Gen Z CrowdStrike alum raises $3M pre-seed to build a unified cyber intelligence layer — TFN
Gen Z CrowdStrike alum raises $3M pre-seed to build a unified cyber intelligence layer — TFN
https://techfundingnews.com/infrawatch-3m-pre-seed-cybersecurity-threat-intelligence-lloyd-davies/
Publish Date: 2026-05-20 04:17:00
Source Domain: techfundingnews.com
- London-based Infrawatch has raised $3 million in a pre-seed round co-led by Outward VC and Triple Point Ventures
- Founded by Lloyd Davies, a 26-year-old former threat intelligence researcher at CrowdStrike and PwC, the company processes tens of billions of events daily
- The funding will support team growth, accelerate platform development ahead of a general launch in 2026, and enable early enterprise deployments in the US
Lloyd Davies started working in security research when he was 12. By the time he was 26, after working with PwC’s security intelligence team and CrowdStrike’s nation-state threat unit, he saw a common problem: security and fraud teams relied on multiple separate intelligence feeds that were not updated in real time and did not provide a single view of attacker infrastructure.
To tackle this issue, he started Infrawatch in 2025.
The startup just raised $3 million in pre-seed funding, co-led by Outward VC and Triple Point Ventures, with backing from Portfolio Ventures and fintech and cybersecurity angel investors.
The London startup processes tens of billions of events each day, classifying internet infrastructure such as IP addresses, domains, proxies, VPNs, and command-and-control servers connected to cyberattacks, fraud, phishing, and online abuse.
Current tools only address parts of cyberattacks. Platforms like Recorded Future and GreyNoise provide information on known malicious activity, but these are limited solutions. DNS intelligence, IP reputation, VPN detection, and phishing monitoring are typically handled separately, resulting in a fragmented approach.
Infrawatch’s platform offers a unified intelligence layer to replace separate solutions. Its engine combines several data-collection methods, including passive DNS, active scanning, honeypot networks, and proprietary infrastructure, all of which support one another.
According to Davies, the platform can replace six different tools. It has more…
