Gaetan Gesret shares cybersecurity analysis and discusses how organizations can manage cyber exposure, vulnerabilities, and risk. Their posts cover Armis threat research and a ServiceNow cybersecurity workshop they moderated.
Gaetan Gesret is most useful for turning technical security concerns into practical questions for leaders.
Best for
A mid-size vendor seeking a French-language spokesperson on exposure management and remediation.
Not for
An English-language consumer cybersecurity or privacy app wanting mass reach on TikTok or YouTube.
Key takeaways
Vulnerability scores alone cannot show whether a flaw is exploitable in a specific environment.
Threat reporting covers edge devices, unmanaged assets, and misuse of remote-management tools.
They moderated a ServiceNow cybersecurity workshop at Les Assises de la cybersécurité.
Check first: Ask for recent reach, engagement and follower seniority data before proceeding.
Main ideas
The conventional vulnerability playbook no longer holds · Going faster is not the same as being in control · Watch how attackers work, not just that an alert fired
Gaetan Gesret shares cybersecurity analysis on LinkedIn and moderates practitioner discussions about security and AI.
In the posts here, the work moves between two scales: explaining how threat activity affects exposed assets, and asking security leaders how to manage vulnerabilities without creating new operational risks.
The posts identify Armis Labs research and a ServiceNow cybersecurity workshop.
A recurring strength is turning technical security concerns into practical questions for organizational leaders.
In one post, Gesret argues that vulnerability scores alone cannot show whether a flaw is exploitable in a specific environment, and points instead to asset exposure, coordinated remediation, and audit evidence.
Another translates threat reporting about edge devices, unmanaged assets, and misuse of remote-management tools into priorities for visibility and behavioral monitoring.
Event material shows a different, conversational mode: moderating a discussion built around what practitioners tried, what failed, and what they would change.
Follow the work for this mix of cyber-risk explanation and practitioner exchange.
Gesret writes in French for IT and security decision-makers — including the DSI, RSSI, CIO and CISO roles tagged across the posts — turning vendor threat research and platform messaging into short, structured arguments.
Read more
Their consistent position is that exposure management needs an architectural change, not a faster version of the same process: establish whether a flaw is reachable in your environment, orchestrate the vulnerability lifecycle from visibility to a validated fix, and document the work for audits. Threat research highlights defenders' blind spots — edge devices, unmanaged "shadow" assets and legitimate remote administration tools — while AI is assessed through practitioners' experience rather than treated as a debate to be settled.
The conventional vulnerability playbook no longer holds
Gesret argues that when a digital asset can be compromised within 40 minutes of going online, traditional remediation timelines are obsolete.
Read more
Severity scoring is not the deciding factor: neither CVSS scores nor CISA's known-exploited list, they argue, tells you whether a flaw is exploitable in your specific environment. The priority is reachability — whether the vulnerability can actually be reached and used in this organisation — with an architectural response rather than a faster patch cycle.
The post cites Forrester's early conclusions and recent field experience with Mythos and Daybreak, then asks readers whether their 2026 priority is chasing 0-days and unqualified vulnerabilities or building a system that can absorb the shock at machine speed.
The counterweight to that urgency: automating patching without rigorous orchestration risks breaking production, so speed without control only adds risk.
Read more
Gesret sets out three requirements for a proactive posture: know each asset's exposure through reachability rather than raw severity; manage the vulnerability lifecycle end to end, from visibility of critical, vulnerable and exposed assets to validation of the fix; and generate proof of remediation, so that in regulated environments an autonomous action produces an audit trail and updates the compliance record in near real time. The tension is deliberate: the old playbook is too slow, and simply accelerating it is a trap.
A warning against automation-as-default, closing with a direct either/or question about readers' 2026 priorities.
Watch how attackers work, not just that an alert fired
Drawing on Armis Labs research, Gesret reports a sharp rise in regional cyber activity in the Middle East since February 2026, tracking more than 60 groups and roughly 1,300 IP addresses, including hacktivist proxies and state-linked groups such as APT33 and MuddyWater.
Read more
They point to four shifts in tradecraft: AI-assisted reconnaissance that automates targeting of critical infrastructure and uses default credentials; systematic exploitation of edge devices and unmanaged "shadow" assets; a move away from extortion toward data-destroying wipers; and lateral movement that abuses legitimate remote monitoring and management tools to evade signature-based detection.
