Sonae's investment arm Bright Pixel, which has been a investor in Hackuity since 2022, is continuing to back this European challenger in a sector otherwise dominated by US and Israeli vendors.

French cybersecurity company Hackuity has raised $19m in a funding round led by Forgepoint Capital International, as enterprises face a rapidly growing volume of software vulnerabilities driven in part by advances in artificial intelligence.
The Lyon-based company said the investment takes its total funding to $38m. Existing investors Bright Pixel, the technology investment arm of the Portuguese multinational conglomerate Sonae Group, as well as Bpifrance and Seventure Partners also participated in the round.
Hackuity, a rare European company in a space dominated by US and Israeli vendors, is addressing a key bottleneck in computer security. AI tools are uncovering flaws at a pace that no human security team can keep up with. Anthropic’s Claude Mythos Preview, for example, surfaced more than 10,000 serious flaws in under two months — but 99% of these remain unfixed, as the repair and patching of vulnerabilities becomes the bottleneck.

“Hackuity was founded on a simple conviction: the volume of vulnerabilities would outpace any human’s capacity to respond,” says Hackuity chief executive and co-founder Patrick Ragaru.
Hackuity helps large organisations prioritise which security flaws to address. Its platform aggregates findings from more than 130 security tools and applies its own risk-scoring system using factors including vulnerability severity, exploitability, threat intelligence, asset criticality and business impact.
Its customers include French energy group ENGIE and banking group BPCE, as well as managed security service provider Orange Cyberdefense.
ENGIE’s head of cyber defence, Omar Abdelmoumen, said the challenge was increasingly “understanding which ones matter most” and aligning the relevant teams to address them before attackers could exploit them.
Hackuity claims customers have reduced critical-vulnerability “noise” to 0.01%, cut mean time to remediate by three times and automated up to 70% of exposure-management activities. It says the resulting savings can range from hundreds of thousands of dollars to $1m.
The funding comes as cybersecurity investors increasingly look at how AI can change both sides of the security equation. AI can accelerate the discovery and exploitation of vulnerabilities, but it can also help defenders process the volume of data generated by security tools.
The company said the funding would help accelerate international growth across Europe and Asia, as well as supporting further development of the platform’s agentic capabilities.
