French Cybersecurity Startup Fleuret AI Raises €4 Million to Automate Penetration Testing

Paris-based Fleuret AI has raised €4 million in a pre-seed round led by RAISE Ventures, with participation from Auriga Cyber Ventures, Wind Capital, Better Angle and leading cybersecurity executives. The new funding will help Fleuret expand its AI, software engineering and offensive security teams while accelerating development of its automated penetration-testing platform.

Founded in 2026 by Yanis Grigy and Augustin Ponsin, Fleuret is building an AI-native offensive security platform designed to make penetration testing continuous rather than a once-a-year audit. The founders, who are CEO and CTO respectively, have backgrounds in penetration testing and graduated from Télécom Paris and EPITA.

Fleuret’s platform uses two AI agents, Emile and Champollion, to map exposed systems, explore applications, APIs and infrastructure, and identify vulnerabilities through attack paths. Rather than simply flagging potential weaknesses, the system attempts to exploit them and provides proof of compromise for its findings. This approach is designed to give security teams evidence that a vulnerability is genuinely exploitable.

The platform also focuses on what happens after a vulnerability is discovered. Fleuret prioritises findings based on exploitability, connects them with engineering tools, supports automated re-testing and generates reports that can verify whether a security issue has actually been fixed. The company aims to keep monitoring attack surfaces so new tests can be triggered as customer systems change.

Fleuret says the need for this approach is increasing as companies continuously deploy new software and infrastructure while facing stronger cybersecurity requirements, including those associated with the European Union’s NIS2 directive. Its customers already include Brevo, Stoïk and Yogosha, and the company has around ten employees.

The startup is also positioning its technology around European cybersecurity sovereignty. Its agents operate on European infrastructure, with customer findings hosted on Scaleway in France. Fleuret says this architecture is intended to meet the data-control requirements of organisations operating in regulated sectors.

With the new capital, Fleuret plans to expand its technical and offensive-security teams and accelerate its platform development. Its broader ambition is to build an offensive security layer that can continuously find, prove and help fix vulnerabilities for companies of different sizes across Europe.