The takeaway: waiting for a traditional, uncontextualised alert is no longer viable.
Defenders need exhaustive visibility of edge and unmanaged assets, plus behavioural monitoring of administrative and remote-access tools.
Gesret credits the research to Armis Labs threat analysts and notes that Armis co-founder and Group CTO Nadir shared it.
A bulleted "points to remember" list of observed tactics, each paired with the defensive implication, written for cyber-defence teams rather than as an intelligence report summary.
Judge AI in security by field experience, not by the debate
Gesret moderated a session framed as "AI: firefighter or arsonist?" not to settle the argument, but to compare lived experience: what worked, what got stuck and what the speakers would do differently.
Read more
The same preference for direct practitioner conversation over broadcast claims comes through in the promotion of the Armis France stand at a Cannes exhibition, offering a personalised platform demonstration and pre-booked one-to-one meetings with the team. The panel framing is Gesret's; the operational experiences reported on stage are the guests' own.
A 45-minute workshop at Les Assises de la cybersécurité on 8 October, moderated by Gesret with Jerome Brognier of Amadeus and Régis Lucas of Groupe Rocher; ServiceNow's Cybersecurity and Risk division proposed the session. A separate post promotes stand C19 at the IT and Cybersecurity One to One Meetings in Cannes, 17 to 19 March 2026.
Explains why exposure management keeps coming up: traditional patching and scoring are described as structurally inadequate, and the post names replacement priorities buyers can act on.
Read more
Gaetan Gesret argues that the traditional vulnerability management playbook is failing because an asset can be compromised within 40 minutes of going online.
They cite Forrester conclusions and field experience with Mythos and Daybreak.
CVSS scores and even CISA's Known Exploited Vulnerabilities list are not enough; teams need reachability, meaning whether a flaw is actually exploitable in their specific context.
The proposed pivot is architectural: orchestration across the vulnerability lifecycle, from visibility into critical exposed assets through validating the fix, plus audit trails and real-time compliance updates in regulated environments.
The post closes by asking whether 2026 priorities are chasing zero-days or building a system that can absorb shocks at machine speed.
For brands planning a campaign
For a vendor selling exposure management, this post is a ready-made spokesperson script: it names the problem, the buyers in DSI and RSSI roles, and the required solution— orchestration, reachability, and proof of remediation. Gesret frames the issue in operational language rather than product features.
Shows how they translate threat research into defensive priorities for edge and unmanaged assets, helping buyers understand the exposure gaps attackers use.
Read more
This post summarizes Armis Labs research showing a rise in regional cyber activity in the Middle East since February 2026.
It describes more than 60 groups and 1,300 actively monitored IP addresses, including hacktivist proxies and state-linked groups such as APT33 and MuddyWater.
Observed techniques include AI-assisted reconnaissance that automates targeting of critical infrastructure and focuses on default credentials; systematic exploitation of edge devices and unmanaged shadow IoT assets; a shift from extortion to data-destroying wipers; and misuse of legitimate remote monitoring and management tools for lateral movement.
The recommendation is exhaustive asset visibility and behavioral analysis of administrative and remote-access tools instead of waiting for traditional, uncontextualized alerts.
For brands planning a campaign
For a proactive defense campaign, this piece shows how Gesret takes vendor research and draws out actionable defensive implications. A brand could use it as a template for threat research content that connects intelligence to a buyer's asset visibility gap rather than only reporting indicators.
Shows Gesret's stage role: moderating a peer comparison of AI in cybersecurity, focused on what worked and what did not in practice.
Read more
Gaetan Gesret announced they would moderate a 45-minute workshop on Thursday 8 October during Les Assises de la cybersécurité.
The session asks whether AI is a firefighter or an arsonist, comparing field experience rather than settling the debate: what worked, what got stuck, and what the speakers would do differently.
The two speakers are Jerome Brognier of Amadeus and Régis Lucas of Groupe Rocher.
The workshop was proposed by the Cybersecurity & Risk division of ServiceNow.
For brands planning a campaign
A vendor planning a speaking engagement can see Gesret's format: two practitioner case studies, a sharp framing question, and room for direct takeaways. They moderate to draw out operational lessons rather than deliver a product pitch, a useful model for a sponsored session that still needs to feel like peer exchange.
