Home / Agents / Fleuret agentic AI pentesting (Émile multi-agent orchestrator for web apps and APIs)

Fleuret agentic AI pentesting (Émile multi-agent orchestrator for web apps and APIs)

Vendor: Fleuret (FLEURET AI SAS) · HQ: France · Category: Security

Last verified 20 Oct 2026 · Added 20 Oct 2026 · 6 sources · How we verify

Vendor? Get your “Listed on Agent Index” badge

What it does

Fleuret runs penetration tests on web applications and APIs with agentic AI. Its platform page describes Émile V2: automated reconnaissance builds a coverage graph of exposed endpoints and subdomains; Émile then 'coordinates dozens of specialist agents, each focused on a specific attack vector' (authentication, IDOR, injection and others), which run real attacks in parallel and are retired after their mission. A deterministic validator confirms each finding through a controlled, non-destructive proof of concept, and anything that cannot be proven is not reported. Output is an audit-ready report with DORA and NIS2 mapping plus a live workspace where findings become tickets (Jira, Linear, Slack) that can be assigned, fixed and re-tested in one click. Findings are hosted on Scaleway in Paris. A free plan offers SAST, SCA, secret scanning and DAST/attack-surface discovery without a pentest. The company was founded in 2026 and announced a EUR 4M pre-seed round in October 2026. Price comparisons with manual pentests are vendor claims.

Frameworks (vendor-stated)

No framework tags yet.

Pricing (as published)

Published on fleuret.ai: free organisation plan (scanners only, 2 users, 10 repositories); one-off pentest EUR 4,000 per web app; contract covering every app on quote.

Tasks

pen test managementattack surfacevulnerability managementexposure management

Sources

Last verified 20 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Next step: find an auditor

After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.

Narrow by region

Published country pages in this directory. Choose any region; this listing has no mapped HQ country page.

Country

United States · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates

Send a request Get matched with verified auditors All verified audit firms

Next steps

Working aids from official sources and this directory. This is not a ranking.

Guides

Use-case comparisons

Agentic pentesting AI agents — 33 verified listings (Autonomous or AI-assisted penetration testing, attack-surface testing and exploitable-path verification)

Compare Fleuret agentic AI pentesting (Émile multi-agent orchestrator for web apps and APIs) with

Alternatives

7AI agentic security platform — Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE).
Abnormal AI Security Mailbox (Abnormal AI for Government) — Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized.
Adaptive Security Agentic Email Security and Phish Triage — API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training.
Aikido Attack AI Pentesting — Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.
AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) — German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing.
A
Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized.

See all Fleuret agentic AI pentesting alternatives →

FAQ (from this dataset)

What does Fleuret agentic AI pentesting do?

Paris-based agentic pentesting platform in which the Émile orchestrator coordinates 12-60 specialist attack agents (auth bypass, IDOR, injection chains, business logic, privilege escalation) against web apps and APIs, reports only findings proven with a replayable proof of concept, and re-tests fixes, with EU-sovereign hosting.

How much does Fleuret agentic AI pentesting cost?

Published on fleuret.ai: free organisation plan (scanners only, 2 users, 10 repositories); one-off pentest EUR 4,000 per web app; contract covering every app on quote.

Where is Fleuret (FLEURET AI SAS) headquartered?

France

What are alternatives to Fleuret agentic AI pentesting?

See the Fleuret agentic AI pentesting alternatives page for category-sharing listings in relevance order, not a ranking. Fleuret agentic AI pentesting alternatives.

Stay updated

We use your email only to send the newsletter. See our privacy policy.