Hadrian Is Turning Hacker Judgment Into Infrastructure

Hadrian is an Amsterdam cybersecurity company using agentic AI to map external attack surfaces, test real attack paths, and help enterprise security teams decide which exposures deserve action first. The company was founded in 2021 by Rogier Fischer, Olivier Beg, and Maurice Clin, three builders whose starting point was not another dashboard. It was the hacker's point of view.

Rogier Fischer is Hadrian's CEO, Olivier Beg is Chief Hacking Officer, and Maurice Clin is Chief Business Development Officer. Their company sits in a market where vulnerability data is abundant and certainty is expensive. Security teams do not need another machine shouting that something might be wrong. They need evidence that an attacker can turn a weakness into a path.

That is why Hadrian matters now. As attackers automate reconnaissance and exploitation, the interval between exposure and abuse keeps shrinking. Hadrian is trying to make continuous offensive testing part of normal security operations, not an annual ceremony that produces a thick report after the environment has already changed.

About Hadrian

Fischer and Beg met in an online forum in 2009 when they were 13. They later worked as white-hat hackers for Dutch banks and global technology companies. In 2021, they founded Hadrian in Amsterdam with Clin to put attacker-style automation on the defender's side.

The founding story shapes the product. Hadrian's agents are designed to map what a company exposes online, probe it like an attacker, and validate which findings can actually be exploited. The company calls its mission simple: make every company harder to hack. The implementation is less simple, because enterprise environments change constantly and attackers do not wait for the next scheduled test.

Hadrian now reports main bases in Amsterdam, London, and New York. Its leadership team also includes Prash Somaiya as CTO, Peter Hix as COO, and Gil Fromovitch as CRO. The company says more than 300 enterprises use the platform worldwide.

Atlas Maps the Surface, Nova Tests the Path

Atlas continuously discovers internet-facing assets and tests external exposures. The point is not merely to inventory domains, subdomains, IP addresses, cloud resources, and forgotten systems. Atlas attempts to establish which findings are reachable and exploitable, then provides evidence that a security team can reproduce and remediate.

Nova extends that model into deeper, on-demand agentic penetration testing. Customers define a scope, then Nova explores attack paths, retains context about systems and relationships, and produces transparent findings with human review in the validation loop.

The connection between Atlas and Nova is the strategic center of Hadrian's product. Continuous discovery can feed targeted testing without starting from zero. A new asset, credential leak, DNS mistake, or critical vulnerability becomes part of a shared operating picture instead of another disconnected alert. In a security market famous for tool sprawl, continuity is not a cosmetic feature. It is the difference between knowing that a problem exists and understanding what an attacker can do with it.

Why Exploitability Has Become the Scarce Signal

Modern security programs already collect mountains of findings. The hard part is deciding which one creates a credible path to a material system. Traditional scanners often prioritize by severity scores and known vulnerability data. Those signals matter, but they do not fully describe the attacker's route through a specific environment.

Hadrian's thesis is that adversarial validation should happen continuously. The platform is built for CISOs, security operations, vulnerability management, offensive security, and compliance teams across financial services, healthcare, energy, manufacturing, travel, retail, maritime, government, and technology.

The company reports 10x visibility into critical exposures, 80% faster remediation, more than 10 hours saved weekly, and 5x ROI compared with manual penetration testing. Those are Hadrian's figures, not independently audited results. The customer list gives the claims commercial context: Hadrian names McKesson, NBCUniversal, Francisco Partners, TotalEnergies, Amadeus, Leroy Merlin, and Damen Shipyards among platform users.

Capital Is Following Continuous Offensive Security

On October 6, 2026, Hadrian announced a $40M financing co-led by Forgepoint Capital International and SmartFin. Existing investors HV Capital, Motive Partners, Picus Capital, and Oetker Ventures also participated. Hadrian says the round takes total funding to $65M.

The formal series, valuation, and revenue were not disclosed. The use of proceeds is clearer: expand across EMEA and the United States, then deepen engineering and research. That allocation matches the market problem. Autonomous offensive security needs more than a capable model. It needs secure execution, reliable evaluation, product controls, integrations, and enough offensive-security expertise to know when an agent has found evidence rather than theater.

Hadrian competes in a converging field that includes Horizon3.ai, XBOW, Pentera, FireCompass, and other platforms spanning attack-surface management, autonomous penetration testing, and breach-and-attack simulation. These companies do not all test the same surfaces or use the same architecture. Hadrian's wager is that continuous external mapping plus deeper agentic validation in one context will be the durable operating model.

Leadership, Culture, and the Hiring Signal

Hadrian's careers page describes a culture organized around customer obsession, ownership, teamwork, speed, and growth. The company says its team represents more than 25 nationalities and works across Amsterdam, London, New York, and distributed locations in Europe, Asia, and the United States.

Current openings span commercial and technical work, including sales roles for DACH and BENELUX plus AI, backend, and infrastructure engineering positions in Amsterdam. That hiring mix is more informative than a generic promise about growth. It shows Hadrian expanding both the machinery that performs the work and the market organization that carries it into large enterprises.

The next test is execution. Agentic offensive security must prove it can operate safely, explain its findings, respect scope, and improve outcomes across messy production environments. Marketing can declare autonomy in a sentence. Security teams have to live with the consequences.

Hadrian is building for that harder standard. Its opportunity is not to replace every human penetration tester or flood another console with machine-generated findings. It is to capture more of the hacker's judgment loop, run it continuously, and give defenders proof while there is still time to act.