CISO Tribune

Vendor comparison · 2 companies

Fleuret AI vs NetSPI

Fleuret AI sells pentesting that combines artificial intelligence and offensive expertise. NetSPI sells pentesting as a service (PTaaS), attack surface management (ASM), and breach and attack simulation (BAS) as a service. CISO Tribune files both under Breach simulation and automated pen-testing and Penetration testing and red team services. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Fleuret AI
  • NetSPI
Fleuret AI vs NetSPI: Products, Customers and Funding Compared
Fleuret AIFleuret AI sells pentesting that combines artificial intelligence and offensive expertise.fleuret.aiNetSPINetSPI sells pentesting as a service (PTaaS), attack surface management (ASM), and breach and attack simulation (BAS) as a service.netspi.com
What it sells
  • Émile[4][6]Runs pentests on applications, APIs and infrastructure and ships a replayable exploit with every finding.
  • Hortense[4][5][6]Tells customers what to test next, and when.
  • AI/ML Pentesting[3]Pentesting of AI and ML systems that includes LLM testing and jailbreaking.
  • Red Team Operations[6]Red team exercises that test security controls, policies, incident response and training.
  • Detective Controls Testing[7]Attack simulations that validate whether security tools detect threats.
  • Social Engineering[6]Email, text, phone and physical social engineering assessments.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Privately heldNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 5, 2026Fleuret AI closed a €4M pre-seed round led by RAISE Ventures, with participation from Auriga Cyber Ventures, Wind Capital and Better Angle.[2]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Its published guides address CISOs at credit institutions and at SaaS companies. Fleuret describes its service as adding to the people already in place, such as a customer's team, MSSP or PASSI-certified firm. Its reports are signed and mapped to DORA, NIS2 and ISO 27001. Hosting and inference run on Scaleway in Paris.Not written yet
Last verified
October 21, 2026November 13, 2026

Where they overlap

  • Fleuret AI and NetSPI are both filed under Breach simulation and automated pen-testing and Penetration testing and red team services.

Where they differ, field by field

  • Fleuret AI's primary category is Breach simulation and automated pen-testing; NetSPI's is Penetration testing and red team services.
  • Fleuret AI is also filed under Static application security testing and Dynamic application security testing. NetSPI is also filed under External attack surface management and Exposure prioritisation and CTEM.
  • Fleuret AI lists Émile and Hortense. NetSPI lists AI/ML Pentesting, Red Team Operations, Detective Controls Testing and Social Engineering.
  • Fleuret AI is privately held.

What it sells: Fleuret AI

What Émile does[4][6]
A separate validator confirms every finding with a non-destructive exploit. Every finding ships with a working, replayable exploit. Each finding lands as a ticket with its exploit, an owner and a remediation, pushed to Jira, Linear or Slack.
What Hortense does[4][5][6]
Hortense maps a customer's estate from domain to database. Hortense crosses what changed in the code with what is exposed on the internet and what past pentests found. Hortense prepares the scope, and a person with launch rights starts the pentest, which Émile runs. Hortense comes with every yearly plan.

What it sells: NetSPI

What AI/ML Pentesting does[3]
NetSPI's AI/ML Pentesting includes expert LLM testing and jailbreaking. Microsoft partnered with NetSPI to build a standardized AI security testing framework for its 70+ products.
What Red Team Operations does[6]
NetSPI's Red Team Operations test security controls, policies, incident response and training. NetSPI partners with selected threat intelligence providers to test the resiliency of critical systems.
What Detective Controls Testing does[7]
NetSPI Detective Controls Testing validates that security tools operate effectively across endpoint security solutions, network security solutions, SIEMs and MSSPs. NetSPI's ransomware simulation pack covers TTPs and behaviors from real-world ransomware campaigns.
What Social Engineering does[6]
NetSPI's social engineering experts deliver findings from email, text, phone and physical scenarios. NetSPI runs custom phishing engagements to identify gaps in security procedures and technical controls.

Questions about Fleuret AI and NetSPI

What do Fleuret AI and NetSPI sell?
Fleuret AI sells Émile and Hortense. NetSPI sells AI/ML Pentesting, Red Team Operations, Detective Controls Testing and Social Engineering.
Are Fleuret AI and NetSPI in the same category?
They share Breach simulation and automated pen-testing and Penetration testing and red team services. Fleuret AI's primary category is Breach simulation and automated pen-testing and NetSPI's is Penetration testing and red team services.
Who owns Fleuret AI and NetSPI?
Fleuret AI is privately held.
Who are Fleuret AI and NetSPI sold to?
Its published guides address CISOs at credit institutions and at SaaS companies.
What have Fleuret AI and NetSPI announced recently?
October 5, 2026: Fleuret AI closed a €4M pre-seed round led by RAISE Ventures, with participation from Auriga Cyber Ventures, Wind Capital and Better Angle.

