Infrawatch, a cybersecurity startup focused on internet infrastructure intelligence, has raised $3 million in a pre-seed round co-led by Outward VC and Triple Point Ventures, alongside Portfolio Ventures and several fintech and cybersecurity angel investors.
Founded by Lloyd Davies alongside former specialists from CrowdStrike, Recorded Future, and Intel 471, the company is building an internet infrastructure intelligence platform designed to support cyber threat detection, fraud prevention, and online investigations.
What The Company Does
Infrawatch develops infrastructure intelligence tools that help organisations identify and analyse the systems underlying cyberattacks, phishing operations, scams, and other forms of malicious online activity.
Its platform processes large-scale internet telemetry data, analysing tens of billions of events each day to detect behavioural patterns linked to attacker infrastructure. Rather than focusing only on visible indicators such as malicious accounts or payloads, the company aims to identify persistent infrastructure signals that remain active even when threat actors change tactics.
The system converts this data into operational intelligence for security, fraud, and investigations teams. Users can assess infrastructure risk, monitor suspicious activity, and create custom detection rules alongside existing monitoring capabilities. The platform is intended to reduce reliance on fragmented threat intelligence sources and improve the speed of incident identification and response.
Advertisement
Market Context / Industry Background
Cybersecurity teams are increasingly dealing with large-scale and rapidly evolving online threats, particularly across fraud, phishing, and infrastructure-based attacks. Traditional threat detection methods often rely on isolated indicators that can quickly become outdated as attackers rotate domains, accounts, and hosting infrastructure.
This has increased demand for infrastructure-level visibility that can identify broader behavioural relationships between malicious systems and operators. At the same time, enterprises are consolidating security tooling and seeking platforms that provide more unified intelligence across detection, investigation, and attribution workflows.
The growth of automated cyber threats and online fraud operations is also pushing organisations toward more data-intensive security models capable of analysing internet-scale telemetry in near real time.
Founder / Investor Commentary
Infrawatch’s founding team brings experience from threat intelligence and cybersecurity firms including CrowdStrike, Recorded Future, and Intel 471, reflecting the company’s focus on operational intelligence and infrastructure analysis.
The company is developing a platform focused on identifying the networks, domains, and infrastructure systems used in cybercriminal operations. Instead of relying solely on reactive threat detection, the platform aims to give security teams deeper visibility into how malicious infrastructure evolves and behaves over time.
Growth Plans / Use Of Funds
The newly raised capital will be used to expand Infrawatch’s engineering and research teams, continue development of its platform, and support preparations for a planned public launch later this year.
The company also plans to onboard additional enterprise customers and strengthen its commercial presence in the United States as part of its next growth phase. Investment will further support scaling the platform’s infrastructure intelligence capabilities and extending its threat monitoring and investigative tools.
About Infrawatch
Infrawatch is a cybersecurity company developing an internet infrastructure intelligence platform for threat detection, fraud prevention, and online investigations. Founded in 2023 and headquartered in London, the company helps organisations identify and analyse malicious online infrastructure through large-scale telemetry processing and behavioural intelligence systems designed for real-time security operations.
