TESTABLE (2021-2024) directly targets web application security and privacy testing using pattern-driven methodologies and both static and dynamic analysis techniques.
NORTONLIFELOCK FRANCE
Commercial cybersecurity firm contributing industry-grade web application security testing and threat defense expertise to EU research consortia.
Their core work
NortonLifeLock France (formerly Symantec France) is the French R&D arm of one of the world's largest commercial cybersecurity companies. In H2020 research, they contribute industry-grade expertise in threat detection, vulnerability analysis, and application security testing — bridging the gap between academic security research and real-world product deployment. Their participation in EU projects brings commercial threat intelligence and security engineering know-how that purely academic partners cannot provide. They focus specifically on making security testing more systematic, automated, and scalable for modern web applications.
What they specialise in
REACT (2018-2021) focused on reactive defense against advanced cybersecurity threats, aligning with Symantec's core commercial threat intelligence capabilities.
TESTABLE introduced testability patterns and static analysis as a structured approach to security validation, reflecting deeper software engineering expertise beyond pure security operations.
Privacy appears as an explicit keyword in TESTABLE (2021-2024), suggesting growing alignment with GDPR-era requirements for privacy-by-design in web software.
How they've shifted over time
Their first project, REACT (2018-2021), focused on reactive defense against advanced threats — a broad cybersecurity posture matching Symantec's traditional endpoint and network security product line. By 2021, with TESTABLE, their EU research focus narrowed and deepened into the engineering of security testing itself: how to make web applications systematically testable, using static and dynamic analysis combined with formal testability patterns. This represents a clear shift from threat response toward security assurance methodology — from defending systems to proving they are defensible before deployment.
They are moving toward the software engineering end of cybersecurity — automated, pattern-based testing frameworks — which positions them well for future projects around DevSecOps, secure software development lifecycles, and AI-assisted vulnerability detection.
How they like to work
NortonLifeLock France consistently joins projects as a participant, never as coordinator — a deliberate industry-partner role where they contribute commercial expertise without carrying project management overhead. With 13 unique partners across 8 countries across only 2 projects, they operate in reasonably sized international consortia rather than bilateral arrangements. This suggests they are sought out as an industry anchor to add real-world grounding to research-heavy security projects.
They have built connections with 13 distinct organizations across 8 countries through just two projects, indicating broad geographic spread in their EU research network. No country concentration is evident from the available data, pointing to a genuinely European collaboration footprint.
What sets them apart
NortonLifeLock France is one of the very few EU research participants that brings a commercial cybersecurity product perspective — they know what security failures look like at scale, across millions of real users, not just in lab conditions. For consortium builders, this means access to real threat data, industry validation credibility, and a direct link between research outputs and market-ready security products. They fill the critical industry-partner slot that funding agencies require and that genuinely strengthens the practical relevance of security research projects.
Highlights from their portfolio
- TESTABLEThe larger of their two projects (EUR 706,851) and their most technically specific contribution, targeting a genuine gap in security engineering: making web applications systematically testable for security and privacy rather than relying on ad-hoc penetration testing.
- REACTTheir entry into EU-funded research, demonstrating early willingness to collaborate with academic partners on advanced threat defense at a time when Symantec was the world's largest cybersecurity vendor by revenue.