Company:YesWeHack

From HandWiki
YesWeHack
IndustryCybersecurity
Founded2015; 11 years ago (2015)
HeadquartersParis, France
Websitewww.yeswehack.com

YesWeHack is a global security company headquartered in Paris, France.[1] Founded in 2015, it operates a crowdsourced platform for bug bounty programs[2] through which organisations invite ethical hackers to identify and report security vulnerabilities.[3][4] The company has subsequently expanded its activities into vulnerability management, exposure management and AI-assisted penetration testing.[5]

History

YesWeHack was founded in 2015. Its co-founders are Guillaume Vassault-Houlière, Manuel Dorne and Romain Lecoeuvre.[6]

In 2019, the company raised €4 million from Open CNP, the corporate venture program of CNP Assurances, and Normandie Participations.[7] In 2021, YesWeHack raised €16 million in Series B funding. The second round was led by the Series A investors as well as Banque des Territoires and Eiffel Investment Group.[8]

In June 2024, it raised €26 million ($28 million) in a Series C funding round, led by Wendel, with participation from Adelie, Seventure Partners, Bpifrance, Open CNP and Eiffel Investment Group.[9] The round brought the company's total funding to €46 million ($52 million).

In September 2025, YesWeHack made its first acquisition, purchasing French cybersecurity auditing company Sekost.[10]

Later that month, YesWeHack became a CVE Numbering Authority (CNA), allowing it to assign CVE identifiers and publish CVE records for vulnerabilities within its defined scope. It became the eight CNA based in France.[11]

In October 2025, the company was selected as the first-ranked provider under a European Commission framework agreement for bug bounty services. The four-year framework contract has a maximum potential value of approximately €7,6 million.[12][13]

In June 2026, YesWeHack launched Agentic Pentest, an on-demand penetration-testing service using autonomous artificial intelligence agents. Dassault Systèmes and Sanofi were among the first companies reported to have deployed the service.[5][14]

Operations

YesWeHack initially focused on crowdsourced security testing through bug bounty programmes. It later expanded into a broader offensive security and exposure management platform, incorporating vulnerability management, exposure management and AI-based penetration testing.[5]

Following the acquisition of Sekost in 2025, YesWeHack employed approximately 150 people across seven countries. The company said at the time that it served nearly 1,000 customers in around 50 countries and generated approximately half of its revenue outside France.[10]

Among the organisations mentioned by the press as customers or users of YesWeHack's services are Louis Vuitton[15], Decathlon[16],Doctolib[17], Ferrero[18], Ooredoo[19], TeamViewer[20], Swiss Post[21], and the Quebec Ministry of Cybersecurity and Digital Affairs[22].

By 2026, the platform's community had grown to more than 150,000 registered ethical hackers.[23]

