CISO Tribune

Vendor comparison · 2 companies

Fleuret AI vs Pentera

Fleuret AI sells pentesting that combines artificial intelligence and offensive expertise. Pentera sells a platform that combines AI-powered adversarial testing, risk-based prioritization, and automated remediation into one workflow. CISO Tribune files both under Breach simulation and automated pen-testing. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Fleuret AI
  • Pentera
Fleuret AI vs Pentera: Products, Customers and Funding Compared
Fleuret AIFleuret AI sells pentesting that combines artificial intelligence and offensive expertise.fleuret.aiPenteraPentera sells a platform that combines AI-powered adversarial testing, risk-based prioritization, and automated remediation into one workflow.pentera.io
What it sells
  • Émile[4][6]Runs pentests on applications, APIs and infrastructure and ships a replayable exploit with every finding.
  • Hortense[4][5][6]Tells customers what to test next, and when.
  • Pentera Platform[4][8]A platform that combines AI-powered adversarial testing, risk-based prioritization, and automated remediation.
  • Pentera Resolve[4][10]Remediation workflows for validated findings.
  • Automated Pentesting[4][10]Automated pentests that teams launch whenever their environment changes.
  • Automated Red Teaming[4][11]Software-driven adversary emulation on demand.
  • Security Validation Advisory (SVA)[6]Practitioners who guide and refine a customer's exposure validation strategy.
Categories
Headquarters
Not stated on its pagesBoston, United States
Founded
Not stated on its pages2015[1][9]
Ownership and funding
Privately heldPrivately held[2][4][5][6][7]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 5, 2026Fleuret AI closed a €4M pre-seed round led by RAISE Ventures, with participation from Auriga Cyber Ventures, Wind Capital and Better Angle.[2]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 3, 2026[7]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Its published guides address CISOs at credit institutions and at SaaS companies. Fleuret describes its service as adding to the people already in place, such as a customer's team, MSSP or PASSI-certified firm. Its reports are signed and mapped to DORA, NIS2 and ISO 27001. Hosting and inference run on Scaleway in Paris.From its own pages, Pentera sells mainly to security teams that want to test their defenses against real attacks, whether or not they have a red team. Pentera says organizations without dedicated red team resources and existing red teams can both use its automated red teaming. Pentera says SecVal gives the CISO fresh data on the true impact of threats on the business. Its advisory service draws on experience across financial services, healthcare, manufacturing and critical infrastructure. Pentera says its platform supports every phase of CTEM, so programs built around that approach are a stated focus.
Last verified
October 21, 2026November 2, 2026

Where they overlap

  • Breach simulation and automated pen-testing is the primary category of both Fleuret AI and Pentera.
  • Both are privately held.

Where they differ, field by field

  • Fleuret AI is also filed under Penetration testing and red team services, Static application security testing and Dynamic application security testing.
  • Fleuret AI lists Émile and Hortense. Pentera lists Pentera Platform, Pentera Resolve, Automated Pentesting, Automated Red Teaming and Security Validation Advisory (SVA).
  • Pentera is headquartered in Boston, United States.
  • Pentera was founded in 2015.

How they differ

Fleuret AI sells Émile, which runs pentests on applications, APIs and infrastructure and ships a replayable exploit with every finding, and Hortense, which tells customers what to test next and when. Pentera sells the Pentera Platform, which combines AI-powered adversarial testing, risk-based prioritization and automated remediation, along with Pentera Resolve, Automated Pentesting, Automated Red Teaming and Security Validation Advisory (SVA). Fleuret AI also sits under Penetration testing and red team services, Static application security testing and Dynamic application security testing in CISO Tribune's filing, while Pentera is filed only under the breach simulation category.

Fleuret AI gives its address as Paris, France, and says its service is built and hosted in Europe, with hosting and inference on Scaleway in Paris. Pentera is headquartered in Boston, United States, was founded in 2015, and says it has teams across North America, Europe and Asia-Pacific. Both companies are privately held. Pentera names investors including Evolution Equity Partners, Insight Partners, K1 Investment Management, AWZ Ventures, Blackstone and Farallon Capital Management.

Fleuret AI's published guides address CISOs at credit institutions and at SaaS companies, and its reports are signed and mapped to DORA, NIS2 and ISO 27001. Pentera sells mainly to security teams that want to test their defenses against real attacks, whether or not they have a red team, and its advisory service draws on experience in financial services, healthcare, manufacturing and critical infrastructure. Fleuret AI sells pentests from 4,000 euros per test, and Hortense comes with every yearly plan.

