\">\n <div class=\"nav-logo\">CORTEX <span class=\"accent\">IDOR\u2122<\/span><\/div>\n <div class=\"nav-links\">\n <a href=\"#marche\">March\u00e9<\/a>\n <a href=\"#segments\">Segments<\/a>\n <a href=\"#concurrence\">Concurrence<\/a>\n <a href=\"#contact\">Contact<\/a>\n <a href=\"https:\/\/cortexorigin.com\/index.php\/cortex-idor\/\" class=\"back\">\u2190 Retour \u00e0 CORTEX IDOR<\/a>\n <\/div>\n <\/div>\n<\/nav>\n \n<!-- HERO -->\n<section class=\"hero\">\n <div class=\"hero-bg\"><\/div>\n <div class=\"hero-inner\">\n <div class=\"hero-overline\">Produit d\u00e9fensif \u2014 Passerelle d’autorisation en coupure<\/div>\n <h1>March\u00e9 et positionnement<em>CORTEX IDOR\u2122 \u00b7 Web & API<\/em><\/h1>\n <p class=\"hero-subtitle\">Un march\u00e9 en croissance forte, port\u00e9 par la r\u00e9glementation europ\u00e9enne et par la faille n\u00b01 des API. Quatre segments adressables. Un paysage concurrentiel cartographi\u00e9 sans complaisance. Et un m\u00e9canisme \u2014 l’autorisation <i>par construction<\/i> \u2014 que les acteurs de d\u00e9tection ne peuvent pas r\u00e9pliquer sans repartir de l’architecture.<\/p>\n <\/div>\n<\/section>\n \n<!-- VALIDATION TECHNIQUE -->\n<section class=\"cream\">\n <div class=\"container-wide\">\n <div class=\"section-header\">\n <span class=\"eyebrow section-eyebrow\">Validation technique<\/span>\n <h2 class=\"section-title\">La preuve, <em>avant la promesse<\/em><\/h2>\n <\/div>\n <div class=\"proof-band\">\n <div class=\"proof-cell\"><div class=\"n\">166<\/div><div class=\"l\">tests verts<\/div><\/div>\n <div class=\"proof-cell\"><div class=\"n\">14<\/div><div class=\"l\">propri\u00e9t\u00e9s prouv\u00e9es par mutation<\/div><\/div>\n <div class=\"proof-cell\"><div class=\"n\">~54 M<\/div><div class=\"l\">ex\u00e9cutions de fuzzing \u00b7 0 crash<\/div><\/div>\n <div class=\"proof-cell\"><div class=\"n\">2,57 \u00b5s<\/div><div class=\"l\">latence pipeline intrins\u00e8que (microbench)<\/div><\/div>\n <div class=\"proof-cell pending\"><div class=\"n\">\u2192<\/div><div class=\"l\">pentest PASSI : scope pr\u00eat \u00b7 pilote : package pr\u00eat<\/div><\/div>\n <\/div>\n <div class=\"note-box\"><b>Evidence-first, pas marketing.<\/b> \u00ab Prouv\u00e9 \u00bb a un sens strict ici : pour chaque garantie, une mutation du code qui la casse <b>doit<\/b> faire rougir un test (m\u00e9thode anti-placebo). Le pentest tiers PASSI et le pilote client sont <b>pr\u00e9par\u00e9s<\/b> et constituent la prochaine \u00e9tape de preuve \u2014 ils ne sont pas encore r\u00e9alis\u00e9s, et nous ne les pr\u00e9sentons pas comme tels. Une qualification ANSSI (CSPN) est <b>vis\u00e9e<\/b>, en s’appuyant sur le laboratoire de v\u00e9rification formelle (CFVL) du programme CORTEX.<\/div>\n <\/div>\n<\/section>\n \n<!-- MARCH\u00c9 -->\n<section class=\"navy\" id=\"marche\">\n <div class=\"container-wide\">\n <div class=\"section-header\">\n <span class=\"eyebrow section-eyebrow\">March\u00e9 adress\u00e9<\/span>\n <h2 class=\"section-title\">Un march\u00e9 tir\u00e9 par la <em>faiblesse n\u00b01 des API<\/em><\/h2>\n <p class=\"section-subtitle\">CORTEX IDOR se positionne sur la s\u00e9curit\u00e9 des API et des applications web, l\u00e0 o\u00f9 l’autorisation cass\u00e9e (BOLA \/ IDOR) est class\u00e9e risque n\u00b01 par l’OWASP. Le march\u00e9 est jeune, en forte croissance, et la convergence r\u00e9glementaire europ\u00e9enne (NIS2, DORA, CRA) fait passer ces contr\u00f4les de l’optionnel \u00e0 l’obligatoire.<\/p>\n <\/div>\n \n <div class=\"tam-grid\">\n <div class=\"tam-card dcard\">\n <div class=\"tlabel\">March\u00e9 1 \u00b7 Mondial<\/div>\n <div class=\"tval\">4,6 Md$ <small>2030<\/small><\/div>\n <h3>S\u00e9curit\u00e9 des API<\/h3>\n <p>Le march\u00e9 de l’API security passe de ~1,25 Md$ (2025) \u00e0 ~4,6 Md$ d’ici 2030, \u00e0 un CAGR d’environ 29,7 %. Croissance port\u00e9e par l’explosion des microservices et la hausse des attaques.<\/p>\n <span class=\"src\">Source : Mordor Intelligence, API Security Market, nov. 2025. Les estimations des analystes varient fortement (de ~2,7 \u00e0 ~30 Md$ selon les cabinets).<\/span>\n <\/div>\n <div class=\"tam-card dcard\">\n <div class=\"tlabel\">Catalyseur \u00b7 Attaques<\/div>\n <div class=\"tval\">+109 <small>%<\/small><\/div>\n <h3>Croissance des attaques d’API (a\/a)<\/h3>\n <p>Akamai mesure une hausse de 109 % en glissement annuel des attaques d’API ; ~71 % du trafic internet transite d\u00e9sormais par des API, \u00e9largissant m\u00e9caniquement la surface d’attaque.<\/p>\n <span class=\"src\">Sources : Akamai (donn\u00e9e cit\u00e9e lors du rachat de Noname) ; analyses sectorielles 2024-2026.<\/span>\n <\/div>\n <div class=\"tam-card dcard\">\n <div class=\"tlabel\">Catalyseur \u00b7 Validation<\/div>\n <div class=\"tval\">450 M$<\/div>\n <h3>Rachat de Noname par Akamai (2024)<\/h3>\n <p>L’acquisition de Noname Security par Akamai pour 450 M$ valide la cat\u00e9gorie \u00ab API security \u00bb comme priorit\u00e9 d’entreprise, et concentre le segment d\u00e9tection chez les grands acteurs edge\/WAF.<\/p>\n <span class=\"src\">Sources : Akamai (communiqu\u00e9, juin 2024) ; SDxCentral.<\/span>\n <\/div>\n <div class=\"tam-card dcard\">\n <div class=\"tlabel\">March\u00e9 adjacent \u00b7 Mondial<\/div>\n <div class=\"tval\">~42 Md$ <small>2030<\/small><\/div>\n <h3>IAM \/ gestion des autorisations<\/h3>\n <p>La couche d’autorisation de CORTEX s’inscrit dans le grand march\u00e9 adjacent de l’IAM, estim\u00e9 \u00e0 ~42 Md$ d’ici 2030. CORTEX n’adresse pas tout l’IAM : il occupe le segment d’<b>enforcement d’autorisation \u00e0 l’API<\/b>, \u00e0 l’intersection IAM \u00d7 s\u00e9curit\u00e9 des API.<\/p>\n <span class=\"src\">Sources : MarketsandMarkets (42,6 Md$) et Grand View Research (41,5 Md$), 2030. CORTEX vise le sous-segment enforcement, pas l’ensemble du march\u00e9 IAM.<\/span>\n <\/div>\n <\/div>\n \n <div class=\"callout\"><b>La convergence qui cr\u00e9e la fen\u00eatre.