Vendor comparison · 4 companies

Armadin, Assail, Fleuret AI and Tenzai

Change the companies

Up to four companies side by side.

Armadin
Assail
Fleuret AI
Tenzai

Four is the most one page holds. Remove or swap a company to add another.

Swipe the table sideways to see every company.

Armadin, Assail, Fleuret AI and Tenzai Compared
What it sells
	ArmadinArmadin is a cybersecurity company providing an agentic AI, continuous offensive security platform that identifies and proves exploitable risk across the entire attack surface.armadin.com	AssailAssail sells Ares, an autonomous offensive security platform that tests applications, APIs, mobile apps and AI systems and shows what an attacker could actually reach.assailai.com	Fleuret AIFleuret AI sells pentesting that combines artificial intelligence and offensive expertise.fleuret.ai	TenzaiTenzai sells an AI agentic penetration testing platform that hacks, exploits and fixes vulnerabilities across enterprise software.tenzai.com
What it sells	The Ultimate Attacker^[1][5]Armadin built the Ultimate Attacker to expose hidden risk before it becomes an adversarial opportunity. Armadin Red^[3]AI inference workloads are delivered through Armadin Red.	Ares^{[1][3][4][5][6][7][9][10][11][12]}Continuous autonomous red teaming across web applications, APIs, and mobile apps. Reaper^[3]Autonomous offensive cyber operations built for military, federal, and intelligence missions. Assail Anywhere^[3]Deployment option for the entire platform, including the AI model.	Émile^[4][6]Runs pentests on applications, APIs and infrastructure and ships a replayable exploit with every finding. Hortense^[4][5][6]Tells customers what to test next, and when.	Tenzai^[1][3][4][5]An AI agentic penetration testing platform for enterprise software. It discovers exploitable attack chains across web app, mobile, AI, external and internal network attack surfaces.
Categories
Categories	Breach simulation and automated pen-testing (primary category)	Breach simulation and automated pen-testing (primary category) API security Mobile security	Breach simulation and automated pen-testing (primary category) Penetration testing and red team services Static application security testing Dynamic application security testing	Breach simulation and automated pen-testing (primary category) Penetration testing and red team services
Headquarters
Headquarters	Not stated on its pages	Not stated on its pages	Not stated on its pages	Not stated on its pages
Founded
Founded	Not stated on its pages	Not stated on its pages	Not stated on its pages	2025^[2][4][5]
Ownership and funding
Ownership and funding	Not stated on its pages	Privately held	Privately held	Privately held^[3]
Named customers
Named customers	Not stated on its pages	Not stated on its pages	Not stated on its pages	Not stated on its pages
Recent news
Recent news	October 1, 2026Armadin raised an additional $255.5 million in Series B funding, bringing its total funding to $445 million.^[7] March 10, 2026Armadin announced that it raised $189.9 million in Seed and Series A funding.^[6]	November 4, 2026Assail, Inc. announced Cassandra, a proactive AI agent integrated into its Ares platform, along with expanded threat modeling capabilities tied to autonomous security testing.^[11] July 7, 2026Assail Inc. launched Sidewinder, a rebuilt second-generation version of its Ares offensive security platform running on a new 31 billion-parameter model.^[12]	October 5, 2026Fleuret AI closed a €4M pre-seed round led by RAISE Ventures, with participation from Auriga Cyber Ventures, Wind Capital and Better Angle.^[2]	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	Armadin describes its platform as architected to operate across global environments. Its data agreements include jurisdiction-specific terms for customers in regions such as the EEA, UK, Switzerland, Canada and Australia. Armadin's engineering team builds enterprise security products.	From its own pages, Assail sells mainly to security teams in manufacturing, financial services, federal and state government, automotive, retail, and defense. Its industry pages address manufacturers, banks and fintech firms, government agencies, vehicle makers, retailers, and defense programs. Assail also says it supports on-premises, air-gapped, own-cloud, and SaaS deployment for organizations that need to keep data under their control.	Its published guides address CISOs at credit institutions and at SaaS companies. Fleuret describes its service as adding to the people already in place, such as a customer's team, MSSP or PASSI-certified firm. Its reports are signed and mapped to DORA, NIS2 and ISO 27001. Hosting and inference run on Scaleway in Paris.	Its pages describe an application security team that tests APIs reaching PCI-scoped and critical systems. Tenzai is also described as a way for teams to verify scanner and bug-bounty findings and gather evidence for follow-up. Security teams can match sets of frontier and open-weight models to each test type or application risk level.
Last verified
Last verified	November 9, 2026	October 21, 2026	October 21, 2026	November 8, 2026