What it sells: Fleuret AI

What Émile does[4][6]
A separate validator confirms every finding with a non-destructive exploit. Every finding ships with a working, replayable exploit. Each finding lands as a ticket with its exploit, an owner and a remediation, pushed to Jira, Linear or Slack.
What Hortense does[4][5][6]
Hortense maps a customer's estate from domain to database. Hortense crosses what changed in the code with what is exposed on the internet and what past pentests found. Hortense prepares the scope, and a person with launch rights starts the pentest, which Émile runs. Hortense comes with every yearly plan.

What it sells: Pentera

What Pentera Platform does[4][8]
The Pentera Platform automates exposure management from find to fix. Proven security risks found during adversarial testing move directly into Pentera's automated remediation. Findings from Pentera Core, Cloud and Surface are aggregated into a single, unified view.
What Pentera Resolve does[4][10]
Pentera Resolve mobilizes remediation through automated workflows. Teams consolidate findings, assign ownership, route tickets, track SLAs, and automatically retest fixes.
What Automated Pentesting does[4][10]
Automated pentesting helps teams test continuously, validate real exploitable exposure, and measure risk reduction over time. Teams can launch pentests without waiting for consultants, scheduling engagements, or adding headcount. Tests can start with a few clicks, a scheduled scenario, or a natural-language prompt through an LLM via Pentera's MCP server.
What Automated Red Teaming does[4][11]
Pentera's automated red teaming replicates real-world attacker behavior on demand and at enterprise scale. Pentera says it is designed to expand access to adversarial testing, not replace it.
What Security Validation Advisory (SVA) does[6]
Security Validation Advisory (SVA) draws on insights from thousands of enterprise customers and decades of hands-on experience in penetration testing, red teaming, and offensive security consulting. Customers work directly with offensive security practitioners who guide and refine their exposure validation strategy.

Questions about Fleuret AI and Pentera

What do Fleuret AI and Pentera sell?
Fleuret AI sells Émile and Hortense. Pentera sells Pentera Platform, Pentera Resolve, Automated Pentesting, Automated Red Teaming and Security Validation Advisory (SVA).
Are Fleuret AI and Pentera in the same category?
Yes. Breach simulation and automated pen-testing is the primary category of both on CISO Tribune.
Where are Fleuret AI and Pentera headquartered?
Pentera is headquartered in Boston, United States.
When were Fleuret AI and Pentera founded?
Pentera was founded in 2015.
Who owns Fleuret AI and Pentera?
Fleuret AI is privately held. Pentera is privately held.
Who are Fleuret AI and Pentera sold to?
Its published guides address CISOs at credit institutions and at SaaS companies. From its own pages, Pentera sells mainly to security teams that want to test their defenses against real attacks, whether or not they have a red team.
What have Fleuret AI and Pentera announced recently?
October 5, 2026: Fleuret AI closed a €4M pre-seed round led by RAISE Ventures, with participation from Auriga Cyber Ventures, Wind Capital and Better Angle.

About Fleuret AI

Fleuret AI sells pentesting that combines artificial intelligence and offensive expertise. Fleuret uses agentic AI to simulate real attacks on its customers' systems. Émile runs pentests on customer applications, APIs and infrastructure and ships a replayable exploit with every finding. Hortense tells customers what to test next, and when. Fleuret states that its service is built and hosted in Europe.[1][3][4]

A separate validator confirms every finding with a non-destructive exploit. Several agents test the surface at once and reproduce every finding before it is reported. Every finding ships with a working, replayable exploit, and a finding that cannot be reproduced is left out of the report. Fleuret states that proofs of concept are read-only and non-destructive. Fleuret states that its orchestration is deterministic code, not a free-running model, and that it ends in a signed report.[4][5]

Each finding becomes a ticket with its exploit, an owner and a remediation, pushed to Jira, Linear or Slack. Customers can launch a full pentest the day an application changes and can re-test a fix whenever they want. Fleuret reports contain a replayable exploit for every finding, logged re-tests, the coverage of what was tested and held, and a signed report mapped to DORA, NIS2 and ISO 27001.[4]

