CyberOwl
London-based maritime cybersecurity specialist, now part of DNV, providing vessel cyber risk monitoring and managed security through its Medulla platform.
Visit Website ↗ + Add to CompareOverview
CyberOwl provides cyber risk monitoring and managed security services purpose-built for ships and maritime fleet operators, a segment with operational technology and connectivity constraints that generic enterprise security tools handle poorly. Its Medulla platform gives vessel operators visibility into onboard IT/OT networks and prioritizes cyber risk across a fleet, paired with managed services to help operators without dedicated onboard security staff respond to incidents.
Founded in 2016 as a spin-out from Coventry University’s Research Centre for Future Transport and Cities, CyberOwl is headquartered in London and raised roughly $8.8 million in venture funding over several rounds, including a Series A round in 2022, before being acquired by DNV — the Norwegian classification society and maritime risk assurance giant — in a deal announced in September 2024. The acquisition combined CyberOwl’s fleet monitoring technology with DNV’s existing DNV Cyber business (itself built from earlier acquisitions of Nixu and Applied Risk), creating one of the largest specialist maritime cybersecurity operations globally, spanning hubs in Oslo, London, Singapore, Hamburg, and Piraeus.
The maritime cybersecurity focus is a real and underserved niche — the industry reports a typical 30-vessel fleet now sees roughly 80 cyber incidents a year — and CyberOwl’s backing by DNV gives it access to a large existing base of ship classification and risk-assessment relationships. As with any recently acquired company, prospective customers should confirm current product roadmap and support commitments now that Medulla operates under DNV’s broader Cyber division rather than as a standalone venture-backed startup.
Innovation Matrix Assessment
As an academic spin-out that grew to a Series A and multiple funding rounds before acquisition, CyberOwl has shown steady product development on its Medulla platform, though detailed release-cadence data is not public.
Purpose-building for maritime OT/IT constraints -- intermittent connectivity, legacy shipboard systems, no onboard security staff -- addresses real operational gaps that generic enterprise security tools are not designed to handle.
Being acquired by DNV, a major maritime classification and risk-assurance firm, in September 2024 is a strong momentum signal, immediately expanding CyberOwl's reach through DNV's existing global customer relationships rather than requiring it to build that distribution alone.
Purpose-built maritime cyber risk monitoring is a distinct, underserved niche compared to generic enterprise security tools retrofitted for OT, addressing a documented and growing incident rate specific to shipping fleets.
DNV's due diligence and decision to integrate CyberOwl into its Cyber division is an implicit third-party validation of the technology, though no independent, named-customer case study or technical benchmark of Medulla's detection or risk-scoring accuracy was found publicly.
Tightening maritime cyber regulation (e.g., IMO requirements) and a reported rise in shipping cyber incidents make dedicated fleet-level cyber risk monitoring increasingly relevant, and DNV's backing gives the technology a credible path to fleet-wide adoption.
Why CISOs Should Care
Gives maritime fleet operators and their security/risk teams purpose-built cyber risk visibility across vessel IT/OT systems that generic enterprise tools are not designed to monitor, now backed by DNV's classification and risk-assurance scale.
What Makes It Different
A maritime-specific cyber risk platform (Medulla) built from academic research into ship OT/IT networks, rather than a general-purpose OT security tool adapted after the fact for shipping.
The Matrix Verdict
58/100 — INCREMENTAL INNOVATOR
A credible, technically focused maritime cybersecurity specialist whose September 2024 acquisition by DNV significantly expands its distribution and validates its niche; the main open question is how much product independence it retains inside DNV's larger Cyber division.
Editorial Note: Claims vs. Verified Findings
The Coventry University spin-out origin, 2016 founding, ~$8.8M in prior venture funding, and the DNV acquisition (announced September 2024) are independently reported across multiple maritime trade and business press outlets; specific claims about Medulla's risk-scoring accuracy are vendor-sourced and not independently benchmarked.
Sources
Alternatives to CyberOwl
Abnormal AI
AI-native behavioral security platform that analyzes sender identity and communication patterns, rather than message content alone, to stop…
Palo Alto Networks Cortex XSIAM
Palo Alto Networks' AI-driven 'autonomous SOC' platform that unifies SIEM, EDR, SOAR, and attack-surface data into a single…
Fenix24
Chattanooga-based ransomware recovery specialist that has restored operations after 500+ real-world incidents, including 30 Fortune 500 companies.
Torq
AI-native hyperautomation platform positioning itself as an 'agentic SOC,' using a multi-agent system to autonomously execute large volumes…
Sophos
Sophos is a UK-founded, Thoma Bravo-owned cybersecurity vendor unifying endpoint protection, network firewalls, and managed detection and response…
Edge Delta
A telemetry pipeline and AI-agent observability platform that processes logs, metrics, and security data at the edge to…