CISO Tribune

Vendor comparison · 2 companies

Fleuret AI vs GuidePoint Security

Fleuret AI sells pentesting that combines artificial intelligence and offensive expertise. GuidePoint Security sells cybersecurity services that include security program reviews, vulnerability management and penetration testing, and Privileged Access Management as a Service. CISO Tribune files both under Penetration testing and red team services. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Fleuret AI
  • GuidePoint Security
Fleuret AI vs GuidePoint Security: Products, Customers and Funding Compared
Fleuret AIFleuret AI sells pentesting that combines artificial intelligence and offensive expertise.fleuret.aiGuidePoint SecurityGuidePoint Security sells cybersecurity services that include security program reviews, vulnerability management and penetration testing, and Privileged Access Management as a Service.guidepointsecurity.com
What it sells
  • Émile[4][6]Runs pentests on applications, APIs and infrastructure and ships a replayable exploit with every finding.
  • Hortense[4][5][6]Tells customers what to test next, and when.
  • Application Security as a Service[4][14]Application Security as a Service scales up or down based on a customer's requirements for application security.
  • Privileged Access Management as a Service[11]GuidePoint Security offers Privileged Access Management as a Service to enforce least privilege over user accounts, systems and endpoints.
  • Vulnerability Management (VM) and Penetration Testing (Pen Testing)GuidePoint Security services that help organizations identify, prioritize and remediate security gaps.
  • Security Program Review[10]A GuidePoint Security Program Review evaluates and measures an organization's security program maturity.
  • Zero Trust Workshops[16]GuidePoint Security offers consulting workshops to guide organizations on their journey to Zero Trust adoption.
  • OT Security Services[4]GuidePoint OT Security Services include assessments, program development and managed services for critical infrastructure.
  • Staff Augmentation Services[15]GuidePoint Security provides Staff Augmentation services across a wide range of disciplines and products.
Categories
Headquarters
Not stated on its pagesReston, United States[2]
Founded
Not stated on its pages2011[2][4]
Ownership and funding
Privately heldPrivately held[3][7]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 5, 2026Fleuret AI closed a €4M pre-seed round led by RAISE Ventures, with participation from Auriga Cyber Ventures, Wind Capital and Better Angle.[2]
  • September 15, 2026GuidePoint Security expanded its Identity and Access Management practice with three new service offerings.[6]
  • July 7, 2026GuidePoint Security appointed Scott Rachford as Chief Executive Officer, effective immediately, succeeding founder Michael Volk, who becomes Executive Chairman.[5]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[7]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Its published guides address CISOs at credit institutions and at SaaS companies. Fleuret describes its service as adding to the people already in place, such as a customer's team, MSSP or PASSI-certified firm. Its reports are signed and mapped to DORA, NIS2 and ISO 27001. Hosting and inference run on Scaleway in Paris.GuidePoint Security network infrastructure services cover both enterprise and government IT environments. GuidePoint Security supports cloud-based SaaS or IaaS, on-premise and hybrid architectures based on customer needs. GuidePoint Security staff augmentation is for organizations that want to increase staffing capabilities for a set amount of time.
Last verified
October 21, 2026September 27, 2026

Where they overlap

  • Fleuret AI and GuidePoint Security are both filed under Penetration testing and red team services.
  • Both are privately held.

Where they differ, field by field

  • Fleuret AI's primary category is Breach simulation and automated pen-testing; GuidePoint Security's is Security consulting and advisory.
  • Fleuret AI is also filed under Static application security testing and Dynamic application security testing. GuidePoint Security is also filed under Managed security service providers.
  • Fleuret AI lists Émile and Hortense. GuidePoint Security lists Application Security as a Service, Privileged Access Management as a Service, Vulnerability Management (VM) and Penetration Testing (Pen Testing), Security Program Review, Zero Trust Workshops and 2 more.
  • GuidePoint Security is headquartered in Reston, United States.
  • GuidePoint Security was founded in 2011.

What it sells: Fleuret AI

What Émile does[4][6]
A separate validator confirms every finding with a non-destructive exploit. Every finding ships with a working, replayable exploit. Each finding lands as a ticket with its exploit, an owner and a remediation, pushed to Jira, Linear or Slack.
What Hortense does[4][5][6]
Hortense maps a customer's estate from domain to database. Hortense crosses what changed in the code with what is exposed on the internet and what past pentests found. Hortense prepares the scope, and a person with launch rights starts the pentest, which Émile runs. Hortense comes with every yearly plan.

