/ About

We are rethinking cybersecurity through offensive AI

Powered by ASC-IT, Darkmoon designs an offensive AI capable of replacing manual slopes, identifying critical flaws in real-time, and generating patches even before an attack occurs.

Autonomous
AI-Orchestrated
Adaptative
Mission-ready
cybersecurity
detection
offensive
vulnerability
Protection
MCP
Expertise
intrusion
cybersecurity
detection
vulnerability
faille
intrusion
Efficiency
Innovation
Accessibility
Integration
Transparency
Resilience
Empowerment
Support
Efficiency
Innovation
Accessibility
Integration
Transparency
Resilience
Empowerment
/ our mission

We want to bring companies out of their cybersecurity coma.

Darkmoon was created to address a simple but factual issue: attacks become faster, more stealthy, more frequent – so why are cybersecurity audits always slow, expensive and manual ?

Our mission is to make cybersecurity accessible and participate in a digital world more safe.

Image de 4 cercles dégradé qui s'entre mêlent avec du grain par dessus
/ team

Our Team

Photographie portrait de Mehdi Boutayeb
Chief Technology Officer (CTO)

Creator of Darkmoon, an innovative automated slopesting solution recognized by the Ministry of Higher Education and partner IBM.

Photographie portrait de Aurélien Strich
CEO

The founder, whose specialty is the optimization of processes, business and techniques, and the design of software architectures. He finds solutions to all problems, and will make any questions clearer!

Photographie portrait de Téva Légarès
System and Networks Administrator

Systems administrator, networks and cybersecurity training, he likes to take on technical challenges and is closely interested in the impact of new technologies.

Photographie portrait de Vincent Mahaux
Sales Director & Pentester

He's not your typical commercial director. By day, he drives business strategy and partner growth. By night, he crafts payloads and operates C2 infrastructures. This rare duality — business acumen meets offensive security obsession — is exactly what shaped DarkMoon into a platform that speaks both the language of CISOs and the language of shells.

Photographie portrait de Florian Cardinal
Fullstack Engineer, DevSecOps

Passionate about new technologies, Florian works and develops end-to-end web applications. Micro services, API, Typescript and affiliates, it will develop your adapted solution, with a complete security audit to validate delivery.

<
>
/ our history

From the field to AI: the story of a breakup

Darkmoon was born from the meeting between two worlds: that of experts in offensive cybersecurity and that of artificial intelligence engineers. With several years of operational experience in penetration testing (pentest) in critical environments – especially for large European groups and technological startups – we have observed the structural limits of traditional approaches: too long delays, human dependence, high costs, incomplete coverage.

Faced with an increasingly hostile digital environment, we had to rethink the standards. So we designed Darkmoon: an automated slopest solution, capable of reproducing realistic, contextualized and multi-vector attacks, with the speed, precision and scalability of AI.

Our vision? Offer all organizations, in France and abroad, simple, fast and continuous access to offensive cybersecurity, without compromising on quality, expertise or compliance.

Anticipation

Thanks to Darkmoon you don't react to threats, you're ahead of them

Accessibility

Our technology is designed for SMEs and large groups.

Compliance

We meet the standards of compliance (RGPD, NIS2, ISO 27001).

Transparency

Clear reports, open API, verifiable results. No black box.

/ FAQ

What you are looking for may be here

Does DarkMoon replace a human pentester?

No — DarkMoon augments your team's capabilities. It automates reconnaissance, scanning, and exploitation phases, freeing your experts to focus on strategic analysis and remediation. It's an autonomous orchestrator, not a human substitute.

What types of environments can DarkMoon test?

Web applications, APIs, Active Directory, Kubernetes, CMS platforms (WordPress, Drupal, Joomla...), networks, and cloud infrastructure. Agents automatically adapt to the technologies detected on the target.

 How long does a pentest take with DarkMoon?

A complete, structured report is delivered in under 2 hours after the test is launched — compared to 2 to 6 weeks for a traditional audit.

Do I need technical skills to use DarkMoon?

No. A single command is enough to launch a full security assessment. The Pro plan adds a visual dashboard and project management interface for non-technical teams

Does DarkMoon integrate with CI/CD pipelines?

Yes. DarkMoon can be triggered automatically after every build to detect critical vulnerabilities before they ever reach production.

How does DarkMoon avoid false positives?

Every discovered vulnerability is validated with real evidence — HTTP requests, payloads, and server responses — before it appears in the report. Zero ambiguity, zero noise.

Is DarkMoon legal to use?

Yes, within an authorized scope. DarkMoon is designed to test targets you own or for which you hold explicit written authorization. Any use outside the defined scope is the sole responsibility of the user.

Can DarkMoon operate in air-gapped environments?

Yes. The Custom plan supports fully isolated deployments for sovereign, defense, and highly regulated environments with no internet connection required.