<\/b> Trois forces se combinent : l’autorisation cass\u00e9e reste le <b>risque n\u00b01 de l’OWASP<\/b> (web et API), la <b>r\u00e9glementation europ\u00e9enne<\/b> rend ces contr\u00f4les obligatoires (NIS2, DORA, puis CRA en 2027), et le BOLA\/IDOR se produit <b>par d\u00e9finition apr\u00e8s authentification<\/b> \u2014 l’attaquant poss\u00e8de d\u00e9j\u00e0 un jeton valide (CybelAngel mesure ~95 % des attaques d’API issues de sessions authentifi\u00e9es). C’est l’angle mort que ni le WAF ni le 2FA ne traitent. CORTEX IDOR adresse pr\u00e9cis\u00e9ment cette couche d’autorisation, en coupure, sans modifier l’application.<\/div>\n \n <div class=\"sublabel\">Notre couverture de l’OWASP API Top 10<\/div>\n <div class=\"owbar\">\n <span><span class=\"big\">7 \/ 10<\/span> cat\u00e9gories adress\u00e9es<\/span>\n <span><span class=\"dy\">\u25cf<\/span> 4 couvertes<\/span>\n <span><span class=\"dp\">\u25cf<\/span> 3 partielles<\/span>\n <span><span class=\"dn\">\u25cf<\/span> 3 hors p\u00e9rim\u00e8tre<\/span>\n <\/div>\n <div class=\"owasp\">\n <div class=\"it\"><span class=\"p y\">\u2713<\/span><span class=\"code\">API1<\/span><span>BOLA \u2014 autorisation objet <small>jeton capability + owner-check<\/small><\/span><\/div>\n <div class=\"it\"><span class=\"p pa\">~<\/span><span class=\"code\">API2<\/span><span>Authentification cass\u00e9e <small>v\u00e9rifie jeton\/JWT\/JWKS, pas un IdP<\/small><\/span><\/div>\n <div class=\"it\"><span class=\"p y\">\u2713<\/span><span class=\"code\">API3<\/span><span>BOPLA \u2014 autorisation des propri\u00e9t\u00e9s <small>allowlist + masquage r\u00e9ponse<\/small><\/span><\/div>\n <div class=\"it\"><span class=\"p y\">\u2713<\/span><span class=\"code\">API4<\/span><span>Consommation de ressources <small>rate-limit<\/small><\/span><\/div>\n <div class=\"it\"><span class=\"p y\">\u2713<\/span><span class=\"code\">API5<\/span><span>BFLA \u2014 autorisation de fonction <small>scopes<\/small><\/span><\/div>\n <div class=\"it\"><span class=\"p pa\">~<\/span><span class=\"code\">API6<\/span><span>Flux m\u00e9tier sensibles <small>rate-limit, pas anti-bot<\/small><\/span><\/div>\n <div class=\"it\"><span class=\"p no\">\u2717<\/span><span class=\"code\">API7<\/span><span>SSRF <small>hors p\u00e9rim\u00e8tre<\/small><\/span><\/div>\n <div class=\"it\"><span class=\"p no\">\u2717<\/span><span class=\"code\">API8<\/span><span>Mauvaise configuration <small>hors p\u00e9rim\u00e8tre<\/small><\/span><\/div>\n <div class=\"it\"><span class=\"p pa\">~<\/span><span class=\"code\">API9<\/span><span>Inventaire \/ shadow API <small>routes observ\u00e9es only<\/small><\/span><\/div>\n <div class=\"it\"><span class=\"p no\">\u2717<\/span><span class=\"code\">API10<\/span><span>Consommation d’API tierces <small>hors p\u00e9rim\u00e8tre<\/small><\/span><\/div>\n <\/div>\n <div class=\"fineprint\">Mapping en <b>cat\u00e9gories<\/b>, pas en volume d’attaques : 4 couvertes pleinement (40 %) + 3 partielles = <b>7\/10 touch\u00e9es (70 %)<\/b> ; 3 hors p\u00e9rim\u00e8tre assum\u00e9es, relevant d’autres briques (WAF, SAST, SCA). Le \u00ab 70 % \u00bb d\u00e9signe des cat\u00e9gories adress\u00e9es, <b>non une proportion d’attaques<\/b>. Liste : OWASP API Security Top 10:2023.<\/div>\n <div class=\"note-box\"><b>Honn\u00eatet\u00e9 m\u00e9thodologique.<\/b> Les tailles de march\u00e9 sont des projections d’analystes tiers, qui divergent (un facteur ~10 entre les estimations basses et hautes) ; nous citons Mordor Intelligence (r\u00e9cent) et signalons la fourchette plut\u00f4t que d’avancer un chiffre unique. Les donn\u00e9es OWASP (risque n\u00b01), Akamai (+109 %) et CybelAngel (95 % de sessions authentifi\u00e9es) sont des faits attribuables. Aucune part de march\u00e9 propre \u00e0 CORTEX n’est revendiqu\u00e9e \u00e0 ce stade pr\u00e9-commercialisation.<\/div>\n <\/div>\n<\/section>\n \n<!-- CAUSE DU MARCH\u00c9 -->\n<section class=\"cream-warm\">\n <div class=\"container-wide\">\n <div class=\"section-header\">\n <span class=\"eyebrow section-eyebrow\">La cause du march\u00e9<\/span>\n <h2 class=\"section-title\">Les attaques ont <em>chang\u00e9 de surface<\/em><\/h2>\n <p class=\"section-subtitle\">La plupart des grandes fuites r\u00e9centes ne r\u00e9sultent pas d’un malware sophistiqu\u00e9, mais d’un <b>contr\u00f4le d’acc\u00e8s insuffisant<\/b> : une identit\u00e9 l\u00e9gitime \u2014 la sienne ou une vol\u00e9e \u2014 atteint une ressource qu’elle n’aurait jamais d\u00fb pouvoir consulter. C’est ce d\u00e9placement de la surface d’attaque qui cr\u00e9e, et fait cro\u00eetre, le march\u00e9.<\/p>\n <\/div>\n \n <div class=\"shift\">\n <div class=\"col old\"><div class=\"hd\">Hier \u2014 la surface technique<\/div><ul><li>Malware<\/li><li>Exploits syst\u00e8me<\/li><li>Failles r\u00e9seau<\/li><\/ul><\/div>\n <div class=\"col new\"><div class=\"hd\">Aujourd’hui \u2014 la surface d’autorisation<\/div><ul><li>Utilisateur authentifi\u00e9<\/li><li>API expos\u00e9e<\/li><li>Autorisation cass\u00e9e<\/li><li>Exfiltration de donn\u00e9es l\u00e9gitimes<\/li><\/ul><\/div>\n <\/div>\n \n <div class=\"sublabel\">Incidents internationaux document\u00e9s<\/div>\n <div class=\"tw\">\n <table class=\"breach\">\n <thead><tr><th>Ann\u00e9e<\/th><th>Cible<\/th><th>\u00c9chelle<\/th><th>Faille d’autorisation \/ API<\/th><\/tr><\/thead>\n <tbody>\n <tr><td class=\"yr\">2018<\/td><td class=\"tgt\">USPS \u2014 Informed Visibility<\/td><td class=\"sc\">~60 M<\/td><td class=\"mc\"><span class=\"tag\">IDOR<\/span>une API renvoyait les donn\u00e9es de n’importe quel compte sans v\u00e9rifier le propri\u00e9taire ; non corrig\u00e9 pendant pr\u00e8s d’un an.<\/td><\/tr>\n <tr><td class=\"yr\">2021<\/td><td class=\"tgt\">Parler<\/td><td class=\"sc\">~70 To<\/td><td class=\"mc\"><span class=\"tag\">BOLA<\/span>\u00e9num\u00e9ration s\u00e9quentielle d’identifiants via l’API \u2192 posts et m\u00e9dias g\u00e9olocalis\u00e9s aspir\u00e9s en masse.<\/td><\/tr>\n <tr><td class=\"yr\">2022<\/td><td class=\"tgt\">Optus (Australie)<\/td><td class=\"sc\">~10 M<\/td><td class=\"mc\"><span class=\"tag\">API ouverte<\/span>API non authentifi\u00e9e et sans limitation de d\u00e9bit \u2192 pr\u00e8s de 40 % de la population australienne.<\/td><\/tr>\n <tr><td class=\"yr\">2022<\/td><td class=\"tgt\">Twitter \/ X<\/td><td class=\"sc\">5,4 M<\/td><td class=\"mc\"><span class=\"tag\">\u00c9num\u00e9ration<\/span>une vuln\u00e9rabilit\u00e9 d’API permettait de relier num\u00e9ros de t\u00e9l\u00e9phone et emails \u00e0 des comptes.