Cambridge Intelligence

Cambridge Intelligence is not a detection or prevention vendor — it builds developer SDKs (KeyLines, ReGraph, and the timeline-focused KronoGraph) that other software makers embed to visualize complex, connected data as interactive network graphs. In a security operations context, that means turning sprawling log data, threat intelligence relationships, or fraud-ring connections into a graph an analyst can actually explore, rather than leaving that correlation work to raw tables and manual pivoting.

Founded in 2011 and based in Cambridge, England, the company built its WebGL-based rendering engine specifically to handle large, dense graphs without the performance collapse that plagues many visualization libraries at scale — a practical requirement for security and intelligence use cases where a single investigation graph can span tens of thousands of nodes. The company says its SDKs are used by more than 250 organizations building software for cybersecurity, fraud detection, and government/financial intelligence, though most of those deployments are embedded inside other vendors’ platforms rather than customer-facing under the Cambridge Intelligence name.

The company appears to be profitable and self-sustaining rather than venture-funded, reportedly generating around $8.9 million in revenue with a lean team of roughly 80 people as of recent estimates. Because it sells an analysis and visualization layer rather than a detection or blocking control, its value to a security team is best measured by analyst productivity and investigation speed rather than by blocked-attack metrics, and the company’s own marketing claims about customer count and use cases have not been independently audited for this profile.