CISO Tribune

Vendor comparison · 2 companies

Fleuret AI vs Threat Intelligence

Fleuret AI sells pentesting that combines artificial intelligence and offensive expertise. Threat Intelligence delivers cyber security products and services. CISO Tribune files both under Breach simulation and automated pen-testing. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Fleuret AI
  • Threat Intelligence
Fleuret AI vs Threat Intelligence: Products, Customers and Funding Compared
Fleuret AIFleuret AI sells pentesting that combines artificial intelligence and offensive expertise.fleuret.aiThreat IntelligenceThreat Intelligence delivers cyber security products and services.threatintelligence.com
What it sells
  • Émile[4][6]Runs pentests on applications, APIs and infrastructure and ships a replayable exploit with every finding.
  • Hortense[4][5][6]Tells customers what to test next, and when.
  • Evolve Security Automation[1][11][12]Evolve built-in security capabilities automatically detect, prioritize, and remediate threats.
  • EvolvePT[5][6]EvolvePT is an automated pen testing solution.
  • EvolveAST[7]EvolveAST helps organizations orchestrate and automate application security testing in DevOps pipelines.
  • EvolveIR[8]EvolveIR is an automated incident response tool.
  • Penetration Testing Services[6][9]Penetration Testing Services proactively identify the most exploitable security vulnerabilities of infrastructure.
  • Governance, Risk and Compliance Services[9]Assessments and consulting services to help identify risk levels and compliance requirements.
  • EvolveMDR[11]EvolveMDR combines security specialists with Evolve Security Automation capabilities to streamline security operations.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Privately heldNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 5, 2026Fleuret AI closed a €4M pre-seed round led by RAISE Ventures, with participation from Auriga Cyber Ventures, Wind Capital and Better Angle.[2]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 11, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Its published guides address CISOs at credit institutions and at SaaS companies. Fleuret describes its service as adding to the people already in place, such as a customer's team, MSSP or PASSI-certified firm. Its reports are signed and mapped to DORA, NIS2 and ISO 27001. Hosting and inference run on Scaleway in Paris.Not written yet
Last verified
October 21, 2026November 6, 2026

Where they overlap

  • Breach simulation and automated pen-testing is the primary category of both Fleuret AI and Threat Intelligence.

Where they differ, field by field

  • Fleuret AI is also filed under Penetration testing and red team services, Static application security testing and Dynamic application security testing. Threat Intelligence is also filed under Incident response and forensics, MDR and managed SOC and Digital risk protection.
  • Fleuret AI lists Émile and Hortense. Threat Intelligence lists Evolve Security Automation, EvolvePT, EvolveAST, EvolveIR, Penetration Testing Services and 2 more.
  • Fleuret AI is privately held.

What it sells: Fleuret AI

What Émile does[4][6]
A separate validator confirms every finding with a non-destructive exploit. Every finding ships with a working, replayable exploit. Each finding lands as a ticket with its exploit, an owner and a remediation, pushed to Jira, Linear or Slack.
What Hortense does[4][5][6]
Hortense maps a customer's estate from domain to database. Hortense crosses what changed in the code with what is exposed on the internet and what past pentests found. Hortense prepares the scope, and a person with launch rights starts the pentest, which Émile runs. Hortense comes with every yearly plan.

What it sells: Threat Intelligence

What Evolve Security Automation does[1][11][12]
Evolve automatically generates pre-configured Evolve Virtual Appliances for deployment into corporate networks and on-premise data centers. Evolve Virtual Appliances support VMware or Hyper-V, and third-party cloud providers including AWS and Azure. Evolve maps major security standards and frameworks to ensure the right security controls are in place.
What EvolvePT does[5][6]
Threat Intelligence combines its penetration testing tool, EvolvePT, with a certified, principal-only team of penetration testing consultants. Symbion turned to EvolvePT, an automated pen testing solution.
What EvolveAST does[7]
EvolveAST helps organizations orchestrate and automate the integration of application security testing into DevOps pipelines. Evolve integrates automated application security testing into the standard business as usual processes and technologies of development teams.
What EvolveIR does[8]
EvolveIR is an automated incident response tool that can detect and respond to security threats. Threat Intelligence offers an incident response solution that uses its security team and EvolveIR.
What Penetration Testing Services does[6][9]
Threat Intelligence uses a Purple Team method in which its Principal Consultants collaborate with the internal security team of the customer. Threat Intelligence evaluates web and mobile applications in five phases: reconnaissance, scanning, vulnerability assessment, exploitation, and reporting. Penetration Testers at Threat Intelligence hold qualifications like CEH, OSCP, or GPEN.
What Governance, Risk and Compliance Services does[9]
In its IRAP assessments, Threat Intelligence guides customers through Information Security Registered Assessors Program (IRAP) compliance. Threat Intelligence provides guidance on securing ISO 27001 certification for an Information Security Management System (ISMS).
What EvolveMDR does[11]
Threat Intelligence specialists help customers mitigate threats and create a detection and prevention program. Threat Intelligence describes security and IT teams with limited skills and resources as facing challenges in managing risks and meeting compliance requirements.

