Freelabz

What Freelabz does

According to the supplied summary, Freelabz is a French offensive cybersecurity company founded in 2023 and based in Saint-Étienne, operating as Freelabz SAS. It offers penetration testing, attack-surface audits, code analysis including SAST and DAST, phishing simulations, DevOps and DevSecOps consulting, cloud migration, and practical cybersecurity training. Its primary market is French TPE/PME, with mid-market and enterprise organizations identified as a secondary segment. The company is described as having 1-10 employees, with Olivier Cervello and Wally Chaibi listed.

Freelabz's principal technology products are Secator, an open-source, GitHub-distributed CLI for pentest automation with YAML-configurable workflows, and Secator Cloud, a SaaS platform for configurable offensive-security scanning, mission management, AI-powered data analysis, report generation, and optional self-hosted deployment. The supplied business model comprises quote-based professional-services engagements, annual proactive subscriptions, and subscription access to Secator Cloud. Its stated go-to-market channels include Discord, open-source contributions, conference appearances, and earned media in Le Figaro and Who's Who Leaders. The supplied material contains no resolvable WX source identifier, so these details are not independently verified in this extraction.

Name

Freelabz

Legal name

Freelabz SAS

Website

https://freelabz.com

Company type

Private

Founded year

2023

Operating status

Operating

Headcount range

1–10 employees

Short description

According to the supplied summary, Freelabz is a French offensive cybersecurity firm serving mainly TPE/PME with penetration testing, code analysis, DevSecOps consulting, cloud migration, training, and Secator CLI and Secator Cloud products.

Ownership category

akta.pro rank

Product category

Offensive Cybersecurity Services

NAICS

Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162), Computer Systems Design and Related Services (54151)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming Services (7371), Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Application Security Testing (SAST/DAST/IAST/SCA) (HDADACAC)

akta.pro secondary industries

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Network Security Services (Firewall/VPN/ZTNA/SASE Integration) (BPAEAEAG)

Keywords

• Offensive cybersecurity services
• Penetration testing services
• Security audit services
• Devops cloud consulting
• Pentest automation tools

Headquarters

HQ city

Saint-Étienne

HQ country

France

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Professional Cybersecurity Services: Revenue from conducting security audits (external attack surface, code SAST/DAST, web/mobile applications), penetration testing, phishing simulations, and annual proactive subscriptions including initial pentest, monthly scans, and remediation monitoring.
2. DevOps and Cloud Consulting: Consulting services for DevOps pipeline setup, CI/CD integration, DevSecOps implementation, cloud preparation, architecture, infrastructure-as-code (Terraform, Ansible), and security-focused accompaniment.
3. Training Services: Practical training programs in cybersecurity, DevOps, programming (Python, Go), and Linux & network administration, adapted for all skill levels from beginner to expert.
4. Secator Cloud SaaS: Subscription-based cloud platform offering configurable offensive security scanning, mission management, AI-powered analysis, and automated reporting. Optional self-hosted deployment.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

Freelabz delivers offensive cybersecurity services including external attack surface audits, code audits (SAST/DAST), web/mobile application audits, penetration testing, phishing simulations, and annual proactive subscriptions, plus DevOps and Cloud migration consulting and training programs. The company also develops and distributes Secator, an open-source CLI pentesting automation tool, and Secator Cloud, a SaaS offensive security platform with AI-assisted analysis and reporting.

Product overview

Freelabz offers a dual-product portfolio centered around offensive security: (1) Secator, an open-source CLI automation tool for pentesters that handles reconnaissance and scanning workflows via YAML configuration, and (2) Secator Cloud, a SaaS platform built on top of Secator that adds mission management, AI-powered data analysis and report generation, and configurable scan capabilities with an optional self-hosted deployment. The product line is complemented by professional services including attack surface audits, code audits (SAST/DAST), web/mobile application pentesting, phishing simulations, annual proactive pentesting subscriptions, DevOps consulting, and Cloud migration support, as well as practical training programs.

