Patrowl

Patrowl is a French SaaS platform combining External Attack Surface Management (EASM) with Pentest as a Service (PTaaS), aimed at continuously discovering everything an organization exposes to the internet and then actively validating which of those exposures are actually exploitable. Rather than treating asset discovery and penetration testing as separate procurement decisions on separate schedules, Patrowl folds continuous exposure discovery and human-augmented offensive testing into one subscription, following OWASP, PTES, and OSSTMM testing standards.

The company was founded by three former security auditors and penetration testers (Florent Montel, Nicolas Mattiocco, and Vladimir Kolla) after a three-month manual audit engagement for an e-commerce client convinced them that continuous, automated exposure monitoring was more valuable than one-off point-in-time assessments. Patrowl is based in Paris and has focused primarily on the French and broader European mid-market, a segment often underserved by larger, more US-centric attack surface management vendors.

Patrowl has picked up regional recognition, including the FIC 2025 (Forum InCyber) Startup Grand Prize, and was named in Gartner’s Market Guide for Preemptive Exposure Management. It remains a smaller, regionally focused player relative to the larger EASM/CAASM vendors that dominate the North American enterprise market, but its combination of EASM with human-delivered pentesting in a single offering is a differentiated packaging choice within the category.