What it sells: GuidePoint Security

What Application Security as a Service does[4][14]
Application Security as a Service from GuidePoint Security scales up or down based on a customer's requirements for application security. AppSec as a Service supports a wide range of application security tools. GuidePoint Security can manage an application security tool environment end to end when it is on-prem or in the customer's own cloud environment.
What Privileged Access Management as a Service does[11]
GuidePoint Security offers Privileged Access Management as a Service to enforce least privilege over each user account, system and endpoint in an IT ecosystem. GuidePoint Security supports cloud-based SaaS or IaaS, on-premise and hybrid architectures based on customer needs.
What Vulnerability Management (VM) and Penetration Testing (Pen Testing) does
GuidePoint Vulnerability Management and Penetration Testing services help organizations identify, prioritize and remediate security gaps. GuidePoint Security provides the people, processes and technologies to fully or partially administer vulnerability management programs.
What Security Program Review does[10]
A GuidePoint Security Program Review evaluates and measures an organization's security program maturity. GuidePoint Security uses standards-based maturity definitions based on CMMI and Cobit. GuidePoint Security offers several levels of security program reviews, right-sized to an organization's requirements. The security program report from GuidePoint Security documents a set of recommendations and corresponding resource estimates.
What Zero Trust Workshops does[16]
GuidePoint Security consultants lead Zero Trust Workshops that develop and align use cases to a customer's environment and maturity. GuidePoint Security offers consulting workshops to guide organizations on their journey to Zero Trust adoption.
What OT Security Services does[4]
GuidePoint OT Security Services include assessments, program development and managed services for critical infrastructure. GuidePoint Security helps organizations bridge IT/OT convergence.
What Staff Augmentation Services does[15]
GuidePoint Security provides Staff Augmentation services across a wide range of disciplines and products. GuidePoint Security analysts can support a SOC or Cyber Fusion center with Cyber Hunt, threat intelligence, digital forensics, incident response and analysis of log data.

Questions about Fleuret AI and GuidePoint Security

What do Fleuret AI and GuidePoint Security sell?
Fleuret AI sells Émile and Hortense. GuidePoint Security sells Application Security as a Service, Privileged Access Management as a Service, Vulnerability Management (VM) and Penetration Testing (Pen Testing), Security Program Review, Zero Trust Workshops and 2 more.
Are Fleuret AI and GuidePoint Security in the same category?
They share Penetration testing and red team services. Fleuret AI's primary category is Breach simulation and automated pen-testing and GuidePoint Security's is Security consulting and advisory.
Where are Fleuret AI and GuidePoint Security headquartered?
GuidePoint Security is headquartered in Reston, United States.
When were Fleuret AI and GuidePoint Security founded?
GuidePoint Security was founded in 2011.
Who owns Fleuret AI and GuidePoint Security?
Fleuret AI is privately held. GuidePoint Security is privately held.
Who are Fleuret AI and GuidePoint Security sold to?
Its published guides address CISOs at credit institutions and at SaaS companies. GuidePoint Security network infrastructure services cover both enterprise and government IT environments.
What have Fleuret AI and GuidePoint Security announced recently?
October 5, 2026: Fleuret AI closed a €4M pre-seed round led by RAISE Ventures, with participation from Auriga Cyber Ventures, Wind Capital and Better Angle. September 15, 2026: GuidePoint Security expanded its Identity and Access Management practice with three new service offerings.

About Fleuret AI

Fleuret AI sells pentesting that combines artificial intelligence and offensive expertise. Fleuret uses agentic AI to simulate real attacks on its customers' systems. Émile runs pentests on customer applications, APIs and infrastructure and ships a replayable exploit with every finding. Hortense tells customers what to test next, and when. Fleuret states that its service is built and hosted in Europe.[1][3][4]

A separate validator confirms every finding with a non-destructive exploit. Several agents test the surface at once and reproduce every finding before it is reported. Every finding ships with a working, replayable exploit, and a finding that cannot be reproduced is left out of the report. Fleuret states that proofs of concept are read-only and non-destructive. Fleuret states that its orchestration is deterministic code, not a free-running model, and that it ends in a signed report.[4][5]

Each finding becomes a ticket with its exploit, an owner and a remediation, pushed to Jira, Linear or Slack. Customers can launch a full pentest the day an application changes and can re-test a fix whenever they want. Fleuret reports contain a replayable exploit for every finding, logged re-tests, the coverage of what was tested and held, and a signed report mapped to DORA, NIS2 and ISO 27001.[4]

