Infrawatch announced it has raised a $3 million pre-seed funding round to build what it describes as the Internet Infrastructure Intelligence Layer, a new cybersecurity platform category designed to help organizations identify and stop cyberattacks, fraud, scams, phishing, and online abuse before they happen.
The funding round was co-led by Outward VC and Triple Point Ventures, with participation from Portfolio Ventures and several fintech and cybersecurity angel investors.
Founded by Lloyd Davies and developed by former employees of CrowdStrike, Recorded Future, and Intel 471, Infrawatch is focused on helping security, fraud, and investigations teams gain real-time visibility into the infrastructure used by cybercriminals and hostile actors.
The company said attackers frequently rotate tactics, accounts, and payloads, but the infrastructure supporting those operations leaves identifiable patterns that can be tracked and disrupted before attacks scale. Infrawatch’s platform combines large-scale intelligence collection with real-time classification capabilities to create a centralized intelligence layer intended to replace fragmented data feeds and disconnected workflows.
According to the company, the platform processes tens of billions of events daily and provides more than 1,000 out-of-the-box detection rules. Customers can also build custom detections tailored to specific threat-monitoring needs.
The newly raised capital will be used to expand Infrawatch’s engineering and research teams, accelerate platform development ahead of a planned general launch later this year, support early enterprise customer deployments, and help drive the company’s expansion into the United States.
Davies founded Infrawatch after working in threat intelligence and security research roles, including positions within PwC and CrowdStrike’s nation-state threat intelligence team. The company also plans to continue publishing cybersecurity intelligence research for the broader security community.
In April, Infrawatch published research into a Belarus-based “SIM-Farm-as-a-Service” operation connected to operators across 17 countries.
KEY QUOTES:
“I know from first-hand experience how broken infrastructure intelligence is today: fragmented data, noisy feeds, and taped-together workflows, where ‘real-time’ detection often means static daily updates in practice. Enterprises cannot keep up by patching together narrow intelligence feeds while the internet changes beneath them. That is why we built Infrawatch from the ground up: to turn one of the most underutilised aspects of cybersecurity into a practical defence layer that empowers defenders to act earlier and stop threats before they reach their customers, users or systems.”
Lloyd Davies, Founder And CEO, Infrawatch
“While AI lowers the bar to carrying out cyber crime and drives up attack volumes, attackers at scale still depend on infrastructure to operate. We think Infrawatch offers the very best solution for society’s critical organisations to identify, understand, and disrupt that infrastructure. Lloyd and team have the depth of knowledge, experience, and technical ability to shake up the industry with a solution defenders desperately need to keep companies and people protected. We’re proud to back that vision.”
Sam Stone, Investor, Triple Point Ventures
“Hostile actors can spin up anonymised attack infrastructure in minutes, yet defenders often take months to discover a breach. That imbalance is impacting virtually every industry, and Infrawatch’s real-time detection of adversarial infrastructure at source tackles it head-on. The inbound enterprise interest generated, with zero outbound sales or marketing, is both remarkable and indicative of the compounding scale of this problem. Lloyd and his team bring the rare combination of technical excellence, operational grit and domain obsession that this challenge demands and we are excited to support them as they build a category defining company.”
Andi Kazeroonian, Principal, Outward VC
