The new $3 million finance is a pre-seed round to build the Internet Infrastructure Intelligence Layer which is a new category of cybersecurity platform. This funding round was led by Outward VC along with Triple Point Ventures and Portfolio Ventures and leading fintech and cyber angel investors.

Davies founded Infrawatch – built by a team formed of CrowdStrike, Recorded Future and Intel 471 alumni. The platform offers security, fraud and investigations teams real-time visibility into the way that cyber attacks, frauds and scams are created and launched.

Attackers constantly change tactics, accounts, and payloads, but the infrastructure they depend on leaves a persistent trail. That infrastructure can be identified, tracked, blocked, and mitigated before it is used at scale.

Infrawatch is built around this underused opportunity, combining huge intelligence collection with real-time classification to help organisations move from reactive monitoring to pre-emptive defence as a single intelligence layer replacing fragmented solutions and “noisy” feeds.

The platform which Infrawatch has built scours the internet, processing tens of billions of events each day. The company says this turns internet scale visibility into clear, actionable intelligence. A customer can also be empowered to create their own custom detections, putting the control back into the customer’s hands to track the threats that matter to them.

Attackers need infrastructure to operate and Infrawatch find these in real time. It then classifies the infrastructure and gives security and fraud teams the intelligence they need to identify threats more quickly.

Lloyd Davies, Founder and CEO of Infrawatch, said: “I know from first-hand experience how broken infrastructure intelligence is today: fragmented data, noisy feeds, and taped-together workflows, where ‘real-time’ detection often means static daily updates in practice. Enterprises cannot keep up by patching together narrow intelligence feeds while the internet changes beneath them. That is why we built Infrawatch from the ground up: to turn one of the most underutilised aspects of cybersecurity into a practical defence layer that empowers defenders to act earlier and stop threats before they reach their customers, users or systems.”

Sam Stone, an investor at Triple Point Ventures, said: “While AI lowers the bar to carrying out cyber crime and drives up attack volumes, attackers at scale still depend on infrastructure to operate. We think Infrawatch offers the very best solution for society’s critical organisations to identify, understand, and disrupt that infrastructure. Lloyd and team have the depth of knowledge, experience, and technical ability to shake up the industry with a solution defenders desperately need to keep companies and people protected. We’re proud to back that vision.”

Andi Kazeroonian, principal at Outward VC, said: “Hostile actors can spin up anonymised attack infrastructure in minutes, yet defenders often take months to discover a breach. That imbalance is impacting virtually every industry, and Infrawatch’s real-time detection of adversarial infrastructure at source tackles it head-on. The inbound enterprise interest generated, with zero outbound sales or marketing, is both remarkable and indicative of the compounding scale of this problem. Lloyd and his team bring the rare combination of technical excellence, operational grit and domain obsession that this challenge demands and we are excited to support them as they build a category defining company.”