Fleuret raises €3.5M pre-seed

XBOW alternative in Europe: the 5 agentic pentest tools EU regulated buyers actually consider in 2026

Yanis Grigy, CEO8 min read

TL;DR

XBOW is the best-funded autonomous offensive security platform in 2026 ($237 million in capital, US-headquartered, multi-agent architecture). For EU regulated buyers it is structurally hard to onboard: DORA disqualifies US ICT third parties for designated financial entities, the EU AI Act adds high-risk AI obligations from August 2026, and the CLOUD Act gives US authorities reach over data held by US providers regardless of physical location.

The European agentic-pentest set is therefore the relevant shortlist. The five tools EU mid-market CISOs actually consider in 2026, with the trade-offs that matter:

  • Fleuret AI (FR), sovereign full-stack agentic pentest, continuous tiers from €10k to €25k/yr, NIS2 / DORA-ready PDF.
  • Escape (FR), DAST and API-focused agentic engine, $18M Series A, BOLA / IDOR / access control specialty.
  • Aikido Security (BE), Series B, compliance plus AI pentest in a unified suite, broad mid-market reach.
  • Patrowl (FR), exposure management and continuous testing, named in Gartner Market Guide for Preemptive Exposure Management 2026.
  • Pentera (IL), automated security validation, mature large-enterprise comp, ~€46k/yr too steep for most mid-market.

Each section below details architecture, scope, ICP fit, and the reason a particular buyer picks one over the others.

Why CISOs search "XBOW alternative europe"

The query is high-intent. A buyer typing it has already concluded that XBOW is the technical reference and is now hunting for the EU-eligible equivalent. Three drivers stack on top of each other:

  1. DORA structural disqualification. DORA Article 28 + Article 30 supervisory expectations make US-headquartered ICT third parties hard to onboard for designated financial entities. Adding XBOW to a DORA-scope entity's third-party register triggers concentration-risk and third-party-risk reporting obligations that procurement does not want to carry.
  2. EU AI Act obligations from August 2, 2026. High-risk deployments need documented data governance, human oversight, technical documentation per Articles 11-12. A US frontier-model provider in the data path makes this documentation partially out of the buyer's control.
  3. Schrems II and the unstable transfer regime. Privacy Shield was invalidated in 2020. The 2023 Data Privacy Framework partially restored a transfer mechanism, but Schrems III is widely expected. CISOs who got burnt once do not want to bet on it again.

The same query generates non-EU answers (Hadrian, Terra Security, Penligent), which an EU buyer must filter out a second time. This article does the filter.

XBOW: the reference, in one paragraph

XBOW runs a multi-agent autonomous offensive security platform. Multiple specialised agents (recon, planning, execution, validation) coordinate to map an attack surface, plan exploitation chains, and validate findings end-to-end. The architecture is the closest commercial match to what a senior red-team-led junior team produces, at machine speed. Detection rate, validated PoCs, and time-to-finding are best-in-class on public benchmarks. It is the right reference for what agentic pentest can do.

But XBOW operates on US-headquartered infrastructure with US LLM dependencies in the data path. For an EU regulated buyer in 2026, that is not a procurement-friendly pile.

Side-by-side: 5 European alternatives

VendorHQScopeDORA-eligibleOpen-weight LLMAudit-PDF formatPrice bandICP fit
Fleuret AIFranceWebapp, REST/GraphQL API, external infraYesYes (gpt-oss-120b/20b, Kimi K2.5 on Scaleway France)DORA Article 24 + NIS2 mappings, Ed25519 signedPOC €3k / Starter €10k/yr / Growth €25k/yr / €4.9k cohortMid-market 300-5000, NIS2 / DORA-scope, sovereignty-buyer
EscapeFranceAPI, web app (DAST-derived)YesPartial disclosureCustom, framework-tailored snippetsPlatform pricing, not publicScaling SaaS, API-first, dev-team-owned security
Aikido SecurityBelgiumCode, cloud, runtime, AI pentestYesDisclosed in security pagesSOC 2, ISO 27001 mappingsMid-market SaaS-friendly50,000+ orgs, broad mid-market, code-cloud-runtime unified
PatrowlFranceContinuous exposure, attack surfaceYesDisclosedExposure management dashboardsEnterprise pricingMid-large enterprise, exposure-management buyer
PenteraIsraelAutomated security validation, internal + externalPartial (non-EU HQ)NoValidation reports~€46k/yrLarge-enterprise, mature security teams

A few reading notes on the table.

DORA-eligible is binary in column heading but actually a sliding scale. "Yes" means EU-headquartered legal entity with documentable EU operational chain. "Partial" means non-EU HQ but with EU-region offerings that may pass with supplementary measures. Buyers should still run the 7-question sovereignty checklist before signing.

Open-weight LLM matters for AI Act high-risk deployments and for documentable model governance. A "yes" means the vendor can produce model identifier, version, and training-data lineage on demand.