<\/td><\/tr>\n <tr><td class=\"yr\">2023<\/td><td class=\"tgt\">T-Mobile US<\/td><td class=\"sc\">~37 M<\/td><td class=\"mc\"><span class=\"tag\">API \u00b7 BOLA<\/span>endpoint API sur-exposant les donn\u00e9es de compte ; exfiltration non d\u00e9tect\u00e9e ~6 semaines (source : d\u00e9p\u00f4t SEC 8-K).<\/td><\/tr>\n <tr><td class=\"yr\">2024<\/td><td class=\"tgt\">Twilio \u2014 Authy<\/td><td class=\"sc\">33,4 M<\/td><td class=\"mc\"><span class=\"tag\">Auth manquante<\/span>endpoint API non authentifi\u00e9 \u2192 \u00e9num\u00e9ration des num\u00e9ros de t\u00e9l\u00e9phone des utilisateurs MFA.<\/td><\/tr>\n <tr><td class=\"yr\">2024<\/td><td class=\"tgt\">Grafana (CVE-2024-1313)<\/td><td class=\"sc\">20 M+ <small>plateforme<\/small><\/td><td class=\"mc\"><span class=\"tag\">BOLA<\/span>faille d’autorisation au niveau objet dans une plateforme d’analytics largement d\u00e9ploy\u00e9e.<\/td><\/tr>\n <tr><td class=\"yr\">2024<\/td><td class=\"tgt\">Hospital Mgmt (CVE-2024-28320)<\/td><td class=\"sc\">CVSS 7,6<\/td><td class=\"mc\"><span class=\"tag\">IDOR<\/span>lecture et modification de donn\u00e9es patients via une r\u00e9f\u00e9rence d’objet non contr\u00f4l\u00e9e.<\/td><\/tr>\n <tr><td class=\"yr\">2025<\/td><td class=\"tgt\">Groupe Volkswagen<\/td><td class=\"sc\">PII + GPS<\/td><td class=\"mc\"><span class=\"tag\">BOLA<\/span>\u00e9num\u00e9ration de VIN \u2192 PII des propri\u00e9taires et localisation des v\u00e9hicules en temps r\u00e9el.<\/td><\/tr>\n <tr><td class=\"yr\">2025<\/td><td class=\"tgt\">Microsoft Graph \/ Azure AD<\/td><td class=\"sc\">50 000+<\/td><td class=\"mc\"><span class=\"tag\">Token expos\u00e9<\/span>jeton anonyme expos\u00e9 c\u00f4t\u00e9 client \u2192 \u00e9num\u00e9ration de l’annuaire d’utilisateurs d’une organisation.<\/td><\/tr>\n <\/tbody>\n <\/table>\n <\/div>\n <div class=\"note-box\"><b>M\u00e9canisme commun.<\/b> Dans la quasi-totalit\u00e9 de ces cas, la cause racine est identique : un <b>identifiant \u00e9num\u00e9rable<\/b> \u2014 ou une API sous-authentifi\u00e9e \u2014 et l’<b>absence de v\u00e9rification objet par objet<\/b>.<\/div>\n \n <div class=\"sublabel\">Et en France \u2014 2024-2026<\/div>\n <p class=\"section-subtitle\" style=\"text-align:left;max-width:1100px;margin:0 auto 1.2rem;\">Les fuites fran\u00e7aises racontent la m\u00eame histoire, \u00e0 l’\u00e9chelle de la population : l’attaquant entre par une identit\u00e9 l\u00e9gitime ou compromise, puis atteint des donn\u00e9es qu’aucun contr\u00f4le n’a born\u00e9.<\/p>\n <div class=\"tw\">\n <table class=\"breach\">\n <thead><tr><th>Ann\u00e9e<\/th><th>Cible<\/th><th>\u00c9chelle<\/th><th>M\u00e9canisme d’acc\u00e8s<\/th><\/tr><\/thead>\n <tbody>\n <tr><td class=\"yr\">2024<\/td><td class=\"tgt\">France Travail \/ Cap Emploi<\/td><td class=\"sc\">~43 M<\/td><td class=\"mc\"><span class=\"tag\">Acc\u00e8s l\u00e9gitime<\/span>infiltration via le syst\u00e8me partenaire Cap Emploi \u2192 \u00e9tat civil, n\u00b0 de s\u00e9curit\u00e9 sociale, identifiants et contacts (plus des deux tiers de la population \u2014 source Assembl\u00e9e nationale).<\/td><\/tr>\n <tr><td class=\"yr\">2024<\/td><td class=\"tgt\">Viamedis & Almerys<\/td><td class=\"sc\">~33 M<\/td><td class=\"mc\"><span class=\"tag\">Identit\u00e9 usurp\u00e9e<\/span>compte de professionnel de sant\u00e9 hame\u00e7onn\u00e9 \u2192 acc\u00e8s aux portails de tiers payant ; n\u00b0 de s\u00e9curit\u00e9 sociale et \u00e9tat civil (source CNIL).<\/td><\/tr>\n <tr><td class=\"yr\">2024<\/td><td class=\"tgt\">Free \/ Free Mobile<\/td><td class=\"sc\">~24 M<\/td><td class=\"mc\"><span class=\"tag\">Acc\u00e8s interne<\/span>intrusion dans le SI, IBAN expos\u00e9s ; la CNIL retient l’absence de MFA sur le VPN interne \u2014 amende de 42 M\u20ac (source CNIL).<\/td><\/tr>\n <tr><td class=\"yr\">2026<\/td><td class=\"tgt\">\u00c9duConnect (\u00c9ducation nationale)<\/td><td class=\"sc\">~3,5 M<\/td><td class=\"mc\"><span class=\"tag\">IDOR<\/span>usurpation d’un agent puis modification d’un num\u00e9ro dans l’URL \u2192 acc\u00e8s aux dossiers d’autres \u00e9tablissements (attaque confirm\u00e9e par l’\u00c9ducation nationale ; m\u00e9canisme rapport\u00e9 par la presse sp\u00e9cialis\u00e9e).<\/td><\/tr>\n <tr><td class=\"yr\">2026<\/td><td class=\"tgt\">Cegedim (logiciel m\u00e9dical)<\/td><td class=\"sc\">11\u201315 M<\/td><td class=\"mc\"><span class=\"tag\">Cha\u00eene logicielle<\/span>compromission d’un logiciel m\u00e9dical largement d\u00e9ploy\u00e9 \u2192 donn\u00e9es de patients (estimation du minist\u00e8re de la Sant\u00e9).<\/td><\/tr>\n <tr><td class=\"yr\">2026<\/td><td class=\"tgt\">ANTS \/ France Titres<\/td><td class=\"sc\">11,7 M<\/td><td class=\"mc\"><span class=\"tag\">IDOR<\/span>portail national des titres d’identit\u00e9 : faille de type IDOR selon les analyses de s\u00e9curit\u00e9 publi\u00e9es, signal\u00e9e \u00e0 l’agence et non corrig\u00e9e avant l’attaque. 11,7 M de comptes confirm\u00e9s par le minist\u00e8re de l’Int\u00e9rieur (18-19 M revendiqu\u00e9s par les attaquants).<\/td><\/tr>\n <tr><td class=\"yr\">2026<\/td><td class=\"tgt\">Optic 2000<\/td><td class=\"sc\">~7 900 <small>factures<\/small><\/td><td class=\"mc\"><span class=\"tag\">IDOR<\/span>apr\u00e8s les acc\u00e8s d’un magasin franchis\u00e9, \u00e9num\u00e9ration d’un <b>compteur s\u00e9quentiel<\/b> dans l’URL de g\u00e9n\u00e9ration de PDF \u2014 sans aucun malware. L’enseigne conteste le p\u00e9rim\u00e8tre client et impute la fuite \u00e0 un prestataire ; m\u00e9canisme rapport\u00e9 par la presse sp\u00e9cialis\u00e9e.<\/td><\/tr>\n <\/tbody>\n <\/table>\n <\/div>\n <div class=\"note-box\"><b>Vague de mai 2026 \u2014 les opticiens fran\u00e7ais.<\/b> En quelques jours, plusieurs enseignes ont vu leurs bases mises en vente, plusieurs via un prestataire commun : Atol (5,9 M revendiqu\u00e9s), Jimmy Fairly (357 k), Auchan Optique (219 k), Krys (~200 k). Chiffres revendiqu\u00e9s sur des forums cybercriminels et relay\u00e9s par des sites sp\u00e9cialis\u00e9s (cyberattaque.org, frenchbreaches.com) ; certains p\u00e9rim\u00e8tres sont contest\u00e9s par les enseignes. Le cas Optic 2000 en est l’illustration m\u00e9canique : un identifiant s\u00e9quentiel, aucune autorisation objet par objet.