Cybersecurity startup CodeWall raises £3m led by Osney Capital with InReach Ventures
This article covers CodeWall, a London-based cybersecurity startup, emerging from stealth after raising £3m in a pre-seed funding round led by Osney Capital. The funding will be used to scale its autonomous offensive security platform and expand teams to provide continuous, automated adversarial testing for enterprises, including banks and financial institutions.
CodeWall has emerged from stealth after raising £3m in a pre-seed funding round led by Osney Capital. The London-based cybersecurity startup says it will use the capital to scale its autonomous offensive security platform, expand engineering and customer teams, and broaden the types of enterprise environments its agents can test. The deal matters because it highlights growing demand from organisations for continuous, automated adversarial testing rather than periodic penetration tests.
Why it matters
Enterprises are increasingly treating attackers as an active, ongoing threat; tools that only assess security once or twice a year can miss vulnerabilities that appear as systems change. CodeWall’s approach aims to make offensive testing continuous and repeatable, which could shift how security teams verify fixes and maintain risk posture.
The company says banks and financial institutions are already using the platform to identify exploitable paths. Earlier this year, CodeWall also reported that its agents found vulnerabilities in systems associated with McKinsey & Company, Boston Consulting Group, and Bain & Company, and that its research included obtaining read and write access to the production database supporting McKinsey’s Lilli AI platform within roughly two hours. Those are company claims and, if accurate, illustrate the potential speed at which automated tools can map attack surfaces.
The round comes as enterprises confront an AI-enabled threat landscape where attackers can automate more of an attack chain, increasing pressure on defenders to scale testing without proportional headcount increases.
Inside the product
CodeWall describes its platform as an offensive layer that complements traditional defensive tools. Its core components include autonomous attack agents that operate from an external attacker’s perspective — starting without credentials, source code, or internal access. Multiple specialist agents can probe systems in parallel and share findings into a persistent investigation graph.
That investigation graph lets the platform take a weakness found in one application and use it as a pivot to explore connected systems, identities, and data, producing evidence-based attack paths for defenders. The company positions this workflow as a way to verify that remediation actually removes exploitable paths, rather than assuming a patch resolves the underlying issue.
Artificial intelligence is central to the design; CodeWall argues AI lets its agents automate larger portions of attack chains so they can keep probing and adapting at a scale beyond human red-team capacity.
Who are the investors?
The round was led by Osney Capital, with participation from InReach Ventures, Antler, and unnamed angel investors.
Osney Capital led the pre-seed cheque and its partner provided commentary on the strategic rationale for backing CodeWall. InReach Ventures and Antler are both active in early-stage technology investing; Antler is a global pre-seed and seed investor, while InReach focuses on European early-stage deals. Angel participation rounds out the group, reflecting typical pre-seed syndication.
In the announcement, Paul Wilkes, Partner at Osney Capital, said:
For years, the advantage has sat with the attacker. They can keep probing, adapting and looking for another way in, while enterprises defend an environment that never stops changing. What we saw in CodeWall was an opportunity to turn that dynamic on its head by giving every enterprise an attacker of its own. One that starts from the outside, with no privileged knowledge, and keeps looking for a way through. We believe there’s a future where having an attacker working for you is as fundamental as having defenses in place, and CodeWall is building for that future.
If you're researching potential backers in this space:
- Explore our list of cyber security venture capital firms in the UK
- Browse our directory of cyber security angel investors in the UK
Founder perspective
In the announcement, Paul Price, Founder and CEO of CodeWall, said:
Enterprises shouldn’t have to wait for a real attacker to find out whether their defenses hold. That’s why we’re turning offensive security from a periodic assessment into a permanent capability, giving every enterprise an attacker that keeps looking for a way in. We’re here to put the offensive advantage in the hands of defenders.
Price framed the product as an attempt to give defenders a persistent, automated attacker that mirrors external threat behaviour and verifies remediation over time.
The bigger picture
CodeWall’s raise sits within a broader push for continuous security tooling and automated red-teaming as AI lowers the marginal cost of offensive activity. For enterprise security teams in finance and other regulated sectors, continuous adversarial testing can provide more timely risk signals and evidence for compliance and audit processes.
The startup will recruit across offensive security, engineering, customer success, and go-to-market roles in London, tapping into the city’s deep cybersecurity talent pool. The deal also underscores ongoing investor interest in cybersecurity infrastructure that scales with AI-driven threats.
This funding round adds to momentum in the UK and European cybersecurity market as startups build tools to automate previously manual security tasks and help large organisations keep pace with an evolving threat landscape.
They've invested in CodeWall
Get to know these cyber security investors
| Investors | Investment Focus | Startup Investments | Round Size | Connect |
|---|---|---|---|---|
 Osney Capital( ) Osney Capital is a venture capital firm specialising in the early-stage Cyber se... London  | ||||
 InReach Ventures( ) This AI-powered venture capital firm invests in early-stage European startups, f... London | AICyber Security | |||
 | ||||
| All investors | All investor sectors | All funded startups | All funding rounds |
Click here for a full list of 7,589+ startup investors in the UK