Company: Hodor
Founder: Karim Boussetta and Timothé Husson
Website: https://www.hodor.ai/
About Hodor
We started Hodor in 2025 with a simple observation. Companies were connecting AI agents to their business tools, and those agents were running on borrowed human credentials: a shared API key, an employee token, an admin account. Nobody could say which agent did what, or stop one from going further than it should. Our thesis is that human permissions and agent permissions must be separate, and that agents need their own identity layer.
Hodor is a zero trust gateway that sits between AI agents and enterprise applications. Every agent gets its own identity, permissions are set at the level of each individual tool, policies are enforced on every call, and every action is logged for audit. Security teams get the same control over agents that IAM gave them over people.
The team is six people: two founders and four engineers. My cofounder and CTO, Timothé Husson, has spent twelve years in cybersecurity and contributes to the OWASP work on MCP security.
Building a category that did not exist a year ago. When we started, most security teams had not yet seen agents in production. We spent the first months listening to CISOs, mapping where agents were already touching sensitive systems, and turning that into a product they could approve.
Earning enterprise trust as a small team. Large companies do not buy security from a six person startup by default. We went through full security reviews, obtained ISO 27001 certification, and kept our infrastructure in Europe to meet sovereignty requirements.
Keeping pace with a moving standard. MCP, the protocol most agents now use to reach tools, has changed fast. We built Hodor to absorb those changes so our customers do not have to.
Hodor is used by companies such as Orange and Leboncoin, and we work with partners including Dell, Sekoia, EY, Sia Partners and Hermitage Solutions.
More broadly, we are helping move the conversation from whether AI agents are safe to how to govern them in practice: least privilege, separate identities, and a full audit trail. Through our work with OWASP and our customers, we try to make these practices concrete and reusable for the wider community.
In 2026 Hodor won the Innovation of the Year award at VivaTech, was a laureate of the CMA CGM Startup Awards, and was selected for the F/ai accelerator. These milestones matter to us mostly because they open doors to the security teams we want to work with.
Want to find out what TechRound can do for your business?
