BZHunt

What BZHunt does

BZHunt is a French boutique offensive cybersecurity firm headquartered in Brest, Brittany, with a distributed team across Rennes, Bordeaux, and Limoges. Founded in 2021 by Brice Augras (aka ZaX) and operating today with 15 collaborators under CEO Jean-Sylvain Chavanne (who succeeded Augras following his passing in 2026), the firm delivers a full offensive security portfolio: application pentesting (web, API, mobile), AI/LLM pentesting, infrastructure and Active Directory audits, Red Team adversary simulation, governance and risk advisory aligned to ISO 27001, NIS2, and DORA, incident response with forensic analysis, and hands-on training.

The firm's technical differentiation rests on two proprietary assets — the NEO hardware probe platform (a hardened encrypted audit appliance with Intel i9, LUKS AES-XTS 4096-bit encryption, QEMU/KVM and Docker isolation, and tamper-evident shipping via LivingPackets) and shuck.sh, an open-source NetNTLMv1 cryptanalysis tool cited by Mandiant/Google Cloud Security research. BZHunt also maintains an active vulnerability research track record with 40+ CVEs published (including the March 2026 GLPI 0-day chain, CVE-2026-26026/26027/26263) and an AI Transparency framework disclosed across research artifacts.

Commercially, BZHunt generates revenue through quote-based professional services engagements on multi-year contracts, with first consultations free and response within 24 business hours. Distribution combines direct enterprise field sales (logos include Amazon, AT&T, Doctolib, La Caisse des Dépôts, CHU Brest, Les Mousquetaires, Lazada, BIL, Bilendi) and the EDIH Bretagne co-funding channel (up to 50% subsidy) for qualifying Breton SMEs, ETIs, and public entities. The firm is a member of Pôle d'Excellence Cyber and France CyberMaritime, and 100% of its hackers are ranked on worldwide bug bounty leaderboards with 75% holding government security clearance.

Name

BZHunt

Legal name

BZHunt

Website

https://bzhunt.fr

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

BZHunt is a French boutique offensive cybersecurity firm in Brest delivering pentest, Red Team, AI/LLM security testing, security governance, and incident response to enterprises and Breton public-sector clients via direct sales and the EDIH Bretagne co-funding channel.

Ownership category

akta.pro rank

Product category

Offensive Cybersecurity Services

NAICS

Scientific Research and Development Services (5417)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Third-Party/Vendor Risk Management (TPRM) & Due Diligence (BPAKADAH)

Keywords

• Penetration testing services
• Red team operations
• Offensive security consulting
• Vulnerability research
• Cybersecurity audits

Headquarters

HQ city

Guipavas

HQ country

France

HQ region

Europe

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Professional Security Services: BZHunt generates revenue through professional security testing and advisory services including pentests (web, API, mobile, infrastructure), Red Team simulations, security audits (Active Directory, cloud, network), governance and compliance consulting (ISO 27001, NIS2, DORA), incident response, and training. Pricing is quote-based with no public rate card; services are scoped per engagement with deliverables including technical reports with CVSS scoring and remediation guidance.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels8 records

Core offering

BZHunt is a boutique offensive cybersecurity firm delivering penetration testing, Red Team adversary simulation, infrastructure audits, AI/LLM security testing, governance and compliance consulting, incident response, and training services. Engagements are scoped per project and delivered by a team of 12–15 offensive security experts based in Brest, with proprietary tooling (NEO hardware platform, shuck.sh) supporting fieldwork. Customers include enterprises in banking, healthcare, technology, retail, and government, plus Breton SMEs and public entities served via EDIH Bretagne co-funding.

Product overview

BZHunt is an offensive cybersecurity services firm offering a comprehensive portfolio of professional services and proprietary tools. Core offerings span six service lines: Pentest Applicatif (web, API, mobile testing), Pentest d'IA (LLM/AI system security), Audit d'Infrastructure (network, AD, cloud), Gouvernance & Risques (compliance, risk management), Red Team (full adversary simulation), and Réponse à Incident (forensics and containment). These services are complemented by two proprietary tools: the NEO hardware platform — a modular audit appliance with hardened OS, encrypted storage, and remote control capabilities — and shuck.sh — an open-source NetNTLMv1 cryptanalysis tool developed in-house and cited in Mandiant's 2026 research. All services are delivered by 12 offensive security experts based in Brest, France.

