Loading organizations...
YesWeHack provides a global Bug Bounty and Vulnerability Management Platform, connecting organizations with a crowdsourced community of ethical hackers. It enables structured security testing for digital assets, where researchers report vulnerabilities on a pay-for-results basis. The platform unifies vulnerability disclosure and continuous pentesting through a single interface.
Founded in 2015 by Guillaume Vassault-Houlière, Manuel Dorne, and Romain Lecoeuvre, YesWeHack arose from their ethical hacking expertise. They recognized a market need for scalable, proactive security testing, formalizing the link between organizations needing robust defenses and independent security researchers. This insight fueled their crowdsourced model.
The company serves diverse global clients, from startups to enterprises, focused on strengthening cyber resilience. YesWeHack’s vision empowers organizations to proactively secure digital infrastructure against persistent threats. This is achieved through collaboration with the ethical hacking community, championing rewards for vulnerability discovery to enhance digital trust.
YesWeHack has raised $32.5M across 2 funding rounds.
YesWeHack has raised $32.5M in total across 2 funding rounds.
YesWeHack has raised $32.5M in total across 2 funding rounds.
YesWeHack's investors include Renaud Deraison, Coinbase Ventures, Motier Ventures, Sony Innovation Fund, Ryan Wyatt, Jonathan Denais.
YesWeHack has raised $32.5M across 2 funding rounds. Most recently, it raised $28.0M Series C in June 2024.
| Date | Round | Lead Investors | Other Investors | Status |
|---|---|---|---|---|
| Jun 1, 2024 | $28M Series C | Renaud Deraison | Coinbase Ventures, Motier Ventures, Sony Innovation Fund, Ryan Wyatt | Announced |
| Feb 15, 2019 | $4.5M Venture Round | Jonathan Denais | — | Announced |
YesWeHack is a Paris-based cybersecurity company that operates a global bug bounty and vulnerability management platform, connecting organizations with tens of thousands of vetted ethical hackers to identify and remediate vulnerabilities in websites, mobile apps, connected devices, and digital infrastructure.[1][2][5] It serves technology companies, telecommunications firms, government agencies, and public institutions—including clients like Tencent, Swiss Post, Orange France, and the French Ministry of Armed Forces—with integrated solutions such as crowdsourced vulnerability discovery, vulnerability disclosure policies (VDPs), pentest report management, attack surface management, and ethical hacking training.[2][3][5] The platform's pay-for-results model ensures organizations pay only for actionable reports, addressing the cybersecurity skills shortage through collective intelligence from hackers across 170 countries, while holding certifications like ISO 27001, ISO 27017, SOC II Type 2, and CREST accreditation.[2][5] Founded in 2015, YesWeHack has raised €26 million in a June 2024 Series C round led by Wendel, serving over 500 customers in 40 countries and establishing leadership in Europe and APAC.[3][4]
YesWeHack was founded in 2015 in Paris, France, by ethical hackers Guillaume Vassault-Houlière, Manuel Dorne, and Romain Lecoeuvre, inspired by the phrase "Yes, we can" to harness collective intelligence in cybersecurity.[3][4][5] Vassault-Houlière, the primary visionary, recognized the potential of bug bounty programs amid rising cyber threats and a global shortage of security talent, leading to the creation of a platform that mobilizes ethical hackers worldwide.[3] Early traction came from addressing sophisticated attacks that traditional tools couldn't handle, with pivotal moments including testing France's StopCovid app (later TousAntiCovid) in May 2020 and expanding offices to Rennes and Rouen (France), Lausanne (Switzerland), Munich (Germany), and Singapore.[3][4] By 2024, a €26 million Series C funding round solidified its growth, marking evolution from a French startup to Europe's top bug bounty platform.[3][4]
YesWeHack rides the crowdsourced cybersecurity wave, capitalizing on escalating cyber threats, regulatory pressures (e.g., GDPR), and a chronic skills shortage projected to worsen amid digital transformation.[2][3] Its timing aligns with surging demand for scalable, cost-effective vulnerability management as organizations digitize perimeters—websites, apps, IoT—facing sophisticated attacks that outpace in-house teams.[1][6] Market forces like rising breaches and compliance mandates favor its pay-for-results model over legacy pentesting, positioning it against U.S. giants like Bugcrowd and HackerOne while dominating Europe/APAC through local expertise and offices.[1][3] It influences the ecosystem by democratizing ethical hacking, fostering global researcher communities, and enabling standards-compliant security for governments and enterprises, thus accelerating secure innovation in tech, telecom, and public sectors.[2][4][5]
YesWeHack is poised for accelerated global expansion post-2024 funding, targeting deeper U.S. penetration and emerging markets while enhancing AI-driven triage and attack surface tools to handle rising threats.[3][6] Trends like zero-trust architectures, IoT proliferation, and AI-augmented attacks will amplify demand for its scalable crowdsourcing, potentially doubling its researcher community and client base.[1][2] Its influence may evolve from regional leader to global standard-setter, shaping ethical hacking norms through certifications and public programs—reinforcing its founding promise that collective "Yes, we hack" powers unbreakable security.[3][5]
