Ossprey Raises £2M for AI Code Security Platform

London-based cybersecurity innovator Ossprey has successfully closed a £2 million ($2.65 million) pre-seed funding round. This capital infusion is earmarked to accelerate the development of its advanced platform designed to combat threats lurking within the software supply chain, particularly those amplified by the rapid adoption of AI in development workflows.

The company, co-founded by Nate Dunning and David Read, is addressing a critical vulnerability: the increasing reliance on open-source components and AI-generated code. Ossprey's core technology provides continuous scanning capabilities, meticulously inspecting open-source dependencies for malicious code before they are integrated into production environments. This proactive approach is vital as AI coding assistants and accelerated development practices lead to a significant surge in code volume and external dependencies.

The urgency for such solutions is underscored by the escalating sophistication of software supply chain attacks. Industry reports indicate a sharp rise in these incidents, with attackers increasingly exploiting vulnerabilities in trusted open-source packages. Ossprey's founders recognized that traditional security measures are ill-equipped to handle the velocity and complexity introduced by modern software development, where speed often comes at the expense of robust security vetting.

This significant pre-seed investment was spearheaded by Episode 1 Ventures, with active participation from Osney Capital and Octopus Ventures. The funds will be strategically deployed to enhance product capabilities, expand the company's engineering and commercial teams, and facilitate market entry into North America and Europe. Ossprey's participation in the UK Department for Science, Innovation and Technology’s (DSIT) Cyber Runway accelerator provided a strong foundation for this growth phase.

Millan Suri, Principal at Episode 1 Ventures, highlighted the critical need for Ossprey's technology. "Open-source software supply chain attacks have quietly exploded in scale and sophistication, yet security tools today can’t tell malicious code from benign," Suri stated. He further praised the founding team, noting, "Ossprey’s detection engine catches what signature-based tools miss, stopping malicious code before it hits production. Having experienced this directly, Nate and David’s rare technical depth make them uniquely equipped to set a new security gold standard."

The market for software supply chain security is experiencing robust growth, driven by heightened awareness of cyber risks and regulatory pressures. As organizations increasingly adopt AI-powered development tools, the attack surface expands, creating a fertile ground for malicious actors. Ossprey's innovative approach positions it to capture a significant share of this expanding market by offering a solution that aligns with the pace of modern software delivery without compromising security integrity.