Shows the event channel Gesret's team uses to meet cybersecurity buyers face to face, relevant context for a speaking or field-marketing plan.
Read more
The post announces that the Armis team will attend the 2026 IT and Cybersecurity One to One Meetings Exhibition Europe in Cannes from 17 to 19 March 2026.
It invites people to stand C19 to see the latest news, attend a personalized demo of the Armis Centrix platform, and discuss security challenges.
It also prompts booking a '121' meeting.
For brands planning a campaign
For a campaign that includes event presence, this shows a concrete field-marketing motion: stand, demo, and pre-booked one-to-one meetings. The post can preview what a vendor's own event stand or meeting program would look like.
Approach: vendor research turned into practitioner takeaways in French4
Middle East attack campaigns and attacker tradecraft1
The traditional vulnerability-management playbook is breaking down1
Automation without orchestration is a trap1
Moderating practitioner panels on AI in security1
Field events and platform demonstrations1
Middle East attack campaigns and attacker tradecraft
In a post based on Armis Labs research, Gaetan Gesret reports a sharp rise in regional cyber activity in the Middle East since February 2026, tracking more than 60 groups and around 1,300 IP addresses, including hacktivist proxies and state-linked groups such as APT33 and MuddyWater.
Read more
They highlight four shifts in attacker behaviour: AI-assisted reconnaissance that automates targeting of critical infrastructure; systematic exploitation of edge devices and unmanaged “shadow” assets; a move away from extortion toward data-destroying wipers; and lateral movement that abuses legitimate remote monitoring and management tools to evade signature-based detection.
Their conclusion: waiting for an uncontextualised security alert is no longer viable.
Defenders need full visibility of edge and unmanaged assets, plus behavioural monitoring of administrative tools.
Presents a numbered set of “points to remember on observed TTPs,” each with a defensive implication, and credits the research to named Armis colleagues.
For brands planning a campaign
Usable problem framing for vendors selling attack-surface visibility, edge security, unmanaged-asset discovery or behavioural detection around remote administration tools.
A campaign could ask Gesret to give a practitioner-facing briefing on the TTPs described.
Because the underlying research belongs to Armis Labs, the material promotes that vendor’s research rather than offering neutral analysis.
The traditional vulnerability-management playbook is breaking down
Citing Forrester’s early conclusions and field experience with Mythos and Daybreak, Gesret argues that the conventional approach to vulnerability management no longer holds when a digital asset can be compromised within 40 minutes of going live.
Read more
They say traditional remediation SLAs are structurally obsolete, and neither CVSS scoring nor CISA’s known-exploited list is sufficient on its own.
Their proposed pivot is reachability: knowing immediately whether a flaw is exploitable in a specific environment.
They present this as an architectural change, not a faster version of the same process, aimed at IT and security leaders setting exposure and risk priorities for 2026.
For brands planning a campaign
Gesret states the exposure-management case plainly enough to anchor a campaign’s opening problem statement.
The framing draws on conversations they say they have with IT and security leaders through Armis and ServiceNow.
A vendor using it should expect to position against the platforms they already represent, not alongside them.
Gesret’s counter-argument to “just go faster” is that automating patching without rigorous orchestration risks breaking production: speed without control simply adds risk.
Read more
They set out three requirements for a proactive posture: understand each asset’s exposure through reachability rather than raw severity scores; manage the vulnerability lifecycle end to end, from identifying critical exposed assets to validating the fix; and produce audit evidence so autonomous action updates compliance records in near real time in regulated environments. They close by asking readers whether their 2026 priority is chasing 0-days and unqualified vulnerabilities or building a system that can absorb the shock at machine speed.
Ends with a direct either/or question to invite replies and debate.
The argument comes from within the Armis and ServiceNow platform position, so competitive orchestration tools would be positioned against it, not supported by it.
For brands planning a campaign
Gesret’s differentiating angle is governance, orchestration and audit evidence, rather than speed claims alone.
It suits vendors selling remediation orchestration, compliance evidence or regulated-industry workflow.
The closing question offers a ready-made hook for co-authored content or a moderated discussion.
