What Haicker does

Haicker is a Lausanne, Switzerland-based developer of an AI-powered web application security scanner designed to automate penetration testing and continuous vulnerability detection for software engineering teams. Founded in early 2025 by Philippe Dourassov (CEO, former bug hunter and security auditor) and Manaf Mhamdi Alaoui (CTO, member of the Swiss National Hacking Team), the company built a platform that combines hybrid static and dynamic analysis (SAST/DAST) with AI agents leveraging large language models, retrieval-augmented generation (RAG), and toolcalling to emulate human pentester workflows in isolated environments. The product integrates natively with GitHub, enabling single-click codebase connection with automatic scanning on each code push and real-time delivery of actionable vulnerability findings.

The company positioned its technology against the limitations of traditional scanners (Snyk, Sonar), DAST tools (Nessus), and AI-powered SAST competitors, claiming an 88.4% detection rate on the XBOW Validation Benchmark — above the 70-85% range of AI-powered peers, the ~50% of traditional tools, and even the 85% rate attributed to human pentesters. The platform serves two primary customer segments: developers seeking immediate feedback on code pushes, and security teams needing continuous monitoring to replace periodic, expensive pentest engagements. The business model is subscription-based SaaS, though pricing was not publicly disclosed.

Haicker operated for less than six months before being acquired by Belgian cybersecurity firm Aikido Security NV in September 2025, in a transaction intended to strengthen Aikido's automated penetration testing capabilities and capture share in the $6 billion penetration testing market. Prior to the exit, the company raised approximately $260,000 across two seed rounds in July 2025, led by Project Europe and Founderful Campus.

Name

Haicker

Legal name

Haicker SA

Website

https://haicker.app

Company type

Private

Founded year

2025

Operating status

Acquired

Headcount range

1–10 employees

Short description

Haicker (Haicker SA) is a Lausanne-based AI-powered web application security scanner that automates continuous vulnerability detection using LLM agents, RAG, and hybrid SAST/DAST analysis, targeting developers and security teams via GitHub-integrated SaaS subscriptions before its September 2025 acquisition by Aikido Security NV.

Ownership category

akta.pro rank

Product category

Application Security / Vulnerability Management

NAICS

Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Application Security Testing (SAST/DAST/IAST/SCA) (HDADACAC)

akta.pro secondary industry

Vulnerability Assessment & Scanning (HDADAHAA)

Keywords

• Web application security
• Vulnerability scanning
• AI penetration testing
• Code security analysis
• Continuous security monitoring

Headquarters

HQ city

Lausanne

HQ country

Switzerland

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Infrastructure, Operations, Marketing or Sales

Revenue model

1. SaaS Subscription for AI Pentesting Platform: The company offers a web application security scanner as a subscription service. Pricing model appears to be subscription-based with continuous scanning capabilities. The product is positioned as lower cost than traditional pentesters while providing continuous automated vulnerability detection.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

Haicker provides a continuous, automated AI-powered vulnerability scanning platform for web codebases that combines hybrid static and dynamic analysis (SAST + DAST) with GitHub integration for real-time scanning on code push. The product targets software developers and security teams seeking faster, cheaper, and more accurate alternatives to traditional one-off penetration testing engagements. It delivers developer-friendly actionable reports with remediation guidance through an AI agent architecture using RAG and toolcalling.

Product overview

Haicker is a code security scanner that leverages AI Agents to find vulnerabilities and help developers fix them. The core product is the Haicker AI Pentester — a continuous, automated vulnerability scanner that integrates with GitHub for real-time security assessments. The platform uses a hybrid approach combining static and dynamic analysis (SAST + DAST) powered by AI agents, RAG technology, and tool calling. Key features include GitHub integration for instant feedback on code pushes, continuous monitoring to replace periodic audits, context-aware analysis with 88.4% detection rate on the XBOW Validation Benchmark, and developer-friendly actionable reports. The company was acquired by Aikido Security NV in September 2025.

Differentiator

Problem solved

Functional benefit

Products and services

• Haicker AI Pentester Continuous, automated AI-powered vulnerability scanner for web codebases that combines hybrid SAST/DAST analysis with AI agents, RAG, and tool calling. Delivers actionable reports with remediation guidance at lower cost than traditional pentesters, featuring native GitHub integration for push-to-scan workflows and a reported 88.4% detection rate on the XBOW Validation Benchmark.

Quantifiable outcome

• 88.4% vulnerability detection rate on XBOW Validation Benchmark
• +1 more outcomes

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability5 records

Feature5 records

Partnerships

Two partnerships are on record, tiered core.

• Aikido Security NVcoreStrategic or Co-development Partner · 28 September 2025Haicker was acquired by Aikido Security NV, a Belgian cybersecurity firm, within six months of its founding. The acquisition aims to enhance Aikido's automated penetration testing with AI and expand market share in the $6 billion penetration testing market. Haicker's platform specializing in rapid security assessments is now integrated into Aikido's offerings.
• GitHubcoreTechnology or IntegrationGitHub integration enables single-click connection to user's codebases. When code is pushed, Haicker automatically scans and provides instant feedback. This is a core product integration enabling the automated security scanning workflow.

Scale indicators2 records

Recent moves7 records

Expansion highlights5 records

Broad incumbents

• Aikido Security: Aikido Security is the Belgian cybersecurity company that acquired Haicker. It is an all-in-one application security platform; Haicker's AI pentesting capability is now integrated into Aikido's broader portfolio.
• Veracode: Veracode is an established application security testing platform (SAST, DAST, SCA) sold to enterprise security teams. It competes in the same application security testing category with a broader platform play.
• Checkmarx: Checkmarx is an enterprise AppSec platform offering SAST, SCA, and IaC scanning. It competes with Haicker in application security testing, particularly for security-team buyers in larger organizations.
• GitHub Advanced Security: GitHub Advanced Security bundles Code Scanning (CodeQL), Dependabot, and secret scanning natively into GitHub—directly overlapping Haicker's GitHub-integrated scanning value proposition with massive distribution advantages.

Direct peers

• XBOW: XBOW is an AI-powered autonomous pentesting platform and the creator of the XBOW Validation Benchmark that Haicker cites. It is a head-to-head competitor in AI-driven web application penetration testing.
• Semgrep: Semgrep is a developer-first SAST platform with open-source roots, offering code scanning rules and CI integration. It directly competes with Haicker's static analysis and developer GitHub-native workflow.
• Sonar (SonarSource): Sonar provides code quality and security analysis (SAST) for developers—also explicitly named by Haicker as a competitor. It overlaps directly on static analysis of web codebases with developer-friendly reporting.
• Snyk: Snyk is a developer-security platform offering SAST, SCA, and container scanning—explicitly named by Haicker as a competitor. Both target developers with code-level vulnerability detection, though Snyk has a much broader product footprint.
• Nessus (Tenable): Nessus is a leading vulnerability scanner (DAST/network) explicitly named by Haicker as a competitor. While traditionally a DAST tool, it overlaps with Haicker's dynamic vulnerability detection layer.

Emerging players

• Pentera: Pentera offers automated security validation (BAS) and continuous pentesting. It overlaps with Haicker on the value proposition of replacing manual pentesting with automated, continuous assessments.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights5 records

Customer concentration

• Xx.com/haicker_app
• LinkedInlinkedin.com/company/haicker

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds2 records

Investors3 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Haicker