A fleet of security agents that test, triage, and fix issues against a live production graph

Tolmo was founded by Pierre Betouin, JB Aviat, Vlad de Turckheim, and Arnaud Breton, the team behind Sqreen, and came out of stealth in mid-2026 with a $22M round led by Accel with Y Combinator participating. The argument behind the product is a timing one: the company points to CISA data showing disclosed vulnerabilities being weaponized within roughly a day and a half, against enterprise response cycles measured in weeks. Closing that gap, in Tolmo's framing, is not a matter of more findings but of findings that already carry enough production context to be acted on without a human first reconstructing it.

The foundation is a production graph built by ingesting cloud providers, containers, databases, code repositories, CI/CD pipelines, identity systems, observability platforms, and existing security vendors. Agents then work across that graph rather than against isolated scan targets. The pentesting agent runs adversarial tests over code, pipelines, infrastructure, and running services to find paths that are genuinely exploitable. The discovery agent keeps the asset and dependency map current. The remediation agent produces verified fixes with a blast-radius assessment showing what else the change touches. The company reported more than 40 design partners and its first pentesting agents in production at launch.