<\/div>\n \n <div class=\"callout\"><b>L’attaquant ne contourne pas la cryptographie.<\/b> Il utilise une identit\u00e9 l\u00e9gitime pour atteindre une ressource ill\u00e9gitime \u2014 et c’est l’<b>absence de v\u00e9rification objet par objet<\/b> qui transforme un seul compte compromis en fuite de dizaines de millions d’enregistrements. CORTEX IDOR\u2122 v\u00e9rifie chaque acc\u00e8s, en coupure, <b>avant que l’application ne soit atteinte<\/b> : le jeton de capability li\u00e9 au mandant tue l’\u00e9num\u00e9ration, l’owner-check ferme l’acc\u00e8s crois\u00e9, et le rayon d’impact d’une identit\u00e9 compromise est <b>born\u00e9 par construction<\/b>.<\/div>\n <div class=\"fineprint\">Sources publiques \u2014 international : KrebsOnSecurity (USPS) \u00b7 d\u00e9p\u00f4t SEC 8-K de T-Mobile \u00b7 BleepingComputer \/ SecurityWeek (Authy) \u00b7 Equixly \u00ab 2025 Top API Incidents \u00bb (Volkswagen, Microsoft Graph) \u00b7 NVD \/ MITRE (CVE-2024-1313, CVE-2024-28320) \u00b7 couverture presse (Optus, Twitter\/X, Parler). France : CNIL (Viamedis & Almerys, Free) \u00b7 Assembl\u00e9e nationale et France Travail \u00b7 minist\u00e8re de la Sant\u00e9 (Cegedim) \u00b7 minist\u00e8re de l’Int\u00e9rieur et franceinfo (ANTS \/ France Titres) \u00b7 \u00c9ducation nationale et presse sp\u00e9cialis\u00e9e (\u00c9duConnect) \u00b7 sites sp\u00e9cialis\u00e9s cyberattaque.org \/ frenchbreaches.com (Optic 2000 et vague opticiens). \u00c9tat au juin 2026. Les cas et chiffres sont publiquement document\u00e9s ; lorsqu’ils sont issus de revendications sur forums (vague opticiens), ils sont signal\u00e9s comme tels et distincts des chiffres confirm\u00e9s par les autorit\u00e9s (11,7 M pour l’ANTS). Les vecteurs d’entr\u00e9e varient (hame\u00e7onnage d’un compte l\u00e9gitime, MFA absente, cha\u00eene logicielle, IDOR). Le rapprochement avec le m\u00e9canisme CORTEX est une analyse d’ing\u00e9nierie sur le <b>rayon d’impact<\/b> (ce qu’une identit\u00e9 peut atteindre une fois entr\u00e9e), non l’affirmation que CORTEX aurait emp\u00each\u00e9 l’intrusion initiale de chaque incident.<\/div>\n <\/div>\n<\/section>\n \n<!-- POURQUOI MAINTENANT -->\n<section class=\"navy-deep\">\n <div class=\"container\">\n <div class=\"section-header\">\n <span class=\"eyebrow section-eyebrow\">Fen\u00eatre strat\u00e9gique<\/span>\n <h2 class=\"section-title\">Pourquoi <em>maintenant<\/em><\/h2>\n <p class=\"section-subtitle\">La r\u00e9glementation europ\u00e9enne transforme l’autorisation applicative en obligation de conformit\u00e9 \u2014 et le march\u00e9 de l’enforcement souverain n’est pas encore occup\u00e9.<\/p>\n <\/div>\n <div class=\"timing-grid\">\n <div class=\"timing-item dcard\">\n <div class=\"yr\">2024 \u2014 2025<\/div>\n <h3>NIS2 & DORA effectives<\/h3>\n <p>NIS2 applicable depuis oct. 2024, DORA depuis janv. 2025. P\u00e9nalit\u00e9s jusqu’\u00e0 2 % du CA (NIS2) \/ 1 % du CA quotidien (DORA). Le contr\u00f4le d’acc\u00e8s devient une exigence audit\u00e9e, pas une option.<\/p>\n <\/div>\n <div class=\"timing-item dcard\">\n <div class=\"yr\">2025 \u2014 2026<\/div>\n <h3>L’autorisation = cause racine n\u00b01<\/h3>\n <p>L’OWASP maintient le contr\u00f4le d’acc\u00e8s en t\u00eate (web et API) ; les rapports r\u00e9cents pointent l’autorisation comme premi\u00e8re cause racine des fuites d’API. La demande se d\u00e9place de la d\u00e9tection vers l’enforcement.<\/p>\n <\/div>\n <div class=\"timing-item dcard\">\n <div class=\"yr\">2027<\/div>\n <h3>Cyber Resilience Act<\/h3>\n <p>S\u00e9curit\u00e9 \u00ab by design \u00bb obligatoire pour les produits connect\u00e9s vendus en UE. P\u00e9nalit\u00e9s jusqu’\u00e0 15 M\u20ac ou 2,5 % du CA. CORTEX IDOR, en coupure et sans modification de code, r\u00e9pond \u00e0 ce besoin sans r\u00e9\u00e9crire l’existant.<\/p>\n <\/div>\n <div class=\"timing-item dcard\">\n <div class=\"yr\">2026 \u2014 2028<\/div>\n <h3>Consolidation souveraine<\/h3>\n <p>Le segment d\u00e9tection se consolide chez les grands acteurs non-europ\u00e9ens (Akamai\/Noname, etc.). Fen\u00eatre ouverte pour un acteur d’<b>enforcement souverain FR\/EU<\/b> sur la couche autorisation.<\/p>\n <\/div>\n <\/div>\n <div class=\"callout\"><b>La fen\u00eatre est ouverte 24 \u00e0 36 mois.<\/b> Le segment d\u00e9tection se consolide hors d’Europe ; \u00e0 notre connaissance publique en juin 2026, aucun acteur ne combine enforcement de l’autorisation <b>par construction<\/b> et souverainet\u00e9 FR\/EU pure. C’est le cr\u00e9neau que CORTEX IDOR vise \u00e0 occuper avant la consolidation du march\u00e9 souverain europ\u00e9en.<\/div>\n <\/div>\n<\/section>\n \n<!-- VALEUR OP\u00c9RATIONNELLE -->\n<section class=\"cream\">\n <div class=\"container-wide\">\n <div class=\"section-header\">\n <span class=\"eyebrow section-eyebrow\">Valeur op\u00e9rationnelle<\/span>\n <h2 class=\"section-title\">Ce que le RSSI <em>ach\u00e8te r\u00e9ellement<\/em><\/h2>\n <p class=\"section-subtitle\">Un RSSI n’ach\u00e8te pas \u00ab BOLA est OWASP n\u00b01 \u00bb. Il ach\u00e8te une r\u00e9duction de risque mesurable et un d\u00e9ploiement sans douleur. Voici ce que CORTEX IDOR change concr\u00e8tement.<\/p>\n <\/div>\n <div class=\"roi-grid\">\n <div class=\"roi lcard\"><h3>R\u00e9duit le risque de fuite de donn\u00e9es client<\/h3><p>L’\u00e9num\u00e9ration d’objets \u2014 la m\u00e9canique des fuites massives par incr\u00e9mentation d’identifiant \u2014 devient impossible par construction. La classe de risque la plus co\u00fbteuse en r\u00e9putation et en sanction RGPD est ferm\u00e9e.<\/p><\/div>\n <div class=\"roi lcard\"><h3>Ferme une classe enti\u00e8re de findings pentest<\/h3><p>Les findings BOLA\/IDOR r\u00e9currents qui r\u00e9apparaissent \u00e0 chaque audit ne sont plus \u00e0 corriger ligne par ligne dans le code : la passerelle les neutralise en amont, durablement.<\/p><\/div>\n <div class=\"roi lcard\"><h3>D\u00e9ploiement sans refonte applicative<\/h3><p>En coupure, sans modifier le code de l’application. Pas de projet de r\u00e9\u00e9criture, pas de mobilisation des \u00e9quipes dev : mise en \u0153uvre en jours, pas en mois.