CodeWall emerged from stealth with $4 million in pre-seed funding to expand its autonomous offensive security platform for enterprises. The round was led by Osney Capital, with participation from InReach Ventures, Antler, and angel investors.
CodeWall is developing autonomous attack agents designed to continuously test enterprise systems from the perspective of an external attacker.
The company positions the platform as an offensive layer for enterprise security, complementing traditional defensive tools by actively looking for exploitable attack paths.
Rather than relying on periodic penetration tests, CodeWall is designed to provide continuous adversarial testing within an organization’s authorized scope.
Its autonomous agents begin without credentials, source code, or internal access, mirroring how an outside attacker would initially approach an enterprise environment.
Multiple specialist agents can investigate systems in parallel and share findings through what CodeWall calls a persistent investigation graph.
The platform can use a weakness identified in one application as a starting point for exploring connected systems, identities, and data.
CodeWall then provides defenders with evidence showing what could potentially be compromised and how the attack path was established.
The company said the technology is already being used by banks and financial institutions to identify and verify exploitable paths across their environments.
Earlier in 2026, CodeWall’s autonomous agents also identified vulnerabilities in systems associated with McKinsey & Company, Boston Consulting Group, and Bain & Company.
The company said its research included obtaining read and write access to the production database supporting McKinsey’s Lilli AI platform within approximately two hours.
CodeWall is building the platform around the idea that enterprise environments continually change as new applications are deployed, software is updated, and vulnerabilities are remediated.
Its agents are intended to return to previously tested environments, investigate new changes, and verify whether fixes have actually removed exploitable paths.
The company believes this model can shift offensive security from a once-or-twice-a-year assessment to an ongoing enterprise capability.
Artificial intelligence is central to that strategy.
CodeWall argues that AI is increasingly letting attackers automate larger portions of attack chains, making it necessary for defenders to scale offensive testing beyond how many human security specialists they can hire.
The new funding will expand the range of enterprise environments where CodeWall’s autonomous attack agents can operate.
The company also plans to develop additional capabilities around sustained testing, verification, and remediation workflows.
CodeWall will expand its offensive security, engineering, customer success, and go-to-market teams in London.
KEY QUOTES:
“Enterprises shouldn’t have to wait for a real attacker to find out whether their defenses hold. That’s why we’re turning offensive security from a periodic assessment into a permanent capability, giving every enterprise an attacker that keeps looking for a way in. We’re here to put the offensive advantage in the hands of defenders.”
Paul Price, Founder and CEO of CodeWall
“For years, the advantage has sat with the attacker. They can keep probing, adapting and looking for another way in, while enterprises defend an environment that never stops changing. What we saw in CodeWall was an opportunity to turn that dynamic on its head by giving every enterprise an attacker of its own. One that starts from the outside, with no privileged knowledge, and keeps looking for a way through. We believe there’s a future where having an attacker working for you is as fundamental as having defenses in place, and CodeWall is building for that future.”
Paul Wilkes, Partner at Osney Capital