Questions about Fleuret AI and Threat Intelligence

What do Fleuret AI and Threat Intelligence sell?
Fleuret AI sells Émile and Hortense. Threat Intelligence sells Evolve Security Automation, EvolvePT, EvolveAST, EvolveIR, Penetration Testing Services and 2 more.
Are Fleuret AI and Threat Intelligence in the same category?
Yes. Breach simulation and automated pen-testing is the primary category of both on CISO Tribune.
Who owns Fleuret AI and Threat Intelligence?
Fleuret AI is privately held.
Who are Fleuret AI and Threat Intelligence sold to?
Its published guides address CISOs at credit institutions and at SaaS companies.
What have Fleuret AI and Threat Intelligence announced recently?
October 5, 2026: Fleuret AI closed a €4M pre-seed round led by RAISE Ventures, with participation from Auriga Cyber Ventures, Wind Capital and Better Angle.

About Fleuret AI

Fleuret AI sells pentesting that combines artificial intelligence and offensive expertise. Fleuret uses agentic AI to simulate real attacks on its customers' systems. Émile runs pentests on customer applications, APIs and infrastructure and ships a replayable exploit with every finding. Hortense tells customers what to test next, and when. Fleuret states that its service is built and hosted in Europe.[1][3][4]

A separate validator confirms every finding with a non-destructive exploit. Several agents test the surface at once and reproduce every finding before it is reported. Every finding ships with a working, replayable exploit, and a finding that cannot be reproduced is left out of the report. Fleuret states that proofs of concept are read-only and non-destructive. Fleuret states that its orchestration is deterministic code, not a free-running model, and that it ends in a signed report.[4][5]

Each finding becomes a ticket with its exploit, an owner and a remediation, pushed to Jira, Linear or Slack. Customers can launch a full pentest the day an application changes and can re-test a fix whenever they want. Fleuret reports contain a replayable exploit for every finding, logged re-tests, the coverage of what was tested and held, and a signed report mapped to DORA, NIS2 and ISO 27001.[4]

Hortense maps a customer's estate from domain to database and crosses what changed in the code with what is exposed on the internet and what past pentests found. Hortense connects what a customer already has into a view of risk: what to test, what to fix first, what can wait, and why. For each application, Hortense weighs the last pentest, what changed since, and how close it sits to a crown jewel. Hortense then recommends a pentest with its reasons and prepares it, and the customer approves it. Hortense prepares the scope, and a person with launch rights starts the pentest, which Émile runs. Hortense comes with every yearly plan.[1][4][6]

Fleuret sells pentests from 4,000 euros per test. Each extra credit costs €4,000, whatever the plan. Credits are valid for the subscription year and do not carry over to the next one. A first pentest is credited in full against a yearly plan taken within 60 days.[5][7]

Hosting and inference run on Scaleway in Paris, which Fleuret describes as a European provider. Fleuret runs open-weight models (gpt-oss, Kimi K2.5) on H100 GPUs at Scaleway in Paris. Engagement data does not leave that environment to reach a third-party model API. Engagement data, namely vulnerabilities, exploitation evidence and reports, is retained for 18 months in a per-client segmented European environment, then deleted. Fleuret AI states that stored data is encrypted with AES-256 and that communications use TLS 1.2 or higher. Fleuret AI states that its production data is hosted in data centers within the European Union. Fleuret AI states that it is compliant with the General Data Protection Regulation. Fleuret AI gives its address as 60 Rue François 1er, 75008 Paris, France.[4][8]

Fleuret AI publishes practical guides for CISOs scoping penetration testing under DORA, NIS2, ISO 27001, SOC 2 and PCI DSS. One guide covers how SaaS CISOs decide scope and evidence pentest against Article 21(2)(e) and 21(2)(f).[1][4][5][9]

Fleuret AI on the record

Sources

Fleuret AI full record

  1. [1]fleuret.aiFleuret AI · fleuret.ai · undated page, accessed October 21, 2026 · Tier A
  2. [2]Fleuret raises €4M pre-seed for agentic pentestingFleuret AI · published October 5, 2026 · Tier A
  3. [3]About Fleuret | Agentic AI pentestingFleuret AI · undated page, accessed November 10, 2026 · Tier A
  4. [4]Fleuret | AI-powered automated pentestingFleuret AI · undated page, accessed November 10, 2026 · Tier A
  5. [5]Pricing | Pentest credits, platform included | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
  6. [6]Hortense, your offsec brain | Know what to test next, and when | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
  7. [7]SOC 2 and ISO 27001 cost calculator | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A
  8. [8]Security Policy | FleuretFleuret AI · published March 11, 2026 · Tier A
  9. [9]Compliance Pentest Guides | DORA, NIS2, ISO 27001 | FleuretFleuret AI · undated page, accessed November 10, 2026 · Tier A

Threat Intelligence full record

  1. [1]threatintelligence.comThreat Intelligence · threatintelligence.com · undated page, accessed November 6, 2026 · Tier A
  2. [2]We are Threat IntelligenceThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  3. [3]Cybersecurity Solutions| Pentesting | IR | MSSP | AUSThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  4. [4]Evolve Cybersecurity PlatformThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  5. [5]Automated Penetration Testing Case Study | EvolvePTThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  6. [6]Penetration Testing Services | Red Team | AustraliaThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  7. [7]EvolveAST Application Security TestingThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  8. [8]Incident Response and Digital Forensic InvestigationsThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  9. [9]Cyber Security Professional ServicesThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  10. [10]Governance, Risk and Compliance ServicesThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  11. [11]Managed Security Services AustraliaThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  12. [12]Security Automation Case Study - Evolve and GTLawThreat Intelligence · undated page, accessed November 11, 2026 · Tier A
  13. [13]SOCRadar Extended Threat Intelligence Reviews 2026G2 · undated page, accessed November 11, 2026 · Tier C

Spot a factual error? Request a correction.