<\/p><\/div>\n <div class=\"roi lcard\"><h3>Acc\u00e9l\u00e8re les audits NIS2 \/ DORA<\/h3><p>Un enforcement d’autorisation auditable, avec journalisation immuable, fournit la preuve de contr\u00f4le attendue par les r\u00e9gulateurs \u2014 sans attendre une refonte du syst\u00e8me d’information.<\/p><\/div>\n <div class=\"roi lcard\"><h3>Neutralise la valeur d’acc\u00e8s des fuites pass\u00e9es<\/h3><p>Une fois la passerelle en coupure, un identifiant vol\u00e9 hier n’ouvre plus aucune ressource sur le syst\u00e8me vivant et ne permet plus d’\u00e9num\u00e9rer : le jeton de capability li\u00e9 au mandant le rend inop\u00e9rant. La donn\u00e9e d\u00e9j\u00e0 exfiltr\u00e9e garde sa valeur de PII, mais perd sa <b>valeur d’acc\u00e8s<\/b>.<\/p><\/div>\n <\/div>\n <\/div>\n<\/section>\n \n<!-- SEGMENTS -->\n<section class=\"navy\" id=\"segments\">\n <div class=\"container-wide\">\n <div class=\"section-header\">\n <span class=\"eyebrow section-eyebrow\">Notre adressabilit\u00e9<\/span>\n <h2 class=\"section-title\">Quatre segments <em>adressables<\/em><\/h2>\n <p class=\"section-subtitle\">Le march\u00e9 va de la PME \u00e0 l’OIV. M\u00eame produit \u2014 une passerelle d’autorisation en coupure \u2014 d\u00e9clin\u00e9 par cycle de vente et niveau d’assurance. Les volumes ci-dessous donnent l’ordre de grandeur du <b>parc adressable fran\u00e7ais<\/b> (et son multiple europ\u00e9en) ; les tickets sont des <b>fourchettes indicatives d\u00e9riv\u00e9es des rep\u00e8res de march\u00e9<\/b> (passerelles et s\u00e9curit\u00e9 d’API), \u00e0 affiner avec le mod\u00e8le de pricing CORTEX IDOR.<\/p>\n <\/div>\n \n <div class=\"sublabel\">De l’univers mondial au march\u00e9 servi\u00e7able<\/div>\n <div class=\"funnel\">\n <div class=\"lvl l1\"><div class=\"t\">Univers total \u2014 plafond th\u00e9orique<\/div><div class=\"n\">~201 M de sites actifs \u00b7 ~1,4 Md enregistr\u00e9s<\/div><div class=\"d\">\u224871 % du trafic internet transite par des API. L’autorisation cass\u00e9e est le risque n\u00b01 de l’OWASP \u2014 pr\u00e9sente, \u00e0 un degr\u00e9 ou un autre, dans 100 % des applications test\u00e9es. Le probl\u00e8me est universel : toute application authentifi\u00e9e poss\u00e8de une couche d’autorisation.<\/div><\/div>\n <div class=\"lvl l2\"><div class=\"t\">March\u00e9 adressable<\/div><div class=\"n\">Applications & API exposant des objets sensibles derri\u00e8re authentification<\/div><div class=\"d\">Secteurs r\u00e9gul\u00e9s et \u00e0 fort enjeu de donn\u00e9es (banque, assurance, sant\u00e9, public, e-commerce). Rep\u00e8re chiffrable : \u2248150 000 entit\u00e9s NIS2 en Europe, \u224815 000 en France ; \u00e0 l’\u00e9chelle mondiale, un multiple de ce p\u00e9rim\u00e8tre.<\/div><\/div>\n <div class=\"lvl l3\"><div class=\"t\">March\u00e9 atteignable \u2014 point d’entr\u00e9e<\/div><div class=\"n\">FR\/EU souverain, d\u00e9ployable en coupure<\/div><div class=\"d\">Le sous-ensemble qui valorise l’enforcement par construction et la souverainet\u00e9, et peut ins\u00e9rer une passerelle sans refonte applicative. C’est le beachhead de CORTEX IDOR \u2014 d\u00e9taill\u00e9 dans les quatre segments ci-dessous.<\/div><\/div>\n <\/div>\n <div class=\"fineprint\">L’univers est mondial ; le march\u00e9 servi\u00e7able est un sous-ensemble assum\u00e9 \u2014 afficher \u00ab tout le web \u00bb comme march\u00e9 serait trompeur. Sources : Netcraft (sites, 2026) \u00b7 Akamai (part du trafic en API) \u00b7 OWASP Top 10:2025 (risque n\u00b01, 100 % des applications test\u00e9es) \u00b7 estimations ANSSI\/INSEE (p\u00e9rim\u00e8tre NIS2).<\/div>\n \n <div class=\"sublabel\">Quatre segments, un m\u00eame produit<\/div>\n <div class=\"segments\">\n <div class=\"segment\">\n <div class=\"shead\"><span class=\"sname\">Mid-market<\/span><span class=\"stk\">indicatif \u00b7 5 K\u20ac \u2013 50 K\u20ac \/ an \u00b7 SaaS<\/span><\/div>\n <div class=\"svol\">~7 500<\/div>\n <div class=\"svl\">ETI en France \u00b7 ~175 000 PME (INSEE 2023)<\/div>\n <div class=\"sbd\">ETI et scale-ups exposant des API clients. Besoin : tuer l’IDOR\/BOLA sans toucher au code, conformit\u00e9 NIS2 de premier niveau. Cycle court (1-3 mois).<\/div>\n <span class=\"pill\">D\u00e9ploiement en coupure<\/span>\n <\/div>\n <div class=\"segment\">\n <div class=\"shead\"><span class=\"sname\">Enterprise r\u00e9gul\u00e9<\/span><span class=\"stk\">indicatif \u00b7 50 K\u20ac \u2013 300 K\u20ac \/ an \u00b7 licence<\/span><\/div>\n <div class=\"svol\">~15 000<\/div>\n <div class=\"svl\">entit\u00e9s NIS2 en France \u00b7 ~150 000 en Europe<\/div>\n <div class=\"sbd\">Banque, assurance, sant\u00e9, t\u00e9l\u00e9com, OIV soumis NIS2\/DORA. Besoin : enforcement auditable de l’autorisation, journalisation immuable, int\u00e9gration IdP existant. Cycle 6-12 mois.<\/div>\n <span class=\"pill\">Audit-grade<\/span>\n <\/div>\n <div class=\"segment\">\n <div class=\"shead\"><span class=\"sname\">R\u00e9galien & d\u00e9fense<\/span><span class=\"stk\">indicatif \u00b7 200 K\u20ac \u2013 1 M\u20ac+ \/ contrat pluriannuel<\/span><\/div>\n <div class=\"svol\">~300+<\/div>\n <div class=\"svl\">OIV + ~1 500 collectivit\u00e9s class\u00e9es entit\u00e9s essentielles<\/div>\n <div class=\"sbd\">Administrations, OIV critiques, souverainet\u00e9. Besoin : enforcement souverain FR\/EU, evidence-first, trajectoire de certification. Cycle 12-24 mois.<\/div>\n <span class=\"pill\">Souverain FR\/EU<\/span>\n <\/div>\n <div class=\"segment\">\n <div class=\"shead\"><span class=\"sname\">MSSP \/ int\u00e9grateurs<\/span><span class=\"stk\">indicatif \u00b7 revente \/ OEM (marge revendeur)<\/span><\/div>\n <div class=\"svol\">Canal<\/div>\n <div class=\"svl\">revente d\u00e9multipliant l’acc\u00e8s aux 3 segments<\/div>\n <div class=\"sbd\">H\u00e9bergeurs, MSSP, int\u00e9grateurs souhaitant ajouter une brique d’autorisation en coupure \u00e0 leur offre manag\u00e9e, devant des applis clientes h\u00e9t\u00e9rog\u00e8nes.