Differentiator

Problem solved

Functional benefit

Products and services

• Pentest Applicatif Application penetration testing covering web applications, REST/GraphQL APIs, mobile apps (iOS/Android), and software, conducted according to OWASP and PTES standards and targeting OWASP Top 10 vulnerabilities and business logic flaws. For organizations needing realistic attacker-perspective review of application surfaces.
• Pentest d'IA AI and LLM security testing covering prompt injection, data extraction, guardrail bypass, adversarial attacks, and RAG pipeline attacks. Targets chatbots, autonomous agents, LLM APIs, and AI model integrations according to the OWASP LLM Top 10 and MITRE ATLAS frameworks. For organizations deploying AI/LLM systems.
• Audit d'Infrastructure Infrastructure security audit covering network architecture, Active Directory (ACL, Kerberos delegations, BloodHound analysis), cloud environments (AWS, Azure, GCP), and system hardening (Linux, Windows CIS benchmarks). Conducted using the NEO hardware probe platform. For organizations needing deep review of their critical infrastructure.
• Gouvernance & Risques Security governance and risk management services including cybersecurity maturity audits (ISO 27001, NIS2, DORA), risk analysis (ISO 27005 / EBIOS RM), and PSSI documentation. Aligns organizations with regulatory frameworks and long-term security strategy. For organizations seeking compliance and risk-driven security programs.
• Red Team Adversary simulation services replicating real-world APT behavior including physical intrusion, phishing, 0-day exploitation, lateral movement, and data exfiltration. Tests organizational defenses in full conditions using TIBER-EU and MITRE ATT&CK frameworks over 2–6 week engagements. For enterprises seeking realistic threat simulation.
• Formation Security awareness and technical training for IT teams, management, and end users. Covers phishing/social engineering, offensive/defensive techniques, cyber crisis exercises (tabletop/simulation), and hands-on workshops using the NEO platform post-pentest LAN. For organizations building internal security capability.
• Réponse à Incident Incident response services for active or suspected compromises. Includes triage, forensic analysis (timeline, IOCs, initial vector), threat containment/eradication, and post-incident investigation reporting with remediation recommendations. For organizations responding to active security incidents.
• NEO — Plateforme d'Intervention Modular hardware appliance platform for on-site audit missions, incident response, and training. Features an Intel i9 processor, 64GB RAM, 1TB NVMe storage, hardened Debian OS with LUKS AES-XTS-PLAIN64 4096-bit full-disk encryption, QEMU/KVM virtualization, Docker containerization, automated plug-and-play deployment, remote SSH control through a bastion with full audit logging, and secure logistics via LivingPackets' The Box with real-time geolocation and tamper detection.

Quantifiable outcome

• 400+ missions completed across diverse industries and infrastructure types
• +4 more outcomes

Named customers18 records

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability4 records

Feature4 records

Partnerships

One partnership is on record.

• EDIH Bretagne (European Digital Innovation Hub)coreGTM or Marketing PartnerBZHunt is referenced in the Cyber Expert Catalogue (CYEC) managed by EDIH Bretagne, enabling co-funding of up to 50% for eligible Breton organizations (SMEs, ETIs, public entities). BZHunt serves as a single point of contact managing EDIH qualification, project scoping, co-funding applications, and service delivery.

Scale indicators7 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• YesWeHack: France-based bug bounty and vulnerability disclosure platform. Comparable through the offensive security researcher community, French ecosystem presence, and shared talent pool with BZHunt's team members.
• Bishop Fox: US boutique offensive security firm specializing in pentest, Red Team, and vulnerability research. Comparable boutique scale, deep technical reputation, and CVE-level research output.
• Intrinsec: French boutique cybersecurity firm offering pentest, Red Team, and offensive security services. Most direct head-to-head peer given similar French boutique scale, service portfolio, and target enterprise/government clients.
• Yogosha: French bug bounty platform serving European enterprises. Direct peer in the French offensive security ecosystem, sharing both researcher talent and enterprise clients with BZHunt.
• Synack: US-headquartered crowdsourced pentest platform combining vetted researchers with managed offensive testing. Comparable business model (curated hacker community delivering enterprise pentest) and shared buyer persona.

Broad incumbents

• HackerOne: Global bug bounty and vulnerability disclosure platform. Connected to BZHunt through shared researcher community (BZHunt hackers maintain HackerOne profiles) and adjacent buyer persona of CISOs seeking offensive security talent.
• Orange Cyberdefense: Largest French cybersecurity services provider, offering managed security, pentest, and consulting. Operates in the same enterprise market as BZHunt but at vastly greater scale and breadth.
• Wavestone: French consulting firm with a significant cybersecurity practice covering governance, risk, compliance, and offensive testing. Overlaps with BZHunt in ISO 27001/NIS2/DORA governance engagements.
• Devoteam: European IT consultancy with a dedicated cybersecurity practice covering pentest and governance. Comparable on advisory/governance services; significantly broader portfolio and scale.

Emerging players

• PentesterLab: Offensive security training and education platform with subscriptions and badges. Comparable in offensive security niche and French market overlap; intersects with BZHunt on the training/formation service line.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xtwitter.com/bzhunt1
• LinkedInlinkedin.com/company/bzhunt

Compliance9 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles13 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about BZHunt