Yogosha is a French offensive security company based in Paris that runs a testing platform with a community of researchers. Its offer includes pentesting as a service (PtaaS) with fixed-scope tests, bug bounty programmes paying researchers per valid finding, vulnerability disclosure programmes for third-party reports, and special operations such as red teaming. Clients manage tests through a web dashboard that shows reports, triage and retests. Researchers are identity-checked and bound by non-disclosure agreements.
France is an EU member state, and the address in the website footer is in Paris. The website does not name the company's owners and gives no information on where the platform or client data is hosted, nor any data residency statement. European clients should therefore have hosting locations and sub-processors set out in the contract. Test reports often contain highly sensitive information about systems, so where they are stored is an important sovereignty point. Yogosha is a service rather than a self-hostable product.