Hackuity Secures $19M to Combat AI-Driven Cyber Vulnerability Explosion

Hackuity has secured $19 million in funding to scale its AI-powered Vulnerability Operations Center, addressing a surge in cybersecurity flaws that outpace human remediation capacity. For fintech leaders, this highlights a critical shift toward automated exposure management as traditional security workflows buckle under the weight of 350,000 known vulnerabilities and increasingly sophisticated AI-driven attacks.

What was announced

Hackuity announced a $19 million funding round led by Forgepoint Capital International, with participation from existing investors Bright Pixel, Bpifrance, and Seventure Partners. This brings the firm’s total capital raised to $38 million. The investment is earmarked for accelerating product innovation and AI capabilities, alongside international expansion across European and Asian markets.

The funding arrives as the industry faces a "vulnerability tsunami." Data indicates there are now 350,000 known Common Vulnerabilities and Exposures (CVEs), representing a 20% year-on-year increase. Hackuity’s platform, a Vulnerability Operations Center (VOC), is designed to help enterprises manage this volume by aggregating data from over 130 security tools. By enriching findings with business and threat context, the system orchestrates remediation across security, IT, and engineering teams.

The proprietary risk scoring engine analyzes factors such as exploitability, threat intelligence, and asset criticality to determine what to fix first. According to the company, customers have seen critical vulnerability noise reduced to 0.01% and mean-time-to-remediate improved by three times. The platform also automates up to 70% of full exposure management activities, which the company claims delivers between $100,000 and $1 million in savings. Current global clients include ENGIE and BPCE, while Orange Cyberdefense has integrated Hackuity into its exposure management portfolio to deliver prioritized risk outcomes.

"Hackuity was founded on a simple conviction: the volume of vulnerabilities would outpace any human's capacity to respond. Mythos simply validates that thesis, by making the scale of the tsunami impossible to ignore. Having Forgepoint, a globally recognized cybersecurity investor with unmatched sector expertise and a truly global network, lead this round is a strong signal that the market agrees. What we built before the wave arrived is exactly what enterprises need now that it's here: an agentic platform that automates prioritization and drives remediation at machine speed."

Patrick Ragaru, CEO and Co-Founder of Hackuity.

The companies involved

Hackuity is a specialist in AI-powered vulnerability management, positioning itself as a category-defining Vulnerability Operations Center. The company focuses on transforming fragmented security data into actionable remediation workflows. Bpifrance, a recurring investor in the fintech and security space, is the French national investment bank. It has a significant presence in the European market, often supporting digital transformation initiatives for SMEs and large enterprises. Seventure Partners is another key European venture capital firm, active in the digital technologies and life sciences sectors. Forgepoint Capital International, which led this latest round, is a globally recognized cybersecurity investment firm with a network dedicated to scaling sector-specific innovations. Bright Pixel, also participating, is a venture capital firm that typically targets early-stage technology companies. Together, these backers represent a concentrated effort to bolster European cybersecurity infrastructure against global threats.

What FF News has reported before

FF News has previously tracked the investment activities of Hackuity’s backers, particularly in the context of digital infrastructure and banking. Bpifrance has been notably active in the core banking and payments space, specifically when Bpifrance Goes Live on Thought Machine’s Vault Payments, Starting With SEPA Instant Payments. This followed an earlier strategic move where Bpifrance selects Thought Machine to deliver the next-generation of finance to SMEs in France. Additionally, Seventure Partners was recently involved in the digital identity sector, as seen when Wultra Secures €6.8M Series A to Scale Post-Quantum Digital Identity for Global Banking. These reports underscore a broader trend of institutional support for infrastructure-level security and banking technology.

What this means

This announcement signals the end of the "detection-only" era in cybersecurity. As AI tools accelerate the discovery of flaws, the bottleneck has shifted from finding bugs to fixing them. Legacy vulnerability management tools are under immense pressure; they provide data but not direction. The market is moving toward "agentic" platforms that don't just alert but orchestrate. For the fintech sector, where regulatory pressure on operational resilience is mounting, the ability to automate the majority of exposure management isn't just a cost-saver—it is becoming a requirement for survival. The question now is how quickly legacy vendors can pivot to this operational model before they are rendered obsolete by the sheer volume of automated threats.