Gesret moderated a 45-minute session at Les Assises de la cybersécurité on 8 October, titled “AI: firefighter or arsonist?”, with Jerome Brognier of Amadeus and Régis Lucas of Groupe Rocher.
Read more
They describe the aim as comparing lived experience — what worked, what got stuck and what they would do differently — rather than settling the debate, and promote the session as a source of ideas listeners can apply after the event. ServiceNow’s Cybersecurity and Risk division proposed the workshop, and the post invites the audience to attend.
For brands planning a campaign
Shows Gesret can host a panel featuring named enterprise practitioners and steer it toward practical takeaways.
For a speaking engagement, the realistic model is a vendor-hosted session with customer voices, as here, rather than independent conference moderation.
A competing vendor should ask whether the same format can be framed neutrally.
Gesret promoted the Armis France team’s presence at the IT and Cybersecurity One to One Meetings Exhibition Europe in Cannes from 17 to 19 March 2026, at stand C19.
Read more
The post invites security leaders to book one-to-one meetings, see a personalised demonstration of the Armis Centrix platform and discuss their security priorities with the team.
For brands planning a campaign
Shows hands-on field-marketing support — event promotion, stand-based meeting booking and product demos — alongside the technical posting.
Useful for a vendor considering Gesret for event amplification in France.
Ask for separate evidence of independent thought leadership if that is part of the brief.
Approach: vendor research turned into practitioner takeaways in French
Across Gesret’s posts, the recurring approach is to turn vendor threat research and platform messaging into short, structured French-language posts for IT and security decision-makers.
Read more
Two posts are technical, using bulleted “points to remember” and defensive recommendations; two promote events, one with an explicit call to book a meeting.
Hashtags target governance, risk, exposure management, automation and CIO/CISO roles.
Posts tag named colleagues, Armis team members and enterprise speakers.
The register is direct and advisory rather than academic, and posts consistently close with a question or an invitation to make contact.
Bulleted takeaways, role-targeted hashtags, tagged colleagues and speakers, and a closing question or invitation to get in touch.
For brands planning a campaign
Brands can expect a partner-style amplification voice: content aligned to the platforms Gesret represents, delivered in French to a French-speaking security audience, with clear calls to action. That makes them a good fit for technical briefings, launch support and event promotion in that market, but a poor fit for adversarial comparisons of competing security tools or content requiring public criticism of the vendors they work with.
The posts connect Gaetan Gesret’s cybersecurity commentary and event work with Armis and ServiceNow.
Read more
Ask for confirmation of their employment or contractual status with either company.
Armis
Disclosed partnership
In a post about vulnerability management, Gesret says Armis and ServiceNow are accompanying CIOs and CISOs facing changes in the vulnerability-management playbook.
Read more
Other posts share Armis threat research and promote an Armis event. Ask for confirmation of their employment or contract status.
Gesret describes a ServiceNow Cybersecurity & Risk division workshop at Les Assises de la cybersécurité, where they moderated a discussion about practical experiences with AI.
Read more
They also refer to Armis and ServiceNow accompanying security leaders on vulnerability management. Ask for confirmation of their employment or contract status.
Gaetan Gesret writes short, structured French briefings for security decision-makers.
Read more
Start with the vulnerability-management argument: it sets out their recurring position that exposure management needs an architectural change, not a faster version of the same process, because what matters is whether a flaw is actually reachable in your environment.
The post on Armis Labs research shows their second mode: reading attacker tradecraft—AI-assisted reconnaissance, edge and unmanaged devices, destructive wipers, and abuse of legitimate remote administration tools—and turning each observation into something a defence team should check.
Two event posts show a third mode: promoting a platform demonstration at a Cannes exhibition and a practitioner panel on AI in security, with an emphasis on field experience rather than a settled verdict.
Across the four posts, the through-line is practical consequence: what a technical shift changes for people running exposure, remediation and compliance.
CybersecurityThreat intelligenceVulnerability managementExposure managementAI in securityCyber risk governanceTurning vendor research into practitioner takeawaysModerating practitioner panelsSecurity event and demo promotionLinkedIn postsBulleted takeawaysEvent announcementsSecurity and IT executivesCyber defence teams
Rousseau publishes short French LinkedIn briefings: they take a technical shift, turn it into numbered practical points and address enterprise IT leaders from inside a commercial organisation that serves them.
