Hackuity funding has added $19 million for the French cybersecurity company to expand its vulnerability-operations platform, with Forgepoint Capital International leading the round. The company disclosed the financing on September 16, 2026, alongside participation from Bright Pixel, Bpifrance and Seventure Partners.
Everyone else is reporting a cybersecurity funding round; we are explaining why the money is aimed at the operational bottleneck between finding a vulnerability and actually fixing it. That distinction matters as scanners, cloud platforms and AI-assisted testing generate more findings than security teams can investigate manually.
What the Hackuity funding round changes
Hackuity said the round was led by Forgepoint Capital International, the international arm of security-focused investor Forgepoint Capital. Existing backers Bright Pixel, Bpifrance and Seventure Partners also participated. The announcement gives no public valuation, so any valuation estimate would be speculation.
The company describes its product as a Vulnerability Operations Center, or VOC. In practical terms, the platform ingests findings from security tools, removes duplicates, adds business and threat context, ranks remediation work and tracks whether fixes are completed. This is not the same job as a scanner that discovers flaws; it is an orchestration layer above multiple scanners and ticketing systems.
The round was independently reported by Tech.eu and Tech Funding News on September 16. Their reports agree on the amount and lead investor, while the company-supplied announcement identifies the participating investors and the intended expansion. That primary-plus-two structure clears the material-funding verification gate without relying on copied syndication.
Why AI increases the vulnerability queue
AI changes both sides of vulnerability management. Defenders can automate discovery and analysis, while attackers can test, vary and scale techniques faster. Even without assuming a dramatic rise in successful attacks, more automated discovery means more alerts competing for a finite number of engineers.
That creates an economic problem, not only a technical one. A high-severity label does not reveal whether the affected asset is exposed, business-critical or already protected by another control. Teams need to combine severity with reachability, exploit activity, asset ownership and operational impact before they decide what to patch first.
Hackuity’s pitch is that one workflow can make those decisions more consistent. The funding therefore backs three connected tasks: product development, international distribution and implementation support. A vulnerability-operations platform has limited value if it cannot connect to the tools and work systems already used by a customer’s security and engineering teams.
What buyers should test before adding another platform
The strongest evaluation is a before-and-after test on the customer’s own backlog. Buyers should measure how many duplicate findings are removed, how quickly an accountable owner is assigned, how often risk rankings change after context is added and whether verified remediation time falls. Vendor claims are useful hypotheses, not substitutes for that evidence.
Integration depth is equally important. A polished prioritisation screen can become another silo if it does not write back to ticketing, scanner and asset systems. Security leaders should also ask how ranking logic is explained, which data leaves their environment, how human overrides are recorded and whether automation can close or suppress a finding without review.
The pattern resembles other funding bets on specialised security workflow. Lapaas Voice previously examined how Cymphony’s agent-security funding targets operational control and how QNu Labs’ quantum-security round links capital to deployment capacity. Hackuity is addressing a different layer, but the commercial test is similar: can the funded company turn a technical capability into repeatable customer outcomes?
| Item | Verified detail |
|---|---|
| New round | $19 million |
| Lead investor | Forgepoint Capital International |
| Other participants | Bright Pixel, Bpifrance, Seventure Partners |
| Disclosed total funding | $38 million |
| Public disclosure | September 16, 2026 |
The consequence for vulnerability-management vendors
The market is moving from finding more issues toward proving which issues matter and whether they were resolved. Scanner vendors can add prioritisation features, ticketing platforms can add security workflows and specialist companies such as Hackuity can try to sit across both categories. That overlap will intensify competition for the same security budget.
For Hackuity, the financing buys time and distribution, not a guaranteed category win. The company must show that its layer reduces handoffs and remediation delay rather than simply reformatting alerts. Customers should expect interoperability and measurable closure rates to matter more than the number of feeds a platform can display.
In one sentence: Hackuity’s $19 million round is a bet that the next cybersecurity bottleneck is not vulnerability discovery but the governed, measurable conversion of noisy findings into completed fixes.
How to read the $38 million funding total
Hackuity’s company materials describe the new round as bringing total funding to $38 million. That total is useful for understanding the company’s financing history, but it does not establish revenue, profitability or valuation. None of those figures was disclosed in the announcement, and this report does not infer them from the size of the round.
The investor mix also deserves precise interpretation. Forgepoint Capital International led the new financing, while Bright Pixel, Bpifrance and Seventure Partners participated as existing investors. Continued participation can indicate support from prior backers, but it is not independent validation of product performance. Customer diligence still has to focus on deployment evidence.
The company’s expansion challenge will differ by market. Security teams use different scanner combinations, cloud stacks, ticketing systems and governance rules, so a vulnerability-operations layer cannot rely on one fixed workflow. International growth therefore requires connectors, local implementation capacity, partner channels and controls that can satisfy enterprise procurement.
For Indian security teams, the funding round is relevant even though Hackuity is French. Large Indian enterprises and service providers often operate mixed global tool estates, and the same alert-to-remediation gap appears wherever security and engineering ownership is fragmented. Buyers should compare the platform with capabilities already included in scanner, cloud-security and IT-service-management contracts before adding another vendor.
A disciplined proof of value would start with a bounded asset group and a fixed observation period. The team can record the original backlog, duplicated findings, ownership gaps and median time to verified closure, then compare those measures after deployment. That approach prevents an attractive prioritisation interface from being mistaken for an operational improvement.
What the sources do and do not prove
The company announcement is the primary evidence for the amount, investors, total funding and intended use. Tech.eu and Tech Funding News independently reported the event and match the central financing facts. Their agreement does not independently audit every promotional claim in the company release, which is why this article avoids repeating customer-savings and vulnerability-reduction figures as established outcomes.
That boundary matters in funding coverage. A financing transaction can be verified while the performance case for the funded product remains unproven. Readers should separate those two questions: the round happened; whether Hackuity produces better remediation economics for a specific customer must be tested against that customer’s own data.
Sources: Hackuity / Business Wire; Tech.eu; Tech Funding News.
Frequently asked questions
How much did Hackuity raise?
Hackuity announced a $19 million funding round on September 16, 2026, taking its disclosed total funding to $38 million.
Who led the Hackuity funding round?
Forgepoint Capital International led the round, with Bright Pixel, Bpifrance and Seventure Partners participating.
What does Hackuity sell?
Hackuity sells a vulnerability-operations platform designed to consolidate findings, prioritise risk, coordinate remediation and track closure across existing security tools.
Get the day’s top stories in your inbox
One concise email. No spam, unsubscribe anytime.
