YesWeHack

European bug bounty and vulnerability disclosure platform

Paris, FranceFounded 201550-200 peoplefr, enyeswehack.com

L2Cross-referenced, highest level reached

1 cross-referenced

Verified against independent sources

securityweek.com2026-07-07

No customer ratings yet. How L3 ratings work →

Request verified quotes Visit website ↗

Routing your brief is free, providers fund the channel. Capped at three recipients.

YesWeHack is a L2-verified AI-implementation provider based in Paris, France, delivering appsec, vulnerability-mgmt, pentest. Ranked on proof, 1 verified records on the Trustgent index.

What they build

YesWeHack is a Paris-headquartered offensive security company founded in 2015 by Guillaume Vassault-Houlière, Manuel Dorne, and Romain Lecoeuvre. It operates a crowdsourced bug bounty platform with a global researcher community plus vulnerability disclosure programmes and pentest management services. Clients span government, banking, and technology sectors.

Quick facts

HQ: Paris, France
Founded: 2015
Team: 50-200
Languages: fr, en
Stack: bug-bountyVDPpentest-management

Capabilities

Application security
Vulnerability management
Penetration testing

Industries served

Financial services
Retail & e-commerce
SaaS & technology
Government & public sector

Regulatory readiness

Cross-referenced against public registries where a public source exists (L2+). The check mark marks an attribute we have a source for, see the proof page.

About YesWeHack

What does YesWeHack build?

YesWeHack is a L2-verified AI-implementation provider on Trustgent, delivering Application security, Vulnerability management, Penetration testing.

Where is YesWeHack based?

YesWeHack is headquartered in Paris, France.

How is YesWeHack verified on Trustgent?

YesWeHack has an EARNED verification level of L2 on Trustgent, with 1 contributing verified records (most recent verification: 2026-07-07). Verification is independent of any subscription, plan tier is never a ranking input.

How is YesWeHack ranked?

Rank is a pure function of three EARNED signals: verification level (dominant), record count, and recency. No plan, fee, spend, or paid placement is ever an input. See https://trustgent.com/how-we-rank.