Read more
Both write for decision-makers weighing platforms and operating models, not just hands-on engineers.
Rousseau covers data engineering, analytics and AI platforms, writing as an agency co-founder who draws on client engagements and compares tools such as Snowflake and Databricks. Gesret covers security exposure, threat research and remediation, drawing on vendor research and the platform their own organisation sells.
Both use a blunt opening that names a familiar problem, a diagnostic in numbered steps and a close that asks a question or offers a working resource.
Read more
Each aims French-language posts at business audiences making budget decisions.
Duvergé covers marketing and customer acquisition economics: audit method, cost-per-lead and cost-per-acquisition figures, channel costs and referrals. Their work is for marketing, growth or revenue leaders, not the DSI or RSSI audience Gesret addresses.
Both make security concrete by citing named reports—OWASP, IBM, Gartner and arXiv in Charles's posts—and end with a personal takeaway linking technical risk to business consequences.
Read more
Both treat identity and access problems as product and strategy questions, not just IT debt.
Charles writes as a product leader about identity, access, secrets management and compliance deadlines such as the EU Cyber Resilience Act, in both English and French, addressing product managers. Gesret writes in French from a vendor-side position for security and IT leaders, covering exposure management and observed attacker tradecraft.
Gaetan Gesret's only measured audience figure is a LinkedIn following of 2,742, recorded on 9 October 2026.
Read more
That is a practitioner-scale audience, not a mass-reach one.
It could work for a spokesperson engagement seeking peer credibility with French-speaking enterprise security teams.
For a campaign that depends on broad top-of-funnel reach, the following is thin; the plan should rely on the content's credibility, not audience size.
All four posts are written in French and address enterprise security leaders — DSI, RSSI, CISO — in language aimed at people who run exposure management, vulnerability remediation and threat intelligence programmes.
They also connect to the French and European security event circuit, including the IT and Cybersecurity One to One Meetings in Cannes and Les Assises de la cybersécurité in Monaco, and tag named individuals at Armis, ServiceNow and customer organisations.
The subject matter suggests an audience of practitioners, along with the vendor and event ecosystem around them.
Before committing to a speaking and content plan, ask for recent account analytics showing reach and engagement on comparable posts and, if available, audience survey or demographic data on followers' seniority and job function.
That will help establish whether the audience matches a campaign aimed at exposure-management decision makers or merely sits adjacent to them.
Gaetan Gesret's four LinkedIn posts cover Armis Labs threat research on Middle East attack activity; commentary with Armis and ServiceNow on vulnerability management and exposure assessment; promotion of an Armis stand at the IT and Cybersecurity One to One Meetings in Cannes; and a ServiceNow cybersecurity workshop at Les Assises de la cybersécurité, which they moderated with speakers from Amadeus and Groupe Rocher.
Read more
The posts place them on the vendor side of these relationships—presenting Armis research and hosting a ServiceNow event—rather than offering independent sponsored content.
No sponsor policy, published formats, pricing, audience figures for paid placements, partnership contact, or official inquiry route is listed.
A vendor considering them as a spokesperson for exposure management should ask directly whether they accept sponsorships or paid partnerships.
A mid-size vendor selling exposure management and remediation orchestration wants a French-language spokesperson for a six-month content and speaking engagement aimed at DSI, RSSI and CISO buyers in France.
Read more
This is a strong fit for four specific reasons.
First, the subject match is exact.
The vulnerability-management post argues that a conventional patching playbook breaks down when an asset can be compromised within 40 minutes of going live; CVSS scores and even CISA's known-exploited list are not enough on their own.
The fix is architectural: reachability, end-to-end lifecycle orchestration, and generating audit evidence in near real time when action is automated.
That is the exposure-management case a vendor needs, already expressed in the buyer's operational language.
Second, Gesret already performs the translation layer a vendor pays for.
The Middle East threat-research post turns Armis Labs findings into defensive priorities for the asset gaps attackers are using: edge devices, unmanaged shadow assets, and legitimate remote monitoring tools abused for lateral movement.
A vendor gets a spokesperson who turns research into implications, not someone who simply reports indicators.
Third, the speaking format is proven.
