“Vulnerability tsunami” prompts France's Hackuity to land €16 million for automated cyber remediation

Hackuity, a Lyon-based AI-powered Vulnerability Operations Center (VOC), today announced a €16 million ($19 million) funding round to accelerate product innovation, AI capabilities, and international expansion across Europe and Asia.

The round was led by Forgepoint Capital International, with participation from existing investors Bright Pixel, Bpifrance, and Seventure Partners – bringing total funding to €32 million ($38 million).

Patrick Ragaru, CEO and co-founder of Hackuity, says: “Hackuity was founded on a simple conviction: the volume of vulnerabilities would outpace any human’s capacity to respond. Mythos simply validates that thesis, by making the scale of the tsunami impossible to ignore. Having Forgepoint, a globally recognised cybersecurity investor with unmatched sector expertise and a truly global network, lead this round is a strong signal that the market agrees.

“What we built before the wave arrived is exactly what enterprises need now that it’s here: an agentic platform that automates prioritisation and drives remediation at machine speed.”

Hackuity’s financing comes amid notable investment in European cybersecurity and AI-enabled security infrastructure in 2026.

EU-Startups has seen several comparable rounds, including €25.8 million for Paris-based agentic Security Operations Centre platform Qevlar AI, €15.4 million for Paris-founded vulnerability discovery and remediation platform Escape, €12.9 million for French credential-security startup MokN, and €2.1 million for Milan-based Bynario, whose platform also identifies, prioritises and remediates software vulnerabilities.

Other adjacent financings have included NeuralTrust’s €17.2 million Seed round for enterprise AI-agent security and Cloudsmith’s €61.5 million Series C for software supply-chain security, while Rome-based Exein raised €234 million for Physical AI cybersecurity.

EU-Startups calculated approximately €395.4 million across European cybersecurity and AI-security rounds reported in 2026 before Hackuity’s announcement; adding its €16 million financing would take that total to around €411 million.

The French market is particularly relevant to Hackuity, with Qevlar AI, Escape and MokN all raising funding in 2026. Forgepoint Capital International, which led Hackuity’s round, also appeared in as an investor in Qevlar AI.

Damien Henault, Managing Director and Partner at Forgepoint Capital International, says: “Cybersecurity has entered a new era where AI is accelerating both attack and defense. Organisations can no longer rely on traditional vulnerability management approaches to keep pace with the speed and scale of modern threats. Hackuity is building the operational platform enterprises need to transform overwhelming amounts of security data into clear, actionable decisions.

“Patrick and the team have combined deep cybersecurity expertise with a bold product vision, making Hackuity exactly the kind of category-defining company we look to support.”

Founded in 2018, Hackuity is an AI-powered VOC platform, helping organisations translate fragmented cyber exposure data into prioritised, actionable remediation.

As of 2026, Hackuity powers vulnerability operations for more than 6,000 users, protecting over 2 million assets and manage 1 billion findings. The platform brings together security findings and asset data from more than 130 security tools. Customers include ENGIE and BPCE.

According to the company, today’s funding comes as cybersecurity reaches a turning point. AI-powered discovery is fueling a “vulnerability tsunami”: Anthropic’s Claude Mythos Preview alone identified 10,000+ high or critical severity flaws in under two months, 99% still unpatched.

Despite heavy investment in detection tools, Hackuity maintains that security teams remain overwhelmed by fragmented data, disconnected workflows, and a growing volume of findings. There are now 350,000 known Common Vulnerabilities and Exposures (CVEs), up 20% YoY.

Omar Abdelmoumen, Head of Cyber Defence at ENGIE, says: “The challenge isn’t discovering vulnerabilities anymore but understanding which ones matter most and getting the right teams aligned to fix them before attackers can act. Hackuity gives us the operational clarity to prioritise, coordinate, and accelerate remediation across our global organisation.”

By aggregating data from more than 130 security tools, contributing business and threat context, and orchestrating remediation across security, IT, and engineering teams, Hackuity looks to enable organisations to focus on the vulnerabilities that create real business risk.

Powered by its proprietary risk scoring engine, Hackuity analyses vulnerability severity, exploitability, threat intelligence, asset criticality, and business impact to determine what to fix first.

According to the company, customers have seen gains such as:

Cyril Demonceaux, Head of Defense Center at Orange Cyberdefense, adds: “Hackuity helps companies reduce their attack surface by transforming the complexity of vulnerabilities into clear priorities, allowing teams to focus on the risks that really matter. We’ve selected Hackuity in our Exposure Management portfolio and combined its expertise with ours to deliver a best-in-class value proposition to customers, bringing together advanced vulnerability prioritisation and deep cybersecurity expertise to turn risk into actionable outcomes.”