<\/div>\n <span class=\"pill\">Multi-tenant<\/span>\n <\/div>\n <\/div>\n <div class=\"fineprint\">Volumes \u2014 ordres de grandeur du parc adressable, pas des parts de march\u00e9 CORTEX : INSEE (\u22487 500 ETI et \u2248175 000 PME hors microentreprises, 2023) \u00b7 estimations ANSSI\/INSEE du p\u00e9rim\u00e8tre NIS2 (\u224815 000 entit\u00e9s en France contre \u2248300 sous NIS1, \u2248150 000 dans l’UE) \u00b7 socle historique des OIV et \u22481 500 collectivit\u00e9s class\u00e9es entit\u00e9s essentielles. La part r\u00e9ellement \u00e9quipable d’une passerelle d’autorisation est un sous-ensemble de ces volumes.<\/div>\n <div class=\"fineprint\">Tickets \u2014 <b>fourchettes indicatives d\u00e9riv\u00e9es des rep\u00e8res publics de la cat\u00e9gorie<\/b>, non un tarif CORTEX engag\u00e9 : Cloudflare API Shield (plans Business ~250 $\/mois ; contrats entreprise \u00ab \u00e0 partir de ~5 000 $\/mois \u00bb selon BlazingCDN, mai 2026) \u00b7 plateformes de s\u00e9curit\u00e9 d’API entreprise sur devis (Salt, Wallarm, Traceable \u2014 tarifs non publics, ordre de grandeur dizaines \u00e0 centaines de k\u20ac\/an). Les fourchettes seront affin\u00e9es par le mod\u00e8le de pricing CORTEX IDOR.<\/div>\n <\/div>\n<\/section>\n \n<!-- CONCURRENCE -->\n<section class=\"cream\" id=\"concurrence\">\n <div class=\"container-wide\">\n <div class=\"section-header\">\n <span class=\"eyebrow section-eyebrow\">Paysage concurrentiel<\/span>\n <h2 class=\"section-title\">Cartographie <em>sans complaisance<\/em><\/h2>\n <p class=\"section-subtitle\">Comparaison face aux trois familles d’acteurs r\u00e9elles. Le tableau est <b>honn\u00eate<\/b> : CORTEX IDOR gagne sur le m\u00e9canisme (enforcement par construction), la preuve et la souverainet\u00e9 ; il <b>ne gagne pas<\/b> sur la maturit\u00e9, la traction ou la d\u00e9tection comportementale \u2014 et c’est assum\u00e9.<\/p>\n <\/div>\n <div class=\"tw\">\n <table class=\"matrix\">\n <thead>\n <tr>\n <th>Crit\u00e8re structurant<\/th>\n <th>D\u00e9tection API<small>Salt \u00b7 Akamai\/Noname \u00b7 Wallarm \u00b7 Traceable<\/small><\/th>\n <th>Autorisation-as-code<small>AuthZed \u00b7 Oso \u00b7 Cerbos \u00b7 OPA<\/small><\/th>\n <th>WAF \/ passerelle<small>Cloudflare \u00b7 F5 \u00b7 Kong<\/small><\/th>\n <th class=\"cx\">CORTEX IDOR\u2122<\/th>\n <\/tr>\n <\/thead>\n <tbody>\n <tr><td>Enforcement en coupure, sans modification de code<\/td><td><span class=\"pa\">~<\/span><\/td><td><span class=\"cr\">\u2717<\/span><span class=\"ts\">int\u00e9gration code requise<\/span><\/td><td><span class=\"pa\">~<\/span><\/td><td class=\"cx\"><span class=\"ck\">\u2713<\/span><\/td><\/tr>\n <tr><td>Anti-BOLA \/ IDOR <b>par construction<\/b> (tokenisation capability)<\/td><td><span class=\"cr\">\u2717<\/span><span class=\"ts\">d\u00e9tection probabiliste<\/span><\/td><td><span class=\"pa\">~<\/span><\/td><td><span class=\"cr\">\u2717<\/span><\/td><td class=\"cx\"><span class=\"ck\">\u2713<\/span><\/td><\/tr>\n <tr><td>Pile autorisation OWASP API (API1 \u00b7 API3 \u00b7 API4 \u00b7 API5)<\/td><td><span class=\"pa\">~<\/span><\/td><td><span class=\"pa\">~<\/span><\/td><td><span class=\"pa\">~<\/span><\/td><td class=\"cx\"><span class=\"ck\">\u2713<\/span><\/td><\/tr>\n <tr><td>Mutation-prouv\u00e9 \/ evidence-first (anti-placebo)<\/td><td><span class=\"cr\">\u2717<\/span><\/td><td><span class=\"cr\">\u2717<\/span><\/td><td><span class=\"cr\">\u2717<\/span><\/td><td class=\"cx\"><span class=\"ck\">\u2713<\/span><span class=\"ts\">14 propri\u00e9t\u00e9s \u00b7 166 tests<\/span><\/td><\/tr>\n <tr><td>Souverainet\u00e9 FR\/EU pure (hors Cloud Act)<\/td><td><span class=\"cr\">\u2717<\/span><\/td><td><span class=\"cr\">\u2717<\/span><\/td><td><span class=\"cr\">\u2717<\/span><\/td><td class=\"cx\"><span class=\"ck\">\u2713<\/span><\/td><\/tr>\n <tr><td>D\u00e9tection comportementale \/ ML<\/td><td><span class=\"ck\">\u2713<\/span><\/td><td><span class=\"cr\">\u2717<\/span><\/td><td><span class=\"pa\">~<\/span><\/td><td class=\"cx\"><span class=\"cr\">\u2717<\/span><span class=\"ts\">hors p\u00e9rim\u00e8tre, assum\u00e9<\/span><\/td><\/tr>\n <tr><td>D\u00e9couverte shadow \/ zombie API<\/td><td><span class=\"ck\">\u2713<\/span><\/td><td><span class=\"cr\">\u2717<\/span><\/td><td><span class=\"pa\">~<\/span><\/td><td class=\"cx\"><span class=\"pa\">~<\/span><span class=\"ts\">routes observ\u00e9es only<\/span><\/td><\/tr>\n <tr><td>Maturit\u00e9 \u00b7 traction \u00b7 \u00e9cosyst\u00e8me<\/td><td><span class=\"ck\">\u2713<\/span><\/td><td><span class=\"ck\">\u2713<\/span><\/td><td><span class=\"ck\">\u2713<\/span><\/td><td class=\"cx\"><span class=\"cr\">\u2717<\/span><span class=\"ts\">pr\u00e9-pilote, assum\u00e9<\/span><\/td><\/tr>\n <\/tbody>\n <\/table>\n <\/div>\n <div class=\"fineprint\">L\u00e9gende \u00b7 <span style=\"color:var(--check)\">\u2713<\/span> couvert \u00b7 <span style=\"color:var(--partial)\">~<\/span> partiel\/variable \u00b7 <span style=\"color:var(--cross)\">\u2717<\/span> non couvert. \u00c9valuations \u00e9tablies \u00e0 partir des sites publics et de la documentation produit des \u00e9diteurs.<br>Sources publiques : salt.security \u00b7 akamai.com \u00b7 wallarm.com \u00b7 traceable.ai \u00b7 authzed.com \u00b7 osohq.com \u00b7 cerbos.dev \u00b7 cloudflare.com \u00b7 owasp.org \u00b7 mordorintelligence.com \u2014 \u00e9tat juin 2026.<\/div>\n <\/div>\n<\/section>\n \n<!-- DIFF\u00c9RENCIATION -->\n<section class=\"navy-deep\">\n <div class=\"container\">\n <div class=\"section-header\">\n <span class=\"eyebrow section-eyebrow\">Diff\u00e9renciation d\u00e9taill\u00e9e<\/span>\n <h2 class=\"section-title\">D\u00e9tection <em>vs<\/em> enforcement par construction<\/h2>\n <\/div>\n <div class=\"diff\">\n <div class=\"b\">\n <h4>Face aux acteurs de d\u00e9tection (Salt, Akamai\/Noname, Wallarm, Traceable)<\/h4>\n <p>Ces plateformes <b>d\u00e9tectent<\/b> le BOLA en analysant le trafic par ML : c’est probabiliste, <i>a posteriori<\/i>, et contournable par un attaquant patient. CORTEX <b>enforce<\/b> : le jeton de capacit\u00e9 rend l’\u00e9num\u00e9ration <b>impossible par construction<\/b> \u2014 il n’y a rien \u00e0 d\u00e9tecter parce que l’attaque ne peut pas s’exprimer.<\/p>\n <div class=\"hon\"><b>Honn\u00eate :<\/b> ces acteurs gardent l’avantage sur la d\u00e9couverte d’API, la d\u00e9tection comportementale et la maturit\u00e9. Les approches sont <b>compl\u00e9mentaires<\/b> \u2014 d\u00e9tection pour la visibilit\u00e9 large, CORTEX pour fermer le cluster autorisation par construction.