- Hackuity has recently secured $19 million in financing from Forgepoint Capital International, bringing its total funds raised to $38 million.
- Pierre Samson, one of the co-founders, said in an interview with TFN that Hackuity now employs more than 40 people, with team members based in Lyon and Singapore.
- In just two months Anthropic’s AI identified more than 10,000 serious vulnerabilities, a problem that Hackuity is working to resolve.
In April 2026, Anthropic allowed a small number of its partners to test a preview of its most capable model, Mythos, against their own codebases. As a result, these partners discovered more than 10,000 high- or critical-severity security flaws, 99% of which were still unpatched.
“That is a validation; it amplifies what was already there,” Pierre Samson, co-founder and chief revenue officer of Hackuity, tells Tech Funding News. He doesn’t find it surprising.
The Lyon-based vulnerability management platform, which he co-founded with chief executive Patrick Ragaru, just raised $19 million in a round led by Forgepoint Capital International, with returning investors Bright Pixel, Bpifrance, and Seventure Partners also taking part.
Hackuity’s total funding has now reached $38 million, after previously raising about $19 million in a seed round and securing a 2022 Series A led by Bright Pixel Capital and Bpifrance.
Hackuity began as an Excel-based solution
Samson and Ragaru were not outsiders in the field merely jumping on the AI bandwagon. Both of them had been managing directors at a cybersecurity services company which Orange later merged into Orange Cyberdefense.
“When I was working there in 2016, I was in charge of the managed services. SOC services were mature back then, but vulnerability management was not. There were already a large number of vulnerabilities, and providing those services meant doing a great deal of work by hand in Excel. We therefore looked around for a solution on the market, found that there wasn’t one, and decided to make our own,” Samson says to TFN.
The gap became the core value proposition of Hackuity: it collects data from more than 130 security tools, uses its own scoring system to analyse the information, taking into account severity, exploitability, threat intelligence, asset importance, and business impact, and then determines which vulnerabilities require immediate action.
“You have to prioritise, understand the context of your assets and threats, and act swiftly on the vulnerabilities that present the greatest risk. That is precisely what Hackuity does: it gathers all the information about vulnerabilities and assets, prioritises them for the customer, and coordinates the remediation effort,” adds Samson.
According to Hackuity, its method reduces critical vulnerability alerts to 0.01%, increases remediation speed by 3x, automates up to 70% of exposure management, and can save customers up to $1 million.
The platform handles 1 billion findings across 2 million assets for more than 6,000 users, including clients from the Fortune 500, such as ENGIE and BPCE. Orange Cyberdefense, which was the previous employer of Samson and Ragaru, is now a go-to-market partner.
Fewer than 10 direct competitors, with bias challenges among others
Samson identifies two kinds of competitors: “One category consists of best-of-breed companies like ourselves, who are focused on this particular use case: there are fewer than 10 of them in the world, which is a small total for the field of cybersecurity but one that is increasing as demand goes up.”
“The other category includes best-of-suite platforms, that is, big vendors who have added this feature. However, if a company comes from the scanner sector, it is difficult for them to remain neutral, since they generally give priority to the noise that they generate,” he adds.
The assessment is in line with present market trends. Seemplicity, which was founded in Israel and is based in Palo Alto, raised $50 million last year, bringing its total funding to $80 million. ArmorCode, too, is based in Palo Alto and has raised $81 million.
Hackuity is still integrating with a large number of American and Israeli tools via its 130+ connectors.
The company employs more than 40 people, most of them being based in Lyon, and has a go-to-market office in Singapore rather than setting up a second headquarters. Samson established this office having resided in the area for six years.
A second funding round, a slower AI race, and a focus on being a European company
This was Hackuity’s second instance of providing institutional funding, and Samson states that the expectations this time around were higher than they had been the first time.
“When you go from Series A to B and beyond, investors expect more of you, and AI has altered the landscape, perhaps widening the gap between the best performers and the rest. For us, the discussion about AI raised expectations but also reinforced the business problem we are addressing. It was therefore both a challenge and an advantage,” he notes.
Damien Henault, managing director and partner at Forgepoint, whose previous investments have been in Qualys, CybelAngel, and BlueVoyant, called Hackuity “precisely the kind of company that we look to back.”
The security and vulnerability management market is worth about $19 billion this year and is expected to almost double to $32.7 billion by 2034. For now, Samson views the pile as growing faster than the fixes do, with $19 million behind him, a team split between Lyon and Singapore, and a pitch to European customers that independence from the big American and Israeli suites is worth paying for.