References

  1. ↑ "Covid: White hat bounty hackers become millionaires" (in en-GB). BBC News. 2021-03-10. https://www.bbc.com/news/technology-56350362. 
  2. ↑ "Top 5 Bug Bounty Platforms to Watch in 2021" (in en). https://thehackernews.com/2021/02/top-5-bug-bounty-programs-to-watch-in.html. 
  3. ↑ "When YesWeHack's "ethical hackers" profit from the revival of telework". Web24. 2020-03-27. https://www.web24.news/u/2020/03/when-yeswehacks-ethical-hackers-profit-from-the-revival-of-telework.html. 
  4. ↑ JDD, Le (17 February 2021). "YesWeHack, l'arme anti-pirates informatiques" (in fr). https://www.lejdd.fr/Economie/yeswehack-larme-anti-pirates-informatiques-4025192. 
  5. ↑ 5.0 5.1 5.2 "YesWeHack automates penetration testing with AI-powered agents" (in en-US). 2026-06-25. https://www.helpnetsecurity.com/2026/06/25/yeswehack-automates-penetration-testing-with-ai-powered-agents/. 
  6. ↑ and Helen O'Reilly-Durand (2024-06-25). "The Big Deals 💣 : Mistral AI, YesWeHack, C12, Omi & More!" (in en). https://www.frenchtechjournal.com/the-big-deals-mistal-ai-yeswehack-c12-omi/. 
  7. ↑ Loritz, Mary (2019-02-15). "French startup YesWeHack raises €4 million with plans to disrupt Europe's cybersecurity market" (in en-US). https://www.eu-startups.com/2019/02/parisian-startup-yeswehack-raises-e4-million-with-plans-to-disrupt-europes-cybersecurity-market/. 
  8. ↑ Guarin, Anto (2021-07-22). "Paris-based cybersecurity startup YesWeHack lands €16 million to accelerate its international expansion" (in en-US). https://www.eu-startups.com/2021/07/paris-based-cybersecurity-startup-yeswehack-lands-e16-million-to-accelerate-its-international-expansion/. 
  9. ↑ Arghire, Ionut (2024-06-13). "French Bug Bounty Platform YesWeHack Raises $28 Million" (in en-US). https://www.securityweek.com/french-bug-bounty-platform-yeswehack-raises-28-million/. 
  10. ↑ 10.0 10.1 Armand, Johann (2025-09-10). "YesWeHack s’ouvre vers le channel avec le rachat de Sekost" (in fr-FR). https://www.channelnews.fr/yeswehack-souvre-vers-le-channel-avec-le-rachat-de-sekost-150820. 
  11. ↑ "YesWeHack Added as CVE Numbering Authority (CNA)". https://www.cve.org/Media/News/item/news/2025/09/23/YesWeHack-Added-as-CNA. 
  12. ↑ "On n'arrête plus YesWeHack, qui signe le contrat de sa vie avec la Commission européenne" (in fr). 2025-10-02. https://www.clubic.com/actualite-581596-on-n-arrete-plus-yeswehack-qui-signe-le-contrat-de-sa-vie-avec-la-commission-europeenne.html. 
  13. ↑ "YesWeHack Won the European Commission’s Latest Bug Bounty Tender". 2025-10-02. https://finance.yahoo.com/news/yeswehack-won-european-commission-latest-065400478.html. 
  14. ↑ Meliss@11 (2026-06-26). "YesWeHack révèle son Pentest Agentique" (in fr). https://incyber.org/article/yeswehack-revele-son-pentest-agentique/. 
  15. ↑ "Avec YesWeHack, Louis Vuitton cherche des failles et sensibilise - Le Monde Informatique" (in fr). 2024-04-12. https://www.lemondeinformatique.fr/actualites/lire-avec-yeswehack-louis-vuitton-cherche-des-failles-et-sensibilise-93485.html. 
  16. ↑ "Decathlon éprouve sa sécurité par un bug bounty" (in fr). 2022-06-24. https://www.cio-online.com/actualites/lire-decathlon-eprouve-sa-securite-par-un-bug-bounty-14260.html. 
  17. ↑ "FIC 2021 : Doctolib et Yes We Hack à la chasse aux bugs". 2021-09-09. https://www.linformaticien.com/magazine/cybersecurite/58702-fic-2021-doctolib-et-yes-we-hack-a-la-chasse-aux-bugs.html. 
  18. ↑ Marco, Andrea De (2024-10-07). "YesWeHack e Ferrero inaugurano il primo evento di live hacking in Italia" (in it-IT). https://www.01net.it/yeswehack-e-ferrero-inaugurano-il-primo-evento-di-live-hacking-in-italia/. 
  19. ↑ Doha (2023-02-26). "Ooredoo launches new cybersecurity programme" (in en). https://www.gulf-times.com/article/656299/qatar/ooredoo-launches-new-cybersecurity-programme. 
  20. ↑ "Bug Bounty Program" (in fr). https://www.teamviewer.com/fr/resources/trust-center/bug-bounty-program/. 
  21. ↑ swissinfo.ch, S. W. I. (2021-04-15). "La Poste invite les hackers à rechercher ses failles de sécurité" (in fr). https://www.swissinfo.ch/fre/la-poste-invite-les-hackers-%c3%a0-rechercher-ses-failles-de-s%c3%a9curit%c3%a9/46535870. 
  22. ↑ ICI.Radio-Canada.ca, Zone Politique- (2023-10-12). "Québec veut tester tous ses sites web avec des pirates informatiques" (in fr-ca). Radio-Canada.ca. https://ici.radio-canada.ca/nouvelle/2017072/informatique-cybersecurite-site-web-pirate. 
  23. ↑ "Les géants de l'IA estiment que les cyberdéfenses actuelles ne tiendront bientôt plus" (in fr). 2026-08-28. https://www.clubic.com/actualite-627115-les-geants-de-l-ia-estiment-que-les-cyberdefenses-actuelles-ne-tiendront-bientot-plus.html. 



Retrieved from "https://handwiki.org/wiki/index.php?title=Company:YesWeHack&oldid=4643157"