Patrowl is a French cybersecurity platform for continuous, automated penetration testing and external attack surface management. It helps organisations find the internet-facing assets they expose and test how those assets could be attacked. The vendor presents the product as preemptive exposure management, combining an inventory of external assets with automated tests that simulate real-world attacks. Patrowl describes itself as API-native and cloud-native, so it is delivered as an online service that can be connected to existing security tooling.
Patrowl is headquartered in Paris, France, and no foreign parent company is publicly identified. The vendor says it offers secure European hosting and does not share customer data with third parties, but its website does not name the hosting provider or the data centre locations. The product is not presented as open source, so self-hosting is not a documented option. A European organisation should confirm the contractual hosting location, the sub-processor list and the processing terms before use.