About Armadin

Armadin is a cybersecurity company providing an agentic AI, continuous offensive security platform that identifies and proves exploitable risk across the entire attack surface. Armadin combines red team expertise with autonomous AI-driven attacker swarms to uncover real paths to compromise and to prioritize remediation.^[4][5]

Armadin's platform charts the attack surface, enumerates hosts, profiles people and analyzes defenses. Armadin's attacker probes in parallel, swarming weak points and learning from each attempt.^[4]

Armadin builds seasoned red team methodology into autonomous agents that model real attacker behavior. Armadin's platform has guardrails for controlled execution and scoped impact. Every validated kill chain in Armadin's platform comes with prioritized guidance. Armadin's platform is architected to operate across global environments.^[4]

Armadin's team includes red teamers, AI builders and cybersecurity pioneers.

Travis is a founder and Chief Technology Officer at Armadin and leads the company's product and engineering efforts. David is responsible for defining Armadin's AI-driven architecture. Vasu leads Armadin's strategy, strategic partnerships, marketing, communications, customer success and corporate development initiatives. Frank serves as Chief Financial Officer of Armadin. Chinmaya leads Armadin's engineering team, and Greg is responsible for Armadin's product portfolio.

George Kurtz, the CEO and founder of CrowdStrike, joined the Armadin Board in 2026. Retired General Paul M. Nakasone, the former Director of the NSA, joined the Armadin Board in 2026. Ping Li, a partner at venture capital firm Accel, joined the Armadin Board in 2026. Jake Seid, co-founder of Ballistic Ventures, led Armadin's seed round and joined the Armadin Board in 2026.

Armadin has a Data Processing Agreement that governs how Armadin processes personal information on behalf of its customers. Armadin has a July 2026 cross-border data transfer framework for customer personal data. Armadin, Inc. has an End User License Agreement for its services. Armadin had an independent third-party penetration test conducted in 2026.^[1][4][5]

Armadin on the record

About Assail

Assail sells Ares, an autonomous offensive security platform that tests applications, APIs, mobile apps and AI systems and shows what an attacker could actually reach.^[1]

Assail says Ares continuously tests applications, APIs, mobile apps, and AI systems as they change. Ares follows attack paths, exploits weaknesses, and proves what an attacker could actually reach. Coordinated AI agents extend testing capacity, and Ares tests authenticated applications through the customer's existing identity provider. Ares also tracks changes across known and shadow APIs and delivers the evidence behind each confirmed risk.^[3]

Assail describes Ares as combining autonomous red teaming, attack surface management, and Shadow AI discovery across web, API, mobile, and supported AI environments, with applicable MITRE ATLAS coverage. The Ares platform is powered by Assail's domain-adapted model for security reasoning and tool use.^[3][7]

On deployment, Assail says Ares can run within the customer's own infrastructure, even in disconnected environments. With Assail Anywhere, the entire platform, including the AI model, deploys on-premises, inside isolated and air-gapped networks, in the customer's own cloud, or through Assail's SaaS. Assail has also announced that it expanded Reaper's sovereign deployment architecture to AWS GovCloud and Google Cloud Assured Workloads.^[3]

Assail names Ares, Reaper, and Scorpion as the products taken to the fight. Reaper is described as autonomous offensive cyber operations built for military, federal, and intelligence missions.^[3]

Assail publishes industry pages for manufacturing, financial services, federal and state government, automotive, retail, and defense. In manufacturing, Ares validates systems such as ERP, MES, PLM, supplier portals, industrial APIs, and connected products. In financial services, Ares validates APIs, payment rails, mobile banking apps, and open banking integrations. For retail, Ares validates e-commerce web apps, mobile shopping apps, loyalty APIs, and gift card platforms. In automotive it covers telematics APIs, OTA infrastructure, and mobile companion apps.^{[4][5][6][9][10]}

Assail says its team brings 26 years of offensive security experience. Assail also publishes original research on attack techniques and the exploitation of AI and API surfaces. A customer, Branch, says Ares helps its security team increase penetration testing frequency and validate remediations faster.^{[1][2][3][4][5][6][8]}

Assail on the record

About Fleuret AI

Fleuret AI sells pentesting that combines artificial intelligence and offensive expertise. Fleuret uses agentic AI to simulate real attacks on its customers' systems. Émile runs pentests on customer applications, APIs and infrastructure and ships a replayable exploit with every finding. Hortense tells customers what to test next, and when. Fleuret states that its service is built and hosted in Europe.^[1][3][4]

