ThreatAware

ThreatAware is a London-based cyber asset management and cyber hygiene platform founded in 2018. Its core function is closing the gap between what security teams believe is deployed across their environment and what is actually running: the platform continuously discovers and cross-references devices, endpoints, and cloud assets against the security tools (EDR, patching, MFA, backup) that are supposed to be covering them, then flags gaps where a control is missing, misconfigured, or has silently stopped reporting. The company cites internal data suggesting roughly 10% of devices accessing corporate networks go undetected by existing tools, and that 30% of security controls are missing, misconfigured, or failing silently.

What distinguishes ThreatAware from a general CMDB or vulnerability scanner is the control-verification angle: rather than just inventorying assets, it checks whether the security stack a company believes it has deployed is actually functioning on each asset, which is a common blind spot in environments that rely on point-in-time audits or self-reported compliance dashboards. The company reached profitability and signed over 100 clients organically before taking any outside investment, which it raised for the first time in February 2026 with a $25 million round led by One Peak.

For CISOs, ThreatAware’s pitch is straightforward assurance: confirming that the controls already purchased are actually deployed and working, rather than adding another detection layer on top of an unverified base. The funding is earmarked for expanding into North America and building out an AI-powered security workspace, so its roadmap and competitive position outside the UK/European market are still developing.