Gesret moderated a 45-minute session at Les Assises de la cybersécurité on 8 October with named enterprise speakers from Amadeus and Groupe Rocher.
Framed as a comparison of lived experience — what worked, what got stuck, what they would do differently — the session was proposed by ServiceNow's Cybersecurity and Risk division.
That vendor-hosted customer-voice model is demonstrated, not hypothetical.
Fourth, the field motion exists.
The Cannes post shows effective event amplification: a stand, a personalised Armis Centrix demo, and pre-booked one-to-one meetings at the IT and Cybersecurity One to One Meetings Exhibition Europe.
The measured audience is practitioner-scale — 2,742 LinkedIn followers, observed 9 October 2026 — so measure the campaign by the quality of the room and the usefulness of the content, not impressions.
No sponsor policy, rate card, published formats or partnership contact appears in the posts; confirm commercial terms directly with Gesret.
When to choose a specialist
An English-language consumer cybersecurity or privacy app wants short-video sponsorship to build mass awareness on TikTok and YouTube.
Read more
This is a poor fit.
All four posts are in French and address enterprise security leaders — DSI, RSSI, CISO — not consumers.
The posts show no consumer-facing framing, app downloads or privacy advice for individuals.
The only measured audience figure is 2,742 LinkedIn followers; the posts publish no reach, impressions, engagement rate or follower-growth data, so there is no measured basis for a mass-reach claim.
They also mention no video work, transcript or recorded talk, leaving no basis to assess short-form video ability.
The content is first-party vendor messaging for Armis and ServiceNow, so an unrelated consumer brand would be buying adjacency to enterprise vendor pipeline rather than tapping consumer relevance.
Before proceeding, ask Gesret for account analytics on reach and engagement, and for any English-language or consumer-facing work.
A worked campaign example
Worked angle: “The 40-minute problem” — a three-part engagement for the vendor selling exposure management and remediation orchestration, built around the argument Gesret already makes in public.
Opening piece.
A short briefing post framing the buyer's problem in their own terms: an asset can be compromised within 40 minutes of going live; traditional remediation SLAs are structurally obsolete; and neither severity scoring nor a known-exploited list tells you whether a flaw is actually exploitable in your environment.
Close with the question Gesret already uses — will 2026 be spent chasing zero-days, or building a system that can absorb the shock at machine speed?
Route replies into the campaign.
Live session.
A 45-minute moderated panel at a French security event, following the Assises model: two named enterprise speakers, one from a regulated industry and one from a platform engineering or operations role, discussing what worked, what got stuck, and what they would do differently.
Publish a one-page takeaway checklist before the session ends and record it for reuse.
Follow-up asset.
A remediation-evidence checklist covering the three requirements Gesret sets out publicly: triage by reachability rather than raw severity; lifecycle orchestration from visibility of critical exposed assets through to validating the fix; and audit trails that update compliance records when action is automated.
Gesret hosts and frames it; the vendor owns the product claims.
This works as a campaign, not just a sponsorship: the angle starts from a recognised problem, uses a format Gesret has run with real customer voices, and converts attendance into booked follow-up meetings, matching the field motion visible in their event posts.
One tradeoff: expecting neutral comparison between competing security tools would be unrealistic.
Gesret's published positions sit inside Armis and ServiceNow.
The posts publish no reach or engagement figures, so set KPIs on registrations, session completion and follow-up meetings rather than impressions.
If the campaign's buyer decision shifts from exposure management to modernising the enterprise data stack, Rousseau is the stronger choice.
Read more
As co-founder of Modeo, a 30-engineer data agency, Rousseau writes in French for data leaders about platform and organisational tradeoffs: Snowflake pushing toward an all-in-one platform while clients stay wary of putting every egg in one basket; Databricks marketing self-service BI before it is genuinely accessible to non-technical users; the dbt acquisition as a blow to the Modern Data Stack idea even as MDS adoption widened among CMO, CRO, growth and RevOps teams; semantic layers becoming a prerequisite for agent tooling; FinOps turning critical as cloud bills climb; and the six pain points — siloed KPIs, manual rework, poor data quality, unexploited CRM data, infrastructure that will not scale, and self-service bottlenecks — that justify building a data platform. For a vendor whose audience is DSI and data leadership rather than security leadership, Rousseau offers the same translation layer Gesret provides, applied to a different operational domain.