Audit-PDF format is the workflow-lock-in surface that distinguishes vendors who ship pentest as a deliverable from vendors who ship pentest as a workflow. See the compliance-workflow article for why this matters.

Architecture differences that matter at scale

Three architectural choices actually drive different outcomes.

Multi-agent vs single-agent. Public benchmark research shows multi-agent hierarchical architectures outperform single-agent approaches by 4.3× on validated-finding rate. Fleuret, XBOW, and Terra Security run multi-agent. Escape's engine is closer to an agentic-DAST hybrid (effective for API and web app, narrower for full grey-box). Aikido's pentest module is one component of a broader compliance suite.

Open-weight vs frontier-API LLM. Open-weight models (gpt-oss-120b, Kimi K2.5, Mistral) give the vendor full operational control of inference. Frontier-API LLMs (OpenAI, Anthropic, Google) constrain the vendor to a third-party data path. For pentest, where prompts include payloads, response bodies, and authentication artifacts, that constraint translates directly to sovereignty risk.

Coverage Graph vs flat scope tracking. A pentest that does not track exhaustiveness is just a vulnerability scanner with extra steps. Fleuret's Coverage Graph (hierarchical data structure tracking what was discovered, what was tested, what remains unexplored) is one approach. Patrowl's exposure-management dashboard is another. XBOW publishes equivalent coverage abstractions. The exact data structure matters less than whether the vendor can answer "what did you not test, and why".

Buying guide: which European tool fits which buyer

Regulated finance / DORA-scope mid-market. Sovereignty plus DORA Article 24 mapping plus auditor-ready signed reports are non-negotiable. Fleuret AI and Patrowl are the strongest matches. Escape works for the API perimeter alongside one of those.

Mid-market SaaS, dev-team-owned security. API and web app coverage with developer-friendly remediation matters most. Escape leads here. Aikido fits if a unified code-cloud-runtime suite is the buying logic.

Large enterprise, mature security teams. Pentera's cost is justifiable, the validation reports plug into existing red-team programmes. Patrowl scales for exposure management. XBOW is technically valid but adds the DORA / sovereignty drag.

Healthtech, fintech, retail mid-market with NIS2 obligations. NIS2 Annex I mappings, ANSSI ReCyF traceability, Ed25519-signed reports. Fleuret AI is purpose-built for this profile.

Agency or partner-led delivery. Aikido has the broadest channel programme. Fleuret AI has a design partner cohort for direct buyers and is building partner relationships with GRC platforms (separate motion, not the focus of this comparison).

What each vendor does best

Fleuret AI. Sovereign-by-default agentic pentest with the compliance-workflow surfaces (Jira, audit PDF, board export, weekly cadence) wired in by default. Best fit for EU mid-market 300-5000 emp inside DORA / NIS2 scope.

Escape. Strongest agentic engine for BOLA, IDOR, and access control on API surfaces. Developer-friendly remediation, framework-tailored code snippets, regression testing on continuous deployment.

Aikido Security. The "everything platform" play. 50,000+ organisations use the broader suite (SAST, DAST, IaC, container, secrets, plus AI pentest). Right answer when the buying logic is "consolidate vendors", not "pick the best pentest".

Patrowl. Continuous exposure management with attack-surface-monitoring depth, named in Gartner Market Guide for Preemptive Exposure Management 2026. Right answer when the primary problem is "we do not know what we are exposing".

Pentera. Mature automated security validation, strong on internal-network testing. Cost makes it a large-enterprise tool, not a mid-market answer.

What to verify before signing any of them

Run two checklists, both before the product demo:

  1. The 7-question sovereignty checklist for legal-review pre-clearance.
  2. The 7-question workflow-lock-in checklist for operational fit.

Vendors that fail more than two questions on either checklist are not serious candidates for an EU regulated mid-market buyer in 2026.

Where Fleuret AI stands

Sovereign FR-headquartered, open-weight LLMs on Scaleway France, Vercel fra1, public sub-processors page, Ed25519-signed audit PDFs, Jira-integrated workflow, weekly cadence on the Continuous tier. Pricing visible on /pricing.

If you are evaluating XBOW alternatives because of DORA, NIS2, or sovereignty constraints, book a demo or check the design partner cohort: 5 slots, €4,900 flat, 3 AI pentests in 6 weeks, NIS2 / DORA-ready PDF, June 1, 2026 kickoff. Qualification is role one of CISO, Head of Security, CTO, CEO, or DPO, and company size at least 100 employees.

Sources

Share this postShare on LinkedIn

The Fleuret newsletter

One email a month. Cyber analysis, DORA, NIS2, and what we learn pentesting our customers' apps.

Privacy Settings

This site uses third-party website tracking technologies to provide and continually improve our services, and to display information according to users' interests. I agree and may revoke or change my consent at any time with effect for the future.

Privacy PolicyLegal NoticeMore Information