A separate validator confirms every finding with a non-destructive exploit. Several agents test the surface at once and reproduce every finding before it is reported. Every finding ships with a working, replayable exploit, and a finding that cannot be reproduced is left out of the report. Fleuret states that proofs of concept are read-only and non-destructive. Fleuret states that its orchestration is deterministic code, not a free-running model, and that it ends in a signed report.^[4][5]

Each finding becomes a ticket with its exploit, an owner and a remediation, pushed to Jira, Linear or Slack. Customers can launch a full pentest the day an application changes and can re-test a fix whenever they want. Fleuret reports contain a replayable exploit for every finding, logged re-tests, the coverage of what was tested and held, and a signed report mapped to DORA, NIS2 and ISO 27001.^[4]

Hortense maps a customer's estate from domain to database and crosses what changed in the code with what is exposed on the internet and what past pentests found. Hortense connects what a customer already has into a view of risk: what to test, what to fix first, what can wait, and why. For each application, Hortense weighs the last pentest, what changed since, and how close it sits to a crown jewel. Hortense then recommends a pentest with its reasons and prepares it, and the customer approves it. Hortense prepares the scope, and a person with launch rights starts the pentest, which Émile runs. Hortense comes with every yearly plan.^[1][4][6]

Fleuret sells pentests from 4,000 euros per test. Each extra credit costs €4,000, whatever the plan. Credits are valid for the subscription year and do not carry over to the next one. A first pentest is credited in full against a yearly plan taken within 60 days.^[5][7]

Hosting and inference run on Scaleway in Paris, which Fleuret describes as a European provider. Fleuret runs open-weight models (gpt-oss, Kimi K2.5) on H100 GPUs at Scaleway in Paris. Engagement data does not leave that environment to reach a third-party model API. Engagement data, namely vulnerabilities, exploitation evidence and reports, is retained for 18 months in a per-client segmented European environment, then deleted. Fleuret AI states that stored data is encrypted with AES-256 and that communications use TLS 1.2 or higher. Fleuret AI states that its production data is hosted in data centers within the European Union. Fleuret AI states that it is compliant with the General Data Protection Regulation. Fleuret AI gives its address as 60 Rue François 1er, 75008 Paris, France.^[4][8]

Fleuret AI publishes practical guides for CISOs scoping penetration testing under DORA, NIS2, ISO 27001, SOC 2 and PCI DSS. One guide covers how SaaS CISOs decide scope and evidence pentest against Article 21(2)(e) and 21(2)(f).^[1][4][5][9]

Fleuret AI on the record

About Tenzai

Tenzai sells an AI agentic penetration testing platform that hacks, exploits and fixes vulnerabilities across enterprise software. Tenzai discovers attack surfaces, chains weaknesses and produces reproducible exploits. Tenzai is an Israeli AI security startup founded in 2025.

Tenzai was founded in 2025 by cybersecurity veterans Pavel Gurvich, Ariel Zeitlin, Ofri Ziv, Itamar Tal and Aner Mazur. Greylock Partners, Battery Ventures and Lux Capital back Tenzai, with Asheem Chandna of Greylock and Scott Tobin of Battery on the board. Tenzai has $75 million in seed funding.^[1]

Tenzai's agents are engineered to learn the business purpose and workflows of applications. Tenzai starts autonomous tests in black, gray or white box modes. Tenzai tailors each test to the customer's goals, guidelines and organizational context. Tenzai shows the reasoning, assumptions and evidence gathered at every step of a test. Tenzai applies layered guardrails that enforce scope at the network level and check every action, following the customer's rules of engagement. Tenzai learns the customer's environment and the team's input from past runs. Tenzai finds business logic vulnerabilities and complex attack chains.

Tenzai discovers exploitable attack chains across web app, mobile, AI, external and internal network attack surfaces. For web apps, Tenzai traces attack paths from the browser through server-side logic to the database. For mobile apps, Tenzai tests Android apps on emulated devices to find runtime vulnerabilities. Tenzai applies static analysis to Android and iOS apps to uncover mobile attack surface. Tenzai tests MCP tools for poisoning, unauthorized access and exploitable inputs.

Tenzai looks for exploitable gaps in how APIs handle identities, permissions and multi-step workflows. For external networks, Tenzai continuously tracks internet-facing assets, starting from domains and public IP ranges.

