Security Startups
← Directory

Escape

AI pentesting for APIs and web apps that proves exploitability, including IDOR and business logic, not just crawler noise.

Proof of life. Raised $18M to expand agentic pentesting for APIs and business logic, March 2026

Escape inventories the API attack surface and then tries to break it with agentic testing that follows business flows, not only status-code fuzzing. Findings are meant to be reproducible for engineers and auditors, which is the gap between a DAST dump and a pentest. The 2026 round funds that agent loop so multi-tenant IDOR and authz bugs get the same automation as XSS.

Category
API and runtime
Headquarters
Paris, France
Country
France
Founded
2020
Funding stage
Series A
Total funding
$22M+
Website
https://escape.tech

Investors

IRISY CombinatorKima Ventures

Tags

Series AFrance

Proof-of-life verified against this source. Outbound clicks are tokenized for directory analytics.