Infrawatch Raises $3M for Cyberattack Infrastructure Defense

London-based cybersecurity innovator Infrawatch has successfully closed a $3 million pre-seed funding round, signaling a significant push to redefine how organizations defend against sophisticated cyber threats. The investment, co-led by prominent venture capital firms Outward VC and TriplePoint Ventures, with participation from Portfolio Ventures and a cohort of angel investors, will fuel the expansion of Infrawatch's engineering and research capabilities. This capital infusion is earmarked for enhancing its unique platform, designed to identify and neutralize malicious internet infrastructure before it can be exploited.

The core of Infrawatch's strategy lies in its ability to analyze vast quantities of internet signals – reportedly dozens of billions daily – encompassing server connections, DNS activity, and newly registered domains. By scrutinizing these foundational elements, the platform aims to detect patterns indicative of impending attacks, fraud, or abuse. This proactive approach contrasts sharply with traditional reactive security measures, offering a critical advantage in the rapidly evolving threat environment. The platform incorporates over 1,000 pre-defined detection rules, with the added flexibility for security and fraud teams to implement custom threat tracking specific to their operational needs.

Founder Lloyd Davies, drawing from extensive experience in threat intelligence at firms like PwC and CrowdStrike, identified a critical gap in existing cybersecurity solutions. "The current infrastructure intelligence is fragmented and often relies on outdated data, leaving enterprises vulnerable," Davies stated. "Our platform is built from the ground up to transform underutilized infrastructure data into a practical defense layer, empowering defenders to act decisively and prevent threats from impacting their systems and users." Davies' background, particularly his focus on nation-state cyber threats, provides a deep understanding of how attackers leverage the internet's backbone.

The market for cybersecurity solutions continues its upward trajectory, with global spending projected to exceed $200 billion by 2027. Within this expansive market, specialized solutions focusing on proactive threat detection and infrastructure analysis are gaining traction. Infrawatch's approach addresses a key challenge: the speed at which malicious actors can deploy new infrastructure versus the often-delayed discovery of these threats by defenders. Investors highlighted this structural advantage, with Andi Kazeroonian of Outward VC noting, "Hostile actors can spin up anonymised attack infrastructure in minutes, yet defenders often take months to discover a breach. That imbalance is impacting virtually every industry, and Infrawatch’s real-time detection of adversarial infrastructure at source tackles it head-on."

Infrawatch's platform processes a wide array of internet metadata, assessing system behavior, potential attribution, and links to illicit activities such as phishing and fraud. This comprehensive analysis allows for the early identification of compromised or malicious infrastructure. The company has already demonstrated its capabilities through public research, including an investigation into a Belarus-based SIM-farm operation linked to activities across 17 countries. This early success underscores the platform's potential to uncover complex, transnational cyber operations.

With the new funding, Infrawatch is set to expand its engineering and research teams and finalize its platform for a general launch later this year. Initial enterprise deployments are planned, alongside a strategic push into the United States market, where significant interest has already been observed from security, fraud, and intelligence departments, even prior to active sales efforts. Sam Stone of TriplePoint Ventures emphasized the platform's value proposition: "As AI lowers the barrier to cybercrime, attackers at scale still depend on infrastructure. Infrawatch offers a superior solution for critical organizations to identify, understand, and disrupt that infrastructure."