About Fleuret AI

Fleuret AI sells pentesting that combines artificial intelligence and offensive expertise. Fleuret uses agentic AI to simulate real attacks on its customers' systems. Émile runs pentests on customer applications, APIs and infrastructure and ships a replayable exploit with every finding. Hortense tells customers what to test next, and when. Fleuret states that its service is built and hosted in Europe.[1][3][4]

A separate validator confirms every finding with a non-destructive exploit. Several agents test the surface at once and reproduce every finding before it is reported. Every finding ships with a working, replayable exploit, and a finding that cannot be reproduced is left out of the report. Fleuret states that proofs of concept are read-only and non-destructive. Fleuret states that its orchestration is deterministic code, not a free-running model, and that it ends in a signed report.[4][5]

Each finding becomes a ticket with its exploit, an owner and a remediation, pushed to Jira, Linear or Slack. Customers can launch a full pentest the day an application changes and can re-test a fix whenever they want. Fleuret reports contain a replayable exploit for every finding, logged re-tests, the coverage of what was tested and held, and a signed report mapped to DORA, NIS2 and ISO 27001.[4]

Hortense maps a customer's estate from domain to database and crosses what changed in the code with what is exposed on the internet and what past pentests found. Hortense connects what a customer already has into a view of risk: what to test, what to fix first, what can wait, and why. For each application, Hortense weighs the last pentest, what changed since, and how close it sits to a crown jewel. Hortense then recommends a pentest with its reasons and prepares it, and the customer approves it. Hortense prepares the scope, and a person with launch rights starts the pentest, which Émile runs. Hortense comes with every yearly plan.[1][4][6]

Fleuret sells pentests from 4,000 euros per test. Each extra credit costs €4,000, whatever the plan. Credits are valid for the subscription year and do not carry over to the next one. A first pentest is credited in full against a yearly plan taken within 60 days.[5][7]

Hosting and inference run on Scaleway in Paris, which Fleuret describes as a European provider. Fleuret runs open-weight models (gpt-oss, Kimi K2.5) on H100 GPUs at Scaleway in Paris. Engagement data does not leave that environment to reach a third-party model API. Engagement data, namely vulnerabilities, exploitation evidence and reports, is retained for 18 months in a per-client segmented European environment, then deleted. Fleuret AI states that stored data is encrypted with AES-256 and that communications use TLS 1.2 or higher. Fleuret AI states that its production data is hosted in data centers within the European Union. Fleuret AI states that it is compliant with the General Data Protection Regulation. Fleuret AI gives its address as 60 Rue François 1er, 75008 Paris, France.[4][8]

Fleuret AI publishes practical guides for CISOs scoping penetration testing under DORA, NIS2, ISO 27001, SOC 2 and PCI DSS. One guide covers how SaaS CISOs decide scope and evidence pentest against Article 21(2)(e) and 21(2)(f).[1][4][5][9]

Fleuret AI on the record

Sources

Fleuret AI full record

  1. [1]fleuret.aiFleuret AI · fleuret.ai · undated page, accessed October 21, 2026 · Tier A
  2. [2]Fleuret raises €4M pre-seed for agentic pentestingFleuret AI · published October 5, 2026 · Tier A
  3. [3]About Fleuret | Agentic AI pentestingFleuret AI · undated page, accessed November 10, 2026 · Tier A
  4. [4]Fleuret | AI-powered automated pentestingFleuret AI · undated page, accessed November 10, 2026 · Tier A
  5. [5]Pricing | Pentest credits, platform included | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
  6. [6]Hortense, your offsec brain | Know what to test next, and when | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
  7. [7]SOC 2 and ISO 27001 cost calculator | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
  8. [8]Security Policy | FleuretFleuret AI · published March 11, 2026 · Tier A
  9. [9]Compliance Pentest Guides | DORA, NIS2, ISO 27001 | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A

NetSPI full record

  1. [1]netspi.comNetSPI · netspi.com · undated page, accessed November 13, 2026 · Tier A
  2. [2]About Us - NetSPINetSPI · undated page, accessed November 13, 2026 · Tier A
  3. [3]NetSPI - Proactive Cyber Security | PTaaS, ASM, BASNetSPI · undated page, accessed November 13, 2026 · Tier A
  4. [4]The NetSPI Platform - NetSPINetSPI · undated page, accessed November 13, 2026 · Tier A
  5. [5]Customer Stories - NetSPINetSPI · undated page, accessed November 13, 2026 · Tier A
  6. [6]Cyber Security Assessments & Strategic Advisory Services - NetSPINetSPI · undated page, accessed November 13, 2026 · Tier A
  7. [7]Detective Controls Testing: Attack Simulation & Control ValidationNetSPI · undated page, accessed November 13, 2026 · Tier A
  8. [8]Model Context Protocol - NetSPINetSPI · undated page, accessed November 13, 2026 · Tier A
  9. [9]NetSPI Customer Case Study – ChubbNetSPI · undated page, accessed November 13, 2026 · Tier A

Spot a factual error? Request a correction.