Hortense maps a customer's estate from domain to database and crosses what changed in the code with what is exposed on the internet and what past pentests found. Hortense connects what a customer already has into a view of risk: what to test, what to fix first, what can wait, and why. For each application, Hortense weighs the last pentest, what changed since, and how close it sits to a crown jewel. Hortense then recommends a pentest with its reasons and prepares it, and the customer approves it. Hortense prepares the scope, and a person with launch rights starts the pentest, which Émile runs. Hortense comes with every yearly plan.[1][4][6]

Fleuret sells pentests from 4,000 euros per test. Each extra credit costs €4,000, whatever the plan. Credits are valid for the subscription year and do not carry over to the next one. A first pentest is credited in full against a yearly plan taken within 60 days.[5][7]

Hosting and inference run on Scaleway in Paris, which Fleuret describes as a European provider. Fleuret runs open-weight models (gpt-oss, Kimi K2.5) on H100 GPUs at Scaleway in Paris. Engagement data does not leave that environment to reach a third-party model API. Engagement data, namely vulnerabilities, exploitation evidence and reports, is retained for 18 months in a per-client segmented European environment, then deleted. Fleuret AI states that stored data is encrypted with AES-256 and that communications use TLS 1.2 or higher. Fleuret AI states that its production data is hosted in data centers within the European Union. Fleuret AI states that it is compliant with the General Data Protection Regulation. Fleuret AI gives its address as 60 Rue François 1er, 75008 Paris, France.[4][8]

Fleuret AI publishes practical guides for CISOs scoping penetration testing under DORA, NIS2, ISO 27001, SOC 2 and PCI DSS. One guide covers how SaaS CISOs decide scope and evidence pentest against Article 21(2)(e) and 21(2)(f).[1][4][5][9]

Fleuret AI on the record

Sources

Fleuret AI full record

  1. [1]fleuret.aiFleuret AI · fleuret.ai · undated page, accessed October 21, 2026 · Tier A
  2. [2]Fleuret raises €4M pre-seed for agentic pentestingFleuret AI · published October 5, 2026 · Tier A
  3. [3]About Fleuret | Agentic AI pentestingFleuret AI · undated page, accessed November 10, 2026 · Tier A
  4. [4]Fleuret | AI-powered automated pentestingFleuret AI · undated page, accessed November 10, 2026 · Tier A
  5. [5]Pricing | Pentest credits, platform included | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
  6. [6]Hortense, your offsec brain | Know what to test next, and when | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
  7. [7]SOC 2 and ISO 27001 cost calculator | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
  8. [8]Security Policy | FleuretFleuret AI · published March 11, 2026 · Tier A
  9. [9]Compliance Pentest Guides | DORA, NIS2, ISO 27001 | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A

GuidePoint Security full record

  1. [1]guidepointsecurity.comGuidePoint Security · guidepointsecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Guidepoint security opens new global headquarters amid continued growthGuidePoint Security · guidepointsecurity.com · published June 3, 2025 · Tier A
  3. [3]Guidepoint security attracts new round of growth capitalGuidePoint Security · guidepointsecurity.com · published October 10, 2023 · Tier A
  4. [4]Cybersecurity Consulting Services | GuidePoint SecurityGuidePoint Security · undated page, accessed October 25, 2026 · Tier A
  5. [5]GuidePoint Security Appoints Scott Rachford as Chief Executive OfficerBusiness Wire · published July 7, 2026 · Tier A
  6. [6]GuidePoint Security Expands Identity and Access Management Practice With Three New Service OfferingsBusiness Wire · published September 15, 2026 · Tier A
  7. [7]GuidePoint Security LLC Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 25, 2026 · Tier C
  8. [8]Cloud Security Assessments | GuidePoint SecurityGuidePoint Security · undated page, accessed November 3, 2026 · Tier A
  9. [9]Cybersecurity Services | GuidePoint SecurityGuidePoint Security · undated page, accessed November 3, 2026 · Tier A
  10. [10]Security Program Review and Strategy | GuidePoint SecurityGuidePoint Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Privileged Access Management (PAM) as a Service | GuidePoint SecurityGuidePoint Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]5 Phases of AWS Cloud Security | GuidePoint SecurityGuidePoint Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]Enterprise Cybersecurity MSSP Provider | GuidePoint SecurityGuidePoint Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Application Security as a Service | GuidePoint SecurityGuidePoint Security · undated page, accessed November 10, 2026 · Tier A
  15. [15]Cybersecurity Staff Augmentation | GuidePoint SecurityGuidePoint Security · undated page, accessed November 10, 2026 · Tier A
  16. [16]Zero Trust Workshops & Consulting Services (IAM) | GuidePoint SecurityGuidePoint Security · undated page, accessed November 10, 2026 · Tier A
  17. [17]Advanced Network Security Technologies | GuidePoint SecurityGuidePoint Security · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.