Cytix Raises $7M Series A for AI Software Risk Management

In a significant move to address the escalating cybersecurity challenges posed by AI-accelerated software development, UK-based startup Cytix has successfully closed a $7 million Series A funding round. This capital infusion, spearheaded by Northern Gritstone, with crucial participation from existing backers Auriga Cyber Ventures and NPIF II – PXN Equity Finance (managed by PXN Ventures as part of the Northern Powerhouse Investment Fund II), will fuel the expansion of its innovative change risk management platform.

The rapid integration of AI tools into the software development lifecycle, including AI-assisted coding and agentic workflows, is dramatically increasing the velocity and volume of code changes. Traditional security paradigms, often focused on identifying static vulnerabilities, are proving insufficient to manage the dynamic risks introduced by this accelerated pace. Cytix is strategically positioned to fill this gap, offering a solution that moves beyond mere vulnerability detection to provide a comprehensive understanding of the business risk associated with each software modification.

According to industry observations, a substantial majority of security leaders—specifically 62%—perceive security risk within their organizations as shifting from a latent concern to an immediate threat. Furthermore, a significant 38% express strong reservations about their preparedness for the influx of AI-generated code. This sentiment underscores the urgent need for advanced solutions like Cytix's platform, which aims to provide granular visibility and control over these evolving threats.

Ben Armstrong, CEO of Cytix, highlighted the critical need for their technology: "Software is changing. AI-assisted development means change now happens at machine speed. Meanwhile, very few security leaders have control over, or understanding of, those changes from a risk perspective. Right now, existing tools can tell you what vulnerabilities you have, but can’t tell you about the risk. We launched Cytix's change risk management platform to get control of that risk." The platform continuously monitors software modifications, analyzes associated risks, dictates appropriate security responses, and validates their implementation, while also generating auditable evidence for compliance purposes.

The newly acquired funding will be instrumental in scaling Cytix's go-to-market strategy, with a particular focus on enterprise clients and organizations operating within highly regulated sectors where stringent software change governance is a non-negotiable compliance requirement. The company's platform is designed to integrate seamlessly between the development pipeline and risk, security, and compliance functions, offering a centralized control point for software changes. This allows security teams to gain unprecedented insight into what is changing, the potential business impact, and the mitigation actions taken.

Cytix's strategic partnerships with established entities like NCC Group and KPMG further enhance its reach and ability to serve complex enterprise needs. These collaborations ensure that organizations can access Cytix's advanced capabilities either directly or through managed service offerings, reinforcing the platform's value proposition in a market increasingly defined by rapid digital transformation and sophisticated cyber threats.