<\/div>\n <\/div>\n <div class=\"b\">\n <h4>Face \u00e0 l’autorisation-as-code (AuthZed, Oso, Cerbos, OPA)<\/h4>\n <p>Ce sont des <b>PDP<\/b> \u2014 des moteurs de politique que tu appelles <b>depuis ton code<\/b> \u00e0 chaque point de d\u00e9cision : int\u00e9gration, modifications applicatives, effort d\u00e9veloppeur. CORTEX est un <b>PEP en coupure<\/b> : il applique l’autorisation \u00e0 l’entr\u00e9e, <b>sans toucher au code<\/b>.<\/p>\n <div class=\"hon\"><b>Honn\u00eate :<\/b> CORTEX n’est pas un moteur de politique RBAC\/ABAC complet comme Cerbos ou AuthZed. C’est un <b>point d’enforcement en ligne<\/b> du cluster autorisation. Les deux peuvent coexister : un PDP d\u00e9finit, CORTEX applique en coupure.<\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n \n<!-- COMPARAISON SALT -->\n<section class=\"cream\">\n <div class=\"container\">\n <div class=\"section-header\">\n <span class=\"eyebrow section-eyebrow\">Comparaison de r\u00e9f\u00e9rence<\/span>\n <h2 class=\"section-title\">Face au leader : <em>Salt Security<\/em><\/h2>\n <p class=\"section-subtitle\">Salt Security est le leader de la cat\u00e9gorie API security (fond\u00e9 en 2016, Palo Alto). Le comparer en d\u00e9tail est honn\u00eate et utile : ce n’est pas un rival frontal, c’est l’acteur le plus proche \u2014 et il \u00e9claire ce que CORTEX fait diff\u00e9remment. Salt garde l’avantage sur la d\u00e9couverte, la d\u00e9tection comportementale et la maturit\u00e9 ; CORTEX gagne sur le m\u00e9canisme, la preuve et la souverainet\u00e9.<\/p>\n <\/div>\n <table class=\"vs-table\">\n <thead><tr><th>Dimension<\/th><th>Salt Security<\/th><th class=\"cxc\">CORTEX IDOR\u2122<\/th><\/tr><\/thead>\n <tbody>\n <tr><td>R\u00f4le<\/td><td>D\u00e9couverte, posture et d\u00e9tection comportementale des API \u2014 plateforme \u00ab Illuminate \u00bb.<\/td><td class=\"cxc\">Enforcement d’autorisation en coupure, anti-BOLA par construction.<\/td><\/tr>\n <tr><td>Mode d’action<\/td><td>Hors-bande : analyse le trafic sans latence, blocage via int\u00e9gration (WAF\/SIEM). Probabiliste, a posteriori.<\/td><td class=\"cxc\">En coupure (in-line) : d\u00e9terministe, a priori \u2014 l’attaque ne peut pas s’exprimer.<\/td><\/tr>\n <tr><td>Anti-BOLA \/ IDOR<\/td><td>D\u00e9tection comportementale par ML brevet\u00e9e, contournable par un attaquant patient (\u00ab low and slow \u00bb).<\/td><td class=\"cxc\">Tokenisation par capability : \u00e9num\u00e9ration impossible par construction \u2014 rien \u00e0 d\u00e9tecter.<\/td><\/tr>\n <tr><td>D\u00e9couverte \/ shadow API<\/td><td><b>Avantage Salt.<\/b> Salt Connect + Salt Surface, multi-sources, mature.<\/td><td class=\"cxc\">Routes observ\u00e9es seulement \u2014 d\u00e9couverte hors p\u00e9rim\u00e8tre, assum\u00e9.<\/td><\/tr>\n <tr><td>D\u00e9tection ML<\/td><td><b>Avantage Salt.<\/b> C\u0153ur de produit brevet\u00e9, mature.<\/td><td class=\"cxc\">Hors p\u00e9rim\u00e8tre, assum\u00e9 \u2014 compl\u00e9mentaire, pas concurrent.<\/td><\/tr>\n <tr><td>Preuve \/ assurance<\/td><td>Pas de v\u00e9rification formelle publique.<\/td><td class=\"cxc\">Evidence-first : 14 propri\u00e9t\u00e9s mutation-prouv\u00e9es, 166 tests (anti-placebo).<\/td><\/tr>\n <tr><td>Souverainet\u00e9<\/td><td>Soci\u00e9t\u00e9 am\u00e9ricaine (Palo Alto) \u2014 exposition au Cloud Act.<\/td><td class=\"cxc\">Souverainet\u00e9 FR\/EU pure, hors Cloud Act.<\/td><\/tr>\n <tr><td>Maturit\u00e9 \/ traction<\/td><td><b>Avantage Salt.<\/b> ~10 ans, brevets, grands comptes (Alaska Airlines, Hyundai, SoFi\u2026).<\/td><td class=\"cxc\">Pr\u00e9-pilote, assum\u00e9.<\/td><\/tr>\n <\/tbody>\n <\/table>\n <div class=\"callout\"><b>Pas de concurrence frontale.<\/b> Salt <b>voit et d\u00e9tecte<\/b> \u2014 visibilit\u00e9 large, probabiliste, \u00e0 grande \u00e9chelle. CORTEX <b>emp\u00eache<\/b> \u2014 il ferme la classe BOLA par construction, en souverain. Les deux sont compl\u00e9mentaires : Salt pour d\u00e9couvrir et surveiller le parc d’API, CORTEX pour rendre l’\u00e9num\u00e9ration impossible sur la couche autorisation. Le respect port\u00e9 \u00e0 Salt n’enl\u00e8ve rien \u00e0 la diff\u00e9renciation : la souverainet\u00e9, la preuve formelle et l’enforcement par construction ne s’acqui\u00e8rent pas en adaptant une plateforme de d\u00e9tection.<\/div>\n <div class=\"fineprint\">\u00c9valuations \u00e9tablies \u00e0 partir des sources publiques de Salt Security (salt.security \u00b7 Gartner Peer Insights \u00b7 presse) \u2014 \u00e9tat juin 2026. Salt reste libre de faire \u00e9voluer son p\u00e9rim\u00e8tre ; cette comparaison refl\u00e8te le positionnement public observ\u00e9.<\/div>\n <\/div>\n<\/section>\n \n<!-- TERRITOIRE -->\n<section class=\"navy\">\n <div class=\"container\">\n <div class=\"section-header\">\n <span class=\"eyebrow section-eyebrow\">Notre territoire<\/span>\n <h2 class=\"section-title\">Le quadrant <em>que personne n’occupe<\/em><\/h2>\n <p class=\"section-subtitle\">Croisement de deux axes : le <b>m\u00e9canisme<\/b> (enforcement par construction \u2194 d\u00e9tection probabiliste) et la <b>souverainet\u00e9<\/b> (FR\/EU pure \u2194 non). CORTEX IDOR occupe seul le coin enforcement-par-construction \u00d7 souverain.<\/p>\n <\/div>\n <div class=\"quadrants\">\n <div class=\"quadrant\"><div class=\"ql\">D\u00e9tection \u00b7 non souverain<\/div><h4>Acteurs API security US<\/h4><p>Salt, Akamai (ex-Noname), Wallarm, Traceable. D\u00e9tection comportementale mature, mais soumis au Cloud Act et sans enforcement par construction du BOLA.<\/p><\/div>\n <div class=\"quadrant\"><div class=\"ql\">Int\u00e9gration code \u00b7 non souverain<\/div><h4>Autorisation-as-code US<\/h4><p>AuthZed, Oso, Cerbos, OPA\/Styra. Puissants moteurs de politique, mais requi\u00e8rent une int\u00e9gration dans le code et ne s’appliquent pas en coupure.<\/p><\/div>\n <div class=\"quadrant\"><div class=\"ql\">P\u00e9rim\u00e8tre large \u00b7 non souverain<\/div><h4>WAF & passerelles<\/h4><p>Cloudflare, F5, Kong, Apigee. Couverture large mais g\u00e9n\u00e9rique, sans r\u00e9ponse sp\u00e9cifique au BOLA par construction, et hors souverainet\u00e9 FR\/EU.