Fleuret raises €4M

Fleuret AI, the French startup automating penetration testing with agentic AI, has closed a €4M pre-seed round led by RAISE Ventures, alongside Auriga Cyber Ventures, Wind Capital, Better Angle and leading business angels from the cybersecurity world.

The platform is built to move penetration testing from a one-off audit to continuous security, across five pillars: know the exposed systems, identify the vulnerabilities, prove they can be exploited, help fix them, and verify they are fixed.

Companies change their systems every day while security requirements keep rising. Under NIS2 in particular, a growing number of organisations have to demonstrate how robust their security is. Yet penetration testing still rests largely on one-off audits: a snapshot of a system at a given moment, when a new deployment a few days later can already have changed its attack surface.

Fleuret automates the pentester's work with two AI agents, Emile and Champollion. They map a company's environment, explore its applications, APIs and infrastructure, then try to exploit the vulnerabilities they find. Every finding comes with a proof of compromise that shows concretely how it can be exploited. The platform then keeps watching the attack surface and can trigger new tests as the system changes.

Beyond finding vulnerabilities, Fleuret is building the tools to see them through to resolution: prioritisation by exploitability, integration with the tools engineering teams already use, automatic re-testing, and reports that verify a vulnerability has actually been fixed.

Fleuret has around ten people today and several customers, including Brevo, Stoïk and Yogosha. From the start, the ambition is European: make offensive security accessible to every company, including those that cannot afford regular penetration tests.

The round funds new hires in AI, software engineering and offensive security, and a faster build-out of the platform. Operated from Europe on European infrastructure, the agents also meet the growing sovereignty requirements of companies in the most regulated sectors.