White-label agentic pentest for your platform.

GRC platform, pentest marketplace, or cyber consultancy: Fleuret plugs into your offering. Sovereign EU, DORA and NIS2 ready, DPA-signable.

Talk to a founder

Who is this for?

GRC platforms

Vanta, Sprinto, Drata, Bastion, Secureframe, Thoropass, Scytale and EU equivalents. Your customers need pentest for their audit. Plug Fleuret in as the pentest tile in your marketplace.

Pentest marketplaces

Yogosha-style. Bug bounty plus structured pentest, same customer book. Transactional per-engagement model, clear margin on every pentest.

Cyber advisory and audit

Almond, Stoïk, EU Big4. Outsource the pentest portion without building an in-house offensive team. Reports audit-ready for your auditor.

The wholesale model

SaaS GRC

50% on continuous tiers

Wholesale 50% on Starter (€5,000) and Growth (€12,500). You set retail, you keep the margin. Recurring revenue attached to your ARR.

Marketplace

60% on POC

€1,800 wholesale per POC pentest (list price €3,000 / webapp). Transactional per-engagement shape, direct marketplace integration.

What your customers get

Full agentic pentest in 72h (POC) or weekly automated rescan (Recurring)
PDF report, DORA and NIS2 audit-ready, offline-verifiable
Jira tickets per finding with re-test link, ready for their dev sprint
Board-deck export for their quarterly risk review
Scaleway France hosting, open-weight models, zero data leakage outside the EU
White-label available: your logo on the report, your marketplace tile

Sovereignty proof

All Fleuret sub-processors are publicly listed, 100% EU hosting, customer data never leaves Europe. GDPR article 28 and partner DPA compliant.

See the sub-processor list →

Let us start.

A 30-minute demo with a founder. No scripts. We look at your use cases, calibrate the wholesale, sign the NDA if needed.

Book a demo