Tenzai blocks exploitation with a hardened WAF rule that is validated for the customer's environment, ahead of a permanent fix. Tenzai offers step-by-step guidance, coding-assistant prompts and ticket creation for remediation. Tenzai guides the permanent fix and re-tests it. Tenzai deploys WAF rule mitigations and guides permanent remediation through security platforms including Akamai Technologies. Tenzai has made a formal expansion into network security.

Tenzai checks every update in an app, and only what has changed, with incremental runs. Tenzai makes scanner and bug-bounty findings actionable by verifying exploitability and gathering evidence for follow-up. Tenzai curates and benchmarks sets of frontier and open-weight models that security teams can match to each test type or application risk level.^[1]

Tenzai on the record

Sources

Armadin full record

[1]armadin.comArmadin · armadin.com · undated page, accessed October 7, 2026 · Tier A
[2]Expert AI Cybersecurity & Cyber Defense Company | ArmadinArmadin · undated page, accessed October 7, 2026 · Tier A
[3]Trust Center - ArmadinArmadin · undated page, accessed October 31, 2026 · Tier A
[4]AI Cybersecurity Platform | Armadin Enterprise Grade TechnologyArmadin · undated page, accessed October 31, 2026 · Tier A
[5]Armadin: AI-native cybersecurity platformArmadin · undated page, accessed October 31, 2026 · Tier A
[6]Armadin Secures Record-Breaking $189.9M in Seed and Series A Funding to Combat the Era of AI-Driven HyperattacksArmadin · published March 10, 2026 · Tier A
[7]Investors Back Armadin Platform Strategy with New Round of FundingArmadin · published October 1, 2026 · Tier A

Assail full record

[1]assailai.comAssail · assailai.com · undated page, accessed October 21, 2026 · Tier A
[2]Press releasesAssail · assailai.com · undated page, accessed October 21, 2026 · Tier A
[3]Assail | Autonomous Offensive AI for the modern application stackAssail · undated page, accessed November 4, 2026 · Tier A
[4]Assail | Autonomous Offensive AI for the modern application stackAssail · undated page, accessed November 4, 2026 · Tier A
[5]Assail | Autonomous Offensive AI for the modern application stackAssail · undated page, accessed November 4, 2026 · Tier A
[6]Assail | Autonomous Offensive AI for the modern application stackAssail · undated page, accessed November 4, 2026 · Tier A
[7]Automotive | AssailAssail · undated page, accessed November 4, 2026 · Tier A
[8]Assail | Autonomous Offensive AI for the modern application stackAssail · undated page, accessed November 4, 2026 · Tier A
[9]Assail | Autonomous Offensive AI for the modern application stackAssail · undated page, accessed November 4, 2026 · Tier A
[10]Assail | Autonomous Offensive AI for the modern application stackAssail · undated page, accessed November 4, 2026 · Tier A
[11]Assail Introduces Cassandra, a Proactive AI Agent Connecting Threat Modeling with Autonomous Security TestingPR Newswire · published November 4, 2026 · Tier A
[12]Assail launches Sidewinder, an offensive security AI that fixes its own mistakesSiliconANGLE · published July 7, 2026 · Tier B

Fleuret AI full record

[1]fleuret.aiFleuret AI · fleuret.ai · undated page, accessed October 21, 2026 · Tier A
[2]Fleuret raises €4M pre-seed for agentic pentestingFleuret AI · published October 5, 2026 · Tier A
[3]About Fleuret | Agentic AI pentestingFleuret AI · undated page, accessed November 10, 2026 · Tier A
[4]Fleuret | AI-powered automated pentestingFleuret AI · undated page, accessed November 10, 2026 · Tier A
[5]Pricing | Pentest credits, platform included | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
[6]Hortense, your offsec brain | Know what to test next, and when | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
[7]SOC 2 and ISO 27001 cost calculator | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
[8]Security Policy | FleuretFleuret AI · published March 11, 2026 · Tier A
[9]Compliance Pentest Guides | DORA, NIS2, ISO 27001 | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A

Tenzai full record

[1]Ahead partners with tenzai to strengthen cyber resilience with ai enabled penetration testingTenzai · tenzai.com · published July 23, 2026 · Tier A
[2]tenzai.comTenzai · tenzai.com · undated page, accessed November 8, 2026 · Tier A
[3]Tenzai: Your ultimate AI hacker teammateTenzai · undated page, accessed November 8, 2026 · Tier A
[4]About Tenzai | AI Hacker for Autonomous PentestingTenzai · undated page, accessed November 10, 2026 · Tier A
[5]Tenzai | AI Hacker for EnterpriseTenzai · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.