French cybersecurity startup Lupin & Holmes, founded by 23-year-old ethical hacker Roni Carta, has secured a significant $5.9 million pre-seed funding round. Co-led by 20VC and Seedcamp, the investment signals strong confidence in the company's novel approach to enterprise security. This capital will fuel the development of its platform designed to proactively identify and neutralize complex cyber threats.
A Founder Forged in Ethical Hacking
Roni Carta built a formidable reputation long before founding his company, inspired by the fictional master thief Arsène Lupin. By age 23, he earned nearly $800,000 as a "bug bounty hunter," legally hacking corporations like Google and Amazon. His skill was recognized when he was named Most Valuable Hacker at two of Google's prestigious Live Hacking Events.
This practical experience provided both the capital and the core insight for his venture, with earnings reinvested into research and development. His time in a security testing role at French e-commerce firm ManoMano further refined his understanding of corporate needs. This background gives his company a unique, attacker-centric perspective on defense.
A Proactive Approach to Enterprise Security
The central premise of Lupin & Holmes is that modern cyberattacks often bypass traditional defenses by targeting upstream software dependencies. Carta observed that malicious actors were infiltrating the foundational layers of a company’s code, not just the front door. This insight forms the basis of the company's security philosophy, focusing on prevention over reaction.
To address this vulnerability, the company developed Depi, an upstream security platform that proactively maps potential attack paths. This technology provides enterprises with a clear view of their security posture, allowing them to remediate weaknesses before exploitation. The platform is designed to give security teams the ability to anticipate and thwart attacks before they materialize.
Despite its early stage, Lupin & Holmes has already demonstrated significant market traction by attracting several Fortune 500 clients. Founder Roni Carta confirmed that the French security platform Ledger is among its early adopters. This early success was a key factor in securing such a substantial pre-seed investment, validating the platform's market demand.
Strong Investor Confidence and Future Ambitions
The $5.9 million funding round saw participation from a notable group of investors, reflecting belief in the startup's potential. Beyond leads 20VC and Seedcamp, the round included Kima Ventures, Purple Ventures, and founders of Hugging Face and Wiz. This backing provides a strong foundation for the company's growth and market entry.
Carta attributes the large pre-seed round to the company's proven track record and established client base. He emphasized that the team's deep roots in hacker culture provide a distinct advantage in proactively preventing sophisticated threats. This perspective makes the company a compelling investment compared to other early-stage ventures.
The new capital will be strategically deployed to accelerate the company's mission and expand its operational capacity. Key priorities include investing in research and product development to enhance the Depi platform. The company also plans to expand its team by hiring approximately 10 new members to support its ambitious growth plans.
The successful funding of Lupin & Holmes marks a significant milestone for the French cybersecurity startup and its visionary founder. With an approach grounded in real-world ethical hacking, the company is well-positioned to address critical vulnerabilities in enterprise security. This investment will enable the team to scale its innovative platform and become a key player in preventing cybercrime.

