Hackuity raises $19M to help security teams sort through AI-found vulnerabilities

Hackuity, a Lyon-based cybersecurity company, has raised $19M in a round led by Forgepoint Capital International. Existing investors Bright Pixel, Bpifrance, and Seventure Partners also took part, bringing the company’s total funding to $38M. Hackuity plans to spend the money on product development, its AI features, and expansion across Europe and Asia.

The company sells what it calls a Vulnerability Operations Center, software that sits on top of the scanners and testing tools a security team already runs. It pulls findings from more than 130 of those tools, scores each one on severity, exploitability, threat intelligence, and the criticality of the affected asset to the business, and then routes the fixes to the security, IT, and engineering teams responsible for them.

More than 48,000 CVEs, the public identifiers for known software flaws, were published in 2025 alone, according to one independent tally, about a fifth more than the year before. AI is now adding to the pile. Anthropic said in May that its Claude Mythos Preview model had turned up more than 10,000 high- or critical-severity flaws in roughly seven weeks, and the company had warned in April, when it first described the model’s abilities, that more than 99% of the vulnerabilities it had found were still unpatched.

Patrick Ragaru, Hackuity’s chief executive and co-founder, said the company was built on the view that “the volume of vulnerabilities would outpace any human’s capacity to respond,” and that Mythos had made the scale of the problem “impossible to ignore.”

He described the product as “an agentic platform that automates prioritization and drives remediation at machine speed.”

Hackuity says customers have cut the noise around critical vulnerabilities to 0.01% of findings, tripled the speed at which they close them, and automated up to 70% of their exposure management work, with savings ranging from hundreds of thousands of dollars to $1mn.

Its customers include French energy group ENGIE and banking group BPCE. Omar Abdelmoumen, ENGIE’s head of cyber defense, said the challenge “isn’t discovering vulnerabilities anymore but understanding which ones matter most.”

The company also sells through integrators and managed security providers, including Orange Cyberdefense, which has added Hackuity to its exposure management portfolio. Cyril Demonceaux, head of Orange Cyberdefense’s Defense Center, said the platform turns “the complexity of vulnerabilities into clear priorities” for the teams that have to act on them.

For Forgepoint, which specializes in cybersecurity investments, the deal is a bet on that bottleneck. Damien Henault, a managing director and partner at the firm, said organizations “can no longer rely on traditional vulnerability management approaches” to keep up with AI-driven threats.

Hackuity came out of stealth in 2022 with a €12M Series A, and has offices in Lyon, Paris, and Singapore.

Source link