Hortense maps a customer's estate from domain to database and crosses what changed in the code with what is exposed on the internet and what past pentests found. Hortense connects what a customer already has into a view of risk: what to test, what to fix first, what can wait, and why. For each application, Hortense weighs the last pentest, what changed since, and how close it sits to a crown jewel. Hortense then recommends a pentest with its reasons and prepares it, and the customer approves it. Hortense prepares the scope, and a person with launch rights starts the pentest, which Émile runs. Hortense comes with every yearly plan.[1][4][6]

Fleuret sells pentests from 4,000 euros per test. Each extra credit costs €4,000, whatever the plan. Credits are valid for the subscription year and do not carry over to the next one. A first pentest is credited in full against a yearly plan taken within 60 days.[5][7]

Hosting and inference run on Scaleway in Paris, which Fleuret describes as a European provider. Fleuret runs open-weight models (gpt-oss, Kimi K2.5) on H100 GPUs at Scaleway in Paris. Engagement data does not leave that environment to reach a third-party model API. Engagement data, namely vulnerabilities, exploitation evidence and reports, is retained for 18 months in a per-client segmented European environment, then deleted. Fleuret AI states that stored data is encrypted with AES-256 and that communications use TLS 1.2 or higher. Fleuret AI states that its production data is hosted in data centers within the European Union. Fleuret AI states that it is compliant with the General Data Protection Regulation. Fleuret AI gives its address as 60 Rue François 1er, 75008 Paris, France.[4][8]

Fleuret AI publishes practical guides for CISOs scoping penetration testing under DORA, NIS2, ISO 27001, SOC 2 and PCI DSS. One guide covers how SaaS CISOs decide scope and evidence pentest against Article 21(2)(e) and 21(2)(f).[1][4][5][9]

Fleuret AI on the record

Sources

Fleuret AI full record

  1. [1]fleuret.aiFleuret AI · fleuret.ai · undated page, accessed October 21, 2026 · Tier A
  2. [2]Fleuret raises €4M pre-seed for agentic pentestingFleuret AI · published October 5, 2026 · Tier A
  3. [3]About Fleuret | Agentic AI pentestingFleuret AI · undated page, accessed November 10, 2026 · Tier A
  4. [4]Fleuret | AI-powered automated pentestingFleuret AI · undated page, accessed November 10, 2026 · Tier A
  5. [5]Pricing | Pentest credits, platform included | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
  6. [6]Hortense, your offsec brain | Know what to test next, and when | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
  7. [7]SOC 2 and ISO 27001 cost calculator | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
  8. [8]Security Policy | FleuretFleuret AI · published March 11, 2026 · Tier A
  9. [9]Compliance Pentest Guides | DORA, NIS2, ISO 27001 | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A

Pentera full record

  1. [1]About usPentera · pentera.io · undated page, accessed September 27, 2026 · Tier A
  2. [2]Pentera secures 60m to lead security validation market consolidation and drive next phase of growth 302399599Pentera via PR Newswire · prnewswire.com · published March 12, 2025 · Tier A
  3. [3]Pentera nabs 60m at a 1b valuation to build simulated network attacks to train security teamsTechCrunch · techcrunch.com · published March 12, 2025 · Tier B
  4. [4]Pentera | Exposure Validation Platform | AI-Driven TestingPentera · undated page, accessed October 27, 2026 · Tier A
  5. [5]Red Team & Offensive Security Services | PenteraPentera · undated page, accessed October 27, 2026 · Tier A
  6. [6]Security Validation Advisory & Cyber Risk Consulting | PenteraPentera · undated page, accessed October 27, 2026 · Tier A
  7. [7]Pentera Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 27, 2026 · Tier C
  8. [8]Pentera | Security Validation Platform for Exposure ReductionPentera · undated page, accessed November 3, 2026 · Tier A
  9. [9]About Pentera | Proactive Security ValidationPentera · undated page, accessed November 3, 2026 · Tier A
  10. [10]Automated Pentesting - PenteraPentera · undated page, accessed November 3, 2026 · Tier A
  11. [11]Red Teaming - PenteraPentera · undated page, accessed November 3, 2026 · Tier A
  12. [12]AI-Native Web Application Testing - PenteraPentera · undated page, accessed November 3, 2026 · Tier A
  13. [13]Automated Threat-Led Penetration Testing (TLPT) - PenteraPentera · undated page, accessed November 3, 2026 · Tier A
  14. [14]What Is Automated Security Validation (ASV)?Pentera · undated page, accessed November 3, 2026 · Tier A

Spot a factual error? Request a correction.