<\/p><\/div>\n <div class=\"quadrant win\"><div class=\"ql\">Enforcement par construction \u00b7 souverain<\/div><h4>CORTEX IDOR\u2122<\/h4><p>Enforcement en coupure sans modification de code + tokenisation capability (\u00e9num\u00e9ration morte par construction) + evidence-first mutation-prouv\u00e9 + souverainet\u00e9 FR\/EU pure. \u00c0 notre connaissance publique en juin 2026, aucun acteur identifi\u00e9 n’occupe simultan\u00e9ment ces quatre caract\u00e9ristiques.<\/p><\/div>\n <\/div>\n <\/div>\n<\/section>\n \n<!-- BARRI\u00c8RES -->\n<section class=\"cream\">\n <div class=\"container-wide\">\n <div class=\"section-header\">\n <span class=\"eyebrow section-eyebrow\">Soutenabilit\u00e9<\/span>\n <h2 class=\"section-title\">Barri\u00e8res <em>\u00e0 l’entr\u00e9e<\/em><\/h2>\n <p class=\"section-subtitle\">Ce qui rend l’avance d\u00e9fendable \u2014 sans surclaim : ce sont des barri\u00e8res d’architecture et de m\u00e9thode, pas de taille.<\/p>\n <\/div>\n <div class=\"barriers\">\n <div class=\"barrier lcard\"><div class=\"num\">I.<\/div><h3>Tokenisation par capability<\/h3><p>L’invariant qui tue l’\u00e9num\u00e9ration n’est pas un patch : c’est un choix d’architecture (jeton opaque AEAD li\u00e9 au mandant). Un concurrent de d\u00e9tection devrait repenser son produit pour le r\u00e9pliquer.<\/p><\/div>\n <div class=\"barrier lcard\"><div class=\"num\">II.<\/div><h3>Discipline evidence-first<\/h3><p>14 propri\u00e9t\u00e9s prouv\u00e9es par mutation, 166 tests, m\u00e9thode anti-placebo (un test doit rougir quand la garantie est cass\u00e9e). Rare dans un produit de s\u00e9curit\u00e9 applicative.<\/p><\/div>\n <div class=\"barrier lcard\"><div class=\"num\">III.<\/div><h3>PEP en coupure, z\u00e9ro modif<\/h3><p>La r\u00e9\u00e9criture transparente des identifiants en coupure, sans toucher au code de l’application, est une ing\u00e9nierie de d\u00e9ploiement non triviale et au c\u0153ur de la valeur.<\/p><\/div>\n <div class=\"barrier lcard\"><div class=\"num\">IV.<\/div><h3>H\u00e9ritage CORTEX NK \/ CFVL<\/h3><p>CORTEX IDOR s’appuie sur le laboratoire de v\u00e9rification formelle du programme CORTEX ORIGIN (micronoyau CORTEX NK, trajectoire CSPN\/EAL) \u2014 une cr\u00e9dibilit\u00e9 d’assurance que peu d’\u00e9diteurs applicatifs poss\u00e8dent.<\/p><\/div>\n <div class=\"barrier lcard\"><div class=\"num\">V.<\/div><h3>Souverainet\u00e9 structurelle<\/h3><p>Souverainet\u00e9 FR\/EU pure, sans investisseur extra-europ\u00e9en ni d\u00e9pendance Cloud Act \u2014 un avantage durable sur les march\u00e9s r\u00e9galiens et OIV europ\u00e9ens.<\/p><\/div>\n <div class=\"barrier lcard\"><div class=\"num\">VI.<\/div><h3>Positionnement de p\u00e9rim\u00e8tre net<\/h3><p>Couvrir le cluster autorisation compl\u00e8tement plut\u00f4t que dix familles superficiellement : un positionnement assum\u00e9 qui parle le langage du RSSI et de l’ANSSI.<\/p><\/div>\n <div class=\"barrier lcard\"><div class=\"num\">VII.<\/div><h3>Ancrage institutionnel souverain<\/h3><p>Le programme CORTEX b\u00e9n\u00e9ficie d’\u00e9changes institutionnels au sein de l’\u00e9cosyst\u00e8me souverain fran\u00e7ais (d\u00e9fense, ex\u00e9cutif, administration). Ce capital relationnel se construit par la dur\u00e9e et la coh\u00e9rence \u2014 il ne s’ach\u00e8te pas et constitue un avantage durable sur les march\u00e9s r\u00e9galiens et OIV.<\/p><\/div>\n <\/div>\n <\/div>\n<\/section>\n \n<!-- CTA -->\n<section class=\"cta\" id=\"contact\">\n <div class=\"cta-content\">\n <h2>Une analyse plus <em>approfondie<\/em><\/h2>\n <p>Cette page pr\u00e9sente le positionnement public de CORTEX IDOR. Le business case d\u00e9taill\u00e9, le mod\u00e8le de pricing, la roadmap commerciale et les \u00e9l\u00e9ments financiers sont disponibles sur demande sous NDA.<\/p>\n <a href=\"mailto:davidsalomon@cortexorigin.com?subject=CORTEX IDOR \u2014 Demande d'analyse march\u00e9 d\u00e9taill\u00e9e\" class=\"btn\">Demander l’analyse d\u00e9taill\u00e9e<\/a>\n <\/div>\n<\/section>\n \n<!-- FOOTER -->\n<footer>\n <div class=\"footer-inner\">\n <div class=\"footer-brand\">\n <h4>CORTEX <span class=\"accent\">AI\u2122 SAS<\/span><\/h4>\n <p>Passerelle d’autorisation en coupure, souveraine, evidence-first. Anti-IDOR \/ BOLA par construction, sans modification du code applicatif.<br>Contact : davidsalomon@cortexorigin.com \u00b7 cortexorigin.com<\/p>\n <\/div>\n <\/div>\n <div class=\"footer-bottom\">\n <div>\u00a9 2026 CORTEX AI\u2122 SAS \u00b7 SIREN 991 880 428 \u00b7 Tous droits r\u00e9serv\u00e9s<\/div>\n <div>Sources publiques \u00b7 donn\u00e9es v\u00e9rifiables \u00b7 \u00e9tat juin 2026. Les tailles de march\u00e9 sont des projections d’analystes tiers ; aucune part de march\u00e9 propre \u00e0 CORTEX IDOR n’est revendiqu\u00e9e \u00e0 ce stade.<\/div>\n <\/div>\n<\/footer>\n \n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Menu ORIGIN\u2122 ORIGIN\u2122 AETZU ARROW AI\u2122 AETZU ARROW AI AETZU ARROW AI\u2122 \u00b7 D\u00e9fense active \u2197 Analyse strat\u00e9gique March\u00e9 et positionnement \u2197 WEB & API Web & API IDOR \u00b7 Passerelle d’autorisation \u2197 Analyse strat\u00e9gique March\u00e9 et positionnement \u2197 APP\u00c2T & LEURRE Famille App\u00e2t & Leurre App\u00e2t & Leurre \u00b7 Vue d’ensemble \u2197 BAITS \u00b7 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1689","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/cortexorigin.com\/index.php\/wp-json\/wp\/v2\/pages\/1689","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cortexorigin.com\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cortexorigin.com\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cortexorigin.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cortexorigin.com\/index.php\/wp-json\/wp\/v2\/comments?post=1689"}],"version-history":[{"count":11,"href":"https:\/\/cortexorigin.com\/index.php\/wp-json\/wp\/v2\/pages\/1689\/revisions"}],"predecessor-version":[{"id":1895,"href":"https:\/\/cortexorigin.com\/index.php\/wp-json\/wp\/v2\/pages\/1689\/revisions\/1895"}],"wp:attachment":[{"href":"https:\/\/cortexorigin.com\/index.php\/wp-json\/wp\/v2\/media?parent=1689"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}