For the security vendor's exposure-management campaign, Rousseau's posts do not cover exposure management, vulnerability remediation, threat research or security-event formats.
The subject match that makes Gesret a strong fit is absent.
Choosing Rousseau would mean changing the campaign's topic, not just its spokesperson; the plan would need to target data-platform buyers to be worth running.
If the same vendor needed a French-language spokesperson for the marketing economics conversation — how acquisition costs have changed, which channels still work, why referral is under-structured, and how to audit marketing before spending more — Duvergé is a better choice.
Read more
The posts offer a diagnostic frame for B2B marketing: the audits described start from prospects who cannot clearly explain how they win clients, and the useful audit takes five steps — compare the message with the market, re-read the public channels you actually use, track behaviour rather than stated intent, kill the signals that are failing, and turn the audit into a 90-day action plan.
The CAC post adds concrete numbers: B2B acquisition costs up 40-60% between 2023 and 2025, Google Ads CPC up 12% year on year and up 164% since 2019, LinkedIn Ads cost per lead between €900 and €1,850 for B2B services, outbound cold at €1,820, referral at €140.
It also attaches a Google Sheets kit for calculating real CAC.
For a campaign aimed at CMOs or growth leadership, that material is directly usable.
The vendor's campaign targets DSI, RSSI and CISO buyers with exposure-management content.
Duvergé's posts focus on marketing operations and acquisition costs, not security, making the match weaker than Gesret's for this campaign.
The strongest piece is a numbers post with a downloadable kit; the vendor's plan calls for a moderated panel and a remediation-evidence asset.
Choosing Duvergé means accepting a different audience and rewriting the campaign.
For a vendor seeking a bilingual product-management voice connecting cybersecurity to roadmap and compliance decisions, Charles M. is a credible alternative.
Read more
Their posts treat security as an invisible product feature: hard-coded secrets still leaking into repositories, flagged again in OWASP's 2025 Top 10 for Non-Human Identities; stolen tokens and certificates enabling lateral movement; boards paying attention after breach-cost research; and the Jaguar Land Rover attack as an illustration of factory shutdowns, supplier job cuts and estimated losses of £50m a week.
The second post links Gartner's finding that 62% of organisations had faced GenAI or deepfake-based attacks in 2025, research showing biometric systems can be fooled by AI-generated deepfakes, and the EU Cyber Resilience Act's mandatory requirements from 11 December 2027, concluding that security and compliance cannot stay as later backlog items.
Both posts are published in English and French, and the audience is product leadership, not only security leadership.
For a campaign that needs a product-side speaker on IAM, secrets management or the CRA deadline, Charles M. is closer to the need than either of the other two comparators.
For the vendor's campaign — a French-language spokesperson for exposure management and proactive defence, speaking to DSI, RSSI and CISO — Charles M.'s positions sit one layer up.
Their posts are about product strategy, trust and invisible features, not reachability triage, lifecycle orchestration of vulnerabilities, or audit evidence generated when patching is automated.
The vendor would gain a compliance-and-product framing but lose the operational remediation detail Gesret already publishes.
Charles M. would suit a narrower identity, secrets and CRA component of the campaign rather than the full exposure-management campaign.
Research for this page covered four full LinkedIn posts written by Gaetan Gesret and published between 3 March and 2 October 2026: an argument that conventional vulnerability management breaks down when assets can be compromised within 40 minutes of going live, a summary of Armis Labs threat research on Middle East activity since February 2026, promotion of the Armis France stand at the IT and Cybersecurity One to One Meetings in Cannes (17 to 19 March 2026), and a 45-minute panel on AI in security that Gesret moderated at Les Assises de la cybersécurité on 8 October 2026.
A LinkedIn follower count of 2,742 was observed on 9 October 2026.
For context, six posts published between September 2025 and September 2026 by three other creators working in adjacent areas — data platforms and AI, B2B marketing and acquisition costs, and product management and cybersecurity — were read for comparison.
Not established by this material: posting history before March 2026, long-form writing, books or recorded talks, reach and engagement figures, follower demographics, and any sponsorship, rate or partnership terms.
Read the title and description as a summary of these four posts only; where evidence is thin, the page says so rather than filling the gap.
