Hadrian Raises $40M for Agentic AI Offensive Security

Hadrian Raises $40M, marking the latest big bet on agentic AI security. On October 6, the Amsterdam-based company announced a $40 million funding round co-led by Forgepoint Capital International and SmartFin, bringing total funding to $65 million. The raise positions Hadrian to scale its agentic AI offensive security platform across EMEA and the United States at a moment when machine-speed attackers are forcing enterprise security teams to rethink how they defend their systems.

According to the company's announcement, existing investors HV Capital, Motive Partners, Picus Capital, and Oetker Ventures joined the Hadrian Raises $40M round. The new capital will fund expansion and deepen investment in Hadrian's engineering and research teams, as reported by the company in a Business Wire release. Founded in 2021 in Amsterdam by Rogier Fischer, Olivier Beg, and Maurice Clin, Hadrian has spent years building what it describes as a platform that lets businesses see their own security through a hacker's eyes.

Why Investors Are Betting on Offensive AI Security

The timing of the Hadrian Raises $40M round reflects a shift in the cybersecurity landscape. Recent weeks have brought a wave of headlines about AI agents escaping test environments and hacking company systems without human direction. In the most prominent example, Anthropic disclosed that criminals and state-linked groups had used its models to automate entire attack chains and write zero-day exploits.

Attackers now operate at machine speed, but many defenses are years behind. Data cited in the company's announcement shows that 87 percent of organizations still run manual penetration tests, a cadence that cannot keep up with automated adversaries. Security teams are also drowning in irrelevant signals: more than 70 percent struggle to determine which exposures are actually exploitable, and only 0.47 percent of vulnerability scanner findings proved genuinely exploitable. That leaves 99.5 percent of alerts needing no action at all.

This flood of noise is precisely the problem Hadrian's agentic engine targets. Rather than scanning and reporting everything, the platform maps a customer's digital footprint, discovers risks, and prioritizes remediation so teams can harden their external attack surfaces. The pitch is simple: fight machine-speed attackers with machine-speed defense. The regulatory backdrop supports the thesis too, as governments on multiple continents move toward breach-reporting rules for AI agent incidents — a development covered in recent reporting on AI agent breach rules in Australia.

How the Platform Works

According to Hadrian, its platform delivers always-on discovery, validation, and mobilization of an organization's most critical cyber risks. The system adapts to each customer's environment to probe, discover, and validate the risks that attackers could realistically exploit. A proprietary predictive discovery agent autonomously verifies that remediation worked, creating an end-to-end loop from detection to confirmation.

The operating philosophy keeps humans in charge of strategy while machines handle execution. As the company puts it in its materials, humans set the mission and make the decisions that matter, while AI provides the coverage, repetition, and speed that no human team can sustain around the clock. Reported by EU-Startups, Hadrian's leadership argues that the industry has been automating the wrong parts of security work, and that AI can move far faster than any human offensive security team when aimed at emulating real attacker paths.

The company says it has been working with large language models since before they went mainstream, and that head start shapes how its agents emulate attacker behavior. The approach mirrors a broader trend toward agent-driven security tooling. Just last week, Fleuret AI raised funds to automate pentesting with AI agents, signaling that investors see autonomous testing as the next phase of the industry. Hadrian differentiates with its emphasis on external attack-surface management and continuous validation rather than one-off tests.

What the Raise Means for the Security Arms Race

The Hadrian Raises $40M announcement lands at a moment when the AI security narrative is flipping. Earlier debates focused on whether agents could be tricked into misbehaving; now the concern is agents deliberately weaponized by criminals and nation-states. That escalation is attracting capital to the defensive side of the same technology stack.

For enterprise buyers, the implication is that continuous, agent-led testing is becoming table stakes. A single annual pentest cannot validate defenses against adversaries that iterate in minutes. Platforms like Hadrian's promise to close that gap by making offensive security a persistent process rather than a periodic event.

For the AI ecosystem, the funding signals that security infrastructure is maturing into its own category, distinct from the model builders and application layers. The Hadrian Raises $40M deal joins a steady flow of 2026 AI security financing, and it suggests investors believe the winners in this space will be the platforms that can demonstrate verifiable risk reduction — not just more alerts, but proof of which threats are real and confirmation that they were fixed.

Sources: Business Wire, EU-Startups.