Differentiator

Problem solved

Functional benefit

Brands

• Secator: Open-source CLI pentest automation tool for pentesters that simplifies launching tools and automating repetitive reconnaissance and scan workflows via YAML configuration files.
• Secator Cloud

Products and services

• External Attack Surface Audit Identification of exposed assets (subdomains, services, websites), OSINT, and initial vulnerability analysis to provide a complete view of an organization's external exposure. Targeted at businesses seeking to understand their attack surface.
• Code Audit (SAST/DAST) Static, dynamic, and AI-assisted analysis of source code to detect security vulnerabilities early, with optional CI/CD integration. Targeted at development teams and engineering organizations.
• Web and Mobile Application Audit In-depth security evaluation of web applications (API, routes, fuzzing) and mobile applications (traffic interception) in blackbox or whitebox modes. Targeted at organizations with custom-developed applications.
• Penetration Testing (Pentest) Simulation of real-world attacks to evaluate system resilience, identify intrusion paths, and test the effectiveness of security controls. Targeted at organizations seeking offensive security validation.
• Phishing Simulation Phishing campaigns to evaluate employee resistance to social engineering manipulation. Targeted at organizations seeking to assess human-factor security posture.
• Annual Proactive Pentest Subscription Initial pentest (a few days) followed by monthly configurable scans, monitoring, and remediation management. Optional access to Secator Cloud included. Targeted at organizations wanting ongoing offensive security coverage.
• DevOps Consulting Setup and optimization of CI/CD pipelines, integration of security into deployment processes (DevSecOps), and automation and best practices for fast and secure software delivery. Targeted at engineering and DevOps teams.
• Cloud Migration and Architecture Consulting End-to-end cloud readiness, provider selection, architecture, implementation, and infrastructure-as-code (Terraform, Ansible) with security focus at each step. Targeted at organizations undertaking cloud transformation.
• Cybersecurity and DevOps Training Programs Practical training in cybersecurity, DevOps, programming (Python, Go), and Linux & network administration, adapted to all skill levels from beginner to expert. Targeted at individuals and corporate teams seeking skill development.
• Secator (Open-source CLI) Open-source command-line pentesting automation tool that simplifies launching tools and automates repetitive workflows (reconnaissance, scanning) through configurable YAML files. Targeted at individual pentesters and security researchers.
• Secator Cloud (SaaS Platform) Configurable offensive security SaaS platform that enables enterprises to launch custom scans and pentesters to manage missions, analyze data via AI, and generate reports. Self-hosted deployment option available. Targeted at enterprises and pentesters seeking scalable offensive security operations.

Quantifiable outcome

• Accessible offensive cybersecurity for SMEs (TPE/PME)

Named customers5 records

Segments2 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability2 records

Feature2 records

Scale indicators1 record

Expansion highlights4 records

Direct peers

• YesWeHack: French-founded bug bounty and crowdsourced pentest platform. Overlaps with Freelabz on offensive security services and on-demand pentest orchestration for European clients.
• Pentera: Automated security validation platform that lets enterprises run continuous pentest-style assessments. Secator Cloud is a smaller, more configurable counterpart targeting the same automated offensive validation workflow.
• Bishop Fox: US-based offensive security services firm offering penetration testing, red teaming, and attack surface management. Closest pure-play pentest services peer to Freelabz's professional services business.
• Yogosha: French offensive security platform (bug bounty + pentest management) headquartered in Paris. Direct regional competitor with similar PLG-discovered, services-augmented GTM targeting French enterprises.
• Hadrian: Attack surface management and continuous offensive testing platform with AI-driven prioritization. Competes head-to-head with Secator Cloud for tech-forward enterprise buyers seeking automated pentesting.

Broad incumbents

• Synack: On-demand pentest platform combining vetted human testers with automation. Comparable hybrid model of services + platform that Freelabz is building with Secator + Secator Cloud.
• HackerOne: Global leader in bug bounty and penetration testing as a service. Overlaps with Freelabz on pentest orchestration workflows and enterprise offensive security buyers.
• Hack The Box: Cybersecurity upskilling and CTF platform where Freelabz has publicly presented (Secator at 0x33). Comparable community-led GTM and audience overlap with Freelabz's training and Secator community.
• Orange Cyberdefense: Major French/European MSSP offering pentest, DevSecOps, and managed security services. Competes with Freelabz on enterprise RFPs in France and the broader European market.

Emerging players

• Intruder: Continuous vulnerability scanning SaaS that automates reconnaissance and attack surface discovery. Adjacent to Secator's recon and scan pipelines; comparable SMB-friendly pricing and self-serve motion.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• GitHubgithub.com/freelabz/secator
• Xx.com/freelabz
• LinkedInlinkedin.com/company/freelabz

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Freelabz