Infrawatch
London startup building an internet infrastructure intelligence layer to track and disrupt the infrastructure behind attacks, fraud and phishing.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Infrawatch is a London-based startup building what it calls an Internet Infrastructure Intelligence Layer for security, fraud and investigations teams. The platform is designed to identify, track and disrupt the servers, domains and hosting infrastructure that attackers use for phishing, scams and cyberattacks.
The company says it processes tens of billions of events daily and ships more than 1,000 out-of-the-box detection rules. It was founded by Lloyd Davies, with a team that includes alumni of CrowdStrike, Recorded Future and Intel 471, and raised a $3M pre-seed in May 2026 ahead of a planned general launch later this year.
Innovation Matrix Assessment
Pivots threat intelligence from indicator feeds to infrastructure-level tracking; product not yet generally available, so velocity is promising rather than proven.
Targets teams that need to pursue attacker infrastructure, but no named deployments yet to show operational impact.
$3M pre-seed co-led by Outward VC and Triple Point Ventures (tech.eu); no named customers, pre-launch.
Infrastructure-centric intelligence is a differentiated angle, though adjacent to established threat-intel and attack-infrastructure tracking vendors.
No independent tests or named incidents found; detection-rule counts and event volumes are company-stated.
Adversary infrastructure tracking remains relevant as phishing and fraud scale with AI-generated content.
Why CISOs Should Care
Gives fraud, SOC and investigation teams a way to pivot from a single indicator to the wider attacker infrastructure rather than chasing individual domains.
What Makes It Different
Treats internet infrastructure itself as the unit of analysis, rather than file hashes or IP/domain indicator lists.
The Matrix Verdict
47/100 — EMERGING / UNRANKED
Infrawatch is Emerging/Unranked: an interesting infrastructure-intelligence thesis and credible founding team, but pre-launch with no public customers or independent validation yet. Score reflects potential, not proven outcomes.
Editorial Note: Claims vs. Verified Findings
Event volumes and the 1,000+ detection rule count are vendor claims. Independently confirmed: the May 2026 $3M pre-seed round.
Sources
Alternatives to Infrawatch
Unknown Cyber Inc.
CISO ReviewedMalware genomics platform using automated deep static analysis and code-lineage comparison to identify unseen malware, variants, and supply-chain…
Synack Inc
A penetration-testing-as-a-service platform pairing a vetted researcher community with AI-driven attack surface discovery for continuous security validation.
Horizon3.ai
Autonomous penetration testing company whose NodeZero platform self-attacks networks without persistent agents, aiming to replace annual manual pentests…
Cogent Security
Agentic AI platform that autonomously triages, investigates, and remediates vulnerabilities as a force multiplier for security teams.
Airlock Digital
Application allowlisting (deny-by-default) platform that blocks unapproved executables, scripts, and processes to prevent ransomware and malware execution.
Vannevar Labs
A Palo Alto defense-AI company processing foreign-language and open-source intelligence under a $40M DoD contract, alongside peers like…