Fleuret AI Raises €4M to Automate Offensive Cybersecurity
Fleuret AI Raises €4M Pre-Seed
Fleuret AI has raised €4 million in a pre-seed funding round to develop its agentic AI platform for automated penetration testing. The Paris-based startup is targeting a shift from periodic security audits to continuous testing as companies' digital systems and attack surfaces change more frequently.
The round was led by RAISE Ventures, with participation from Auriga Cyber Ventures, Wind Capital, Better Angle and cybersecurity-focused business angels. The company plans to use the funding to hire specialists in AI, software engineering and offensive cybersecurity and accelerate development of its platform.
AI Agents Simulate Offensive Security Testing
Fleuret's platform is designed around five stages: mapping exposed systems, identifying vulnerabilities, proving whether those vulnerabilities can actually be exploited, supporting remediation and checking whether fixes work.
The company uses two AI agents, Emile and Champollion, to map environments and explore applications, APIs and infrastructure. When they identify a potential weakness, the agents attempt to exploit it and produce a proof of compromise intended to demonstrate that the vulnerability is actionable.
The platform is also designed to keep monitoring a company's attack surface and initiate additional testing when systems change. That approach addresses a limitation of conventional penetration testing, where an assessment can become outdated soon after a new deployment or configuration change.
From Finding Vulnerabilities to Verifying Fixes
Fleuret is developing capabilities beyond vulnerability discovery. These include prioritising weaknesses according to exploitability, integrating findings with existing engineering tools, automatically retesting systems and generating reports confirming whether vulnerabilities have been fixed.
The company says these capabilities are intended to make security testing a continuous process rather than a compliance exercise carried out at fixed intervals. Some of the remediation functionality remains under development, however, so it should not be treated as fully deployed technology yet.
European Infrastructure and Sovereignty
Fleuret is focusing on the European market and says its agents operate from Europe on European infrastructure. The company sees this as particularly relevant for regulated organisations with data-sovereignty requirements.
The startup was founded by Yanis Grigy, CEO, and Augustin Ponsin, CTO. It currently has around 10 employees and says it already works with customers including Brevo, Stoïk and Yogosha.
AI Brings a New Model to Penetration Testing
Traditional penetration testing relies heavily on security specialists manually examining systems and attempting different attack paths. Fleuret is betting that AI agents can make parts of that process repeatable enough to run continuously.
That model also introduces its own challenges. Offensive AI needs clearly defined testing boundaries because the same capabilities used to demonstrate a vulnerability can potentially disrupt a production system if they are poorly controlled. At its current pre-seed stage, Fleuret has yet to publish broad independent performance data showing how its agents compare with experienced penetration testers.
The new funding gives the startup room to expand its team and turn its agentic testing platform into a larger enterprise security product. Its longer-term goal is to make offensive security available continuously, including for organisations that cannot afford frequent conventional penetration tests.
