Fleuret AI
Fleuret AI provides agentic AI-powered penetration testing for web applications and APIs, combining the depth of a consulting firm with the speed of an automated scanner. The platform delivers verified, reproducible proof-of-concept evidence for every finding and produces DORA/NIS2-compliant audit-ready reports, with all data hosted on European infrastructure in Paris.
- Cybersecurity
- AI Agents
- Artificial Intelligence
- Developer Tools
- Software Only
Funding
Raised to date
€4MRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Est. $4.4Macross 1 round
AAEFGLJF+4€4M · Pre-Seed
Announced Oct 2026
Disclosed cumulative: $4.4M
Founders
Founder details are not available yet.
Product
Problem
Traditional penetration testing requires engaging expensive consulting firms that charge €15,000–€30,000 per engagement and take 2–4 weeks to deliver reports, while legacy automated scanners are fast but produce shallow results with many false positives. This leaves organizations with a difficult trade-off between cost, speed, and quality when validating the security of their web applications and APIs.
Solution
Fleuret runs penetration tests on web applications and APIs using agentic AI, combining the depth of a consulting firm with the speed of a scanner. The platform identifies vulnerabilities across a broad range of attack vectors including IDOR, SSRF, GraphQL introspection, JWT confusion, race conditions, and business-logic abuse. Every finding includes a reproducible proof-of-concept, ensuring that only verified, replayable vulnerabilities are reported. Results are delivered through an interactive platform where findings can be assigned, fixed, and re-tested, rather than as a static PDF report. Fleuret produces DORA/NIS2-compliant audit-ready reports and hosts all data on European infrastructure in Paris, keeping data outside US Cloud Act jurisdiction.
Target Audience
Primary customers are security leaders, CISOs, and engineering teams at European companies in regulated industries such as finance, healthcare, and the public sector who need audit-ready security validation without the cost and delay of traditional pentest firms.
Features
- Agentic AI pentesting covering web apps, REST/GraphQL APIs, and external infrastructure with multi-step exploitation chains
- Reproducible proof-of-concept on every finding, eliminating unverifiable reports and reducing false positives
- Interactive findings platform for assigning, fixing, and re-testing vulnerabilities without a 60-page PDF
- Flat-rate pricing at €4,000 per web app regardless of scope, including business logic and authentication testing
- DORA/NIS2-compliant PDF reports with re-testing included once fixes ship
- European data hosting on Scaleway in Paris for GDPR compliance and data sovereignty
- Free tier with SAST, SCA, secret scanning, DAST, and attack-surface discovery on code and domains