£4m seed backs Cyb3r Operations to enable real-time supplier cyber risk monitoring
This article covers Cyb3r Operations, a London-based cybersecurity startup, which has raised £4m in a seed funding round led by Octopus Ventures with follow-on investment from Pi Labs. The funding will accelerate development of its platform to provide organisations with continuous visibility into third-party and supply-chain cyber risk and to help security and procurement teams prioritise remediation.
Cyb3r Operations, a London-based cybersecurity startup, has raised £4 million in a seed funding round led by Octopus Ventures, with follow-on investment from Pi Labs. The capital will accelerate product development and threat intelligence work for Cyb3r Operations’ platform, which aims to give organisations continuous visibility into third-party and supply-chain cyber risk — a growing source of major incidents.
Why it matters
More than a third of major cyber incidents now involve third parties, yet many organisations still manage that exposure with annual questionnaires, spreadsheets and static audits. As companies increase dependence on SaaS tools, cloud services and external suppliers, risk often sits outside the perimeter and changes rapidly. Continuous visibility into those relationships can be the difference between containment and a cascade of failures across a supply chain.
The funding signals investor interest in tooling that moves companies from point-in-time assessments to ongoing, actionable monitoring of third-party exposures.
Inside the product
Cyb3r Operations replaces fragmented, manual processes with continuous, automated oversight that integrates across an organisation’s tech stack. The platform monitors external suppliers and dependencies in real time, ranks which relationships pose the largest operational risk, and surfaces issues that static assessments can miss — for example, shadow IT, fourth-party exposures, sanctions risks and supply-chain weaknesses.
The company says the product helps security and procurement teams focus remediation where it matters most, turning long vendor lists and siloed data into contextual risk signals tied to organisational resilience.
Who are the investors?
The round was led by Octopus Ventures, with follow-on investment from Pi Labs. Octopus has a broad early-stage portfolio across enterprise software and security, while Pi Labs is known for backing property-tech and infrastructure-focused startups; both investors bring access to enterprise customers and sector expertise relevant to supply-chain and vendor-risk problems.
In the announcement, Constanza Diaz, Investor at Octopus Ventures, said:
We invested in Cyb3r Operations because they’re tackling a critical blind spot in cybersecurity: the growing gap between perceived third-party risk and real exposure. As organisations scale their digital ecosystems, risk now flows through suppliers, SaaS tools and hidden dependencies, but most teams are still operating reactively. Cyb3r Operations delivers continuous, contextual visibility across the tech stack, making third-party risk genuinely actionable.
If you're researching potential backers in this space:
- Explore our list of cyber security venture capital firms in the UK
- Browse our directory of cyber security angel investors in the UK
Founder perspective
In the announcement, Vincent Cook, Founder & CEO at Cyb3r Operations, said:
One of the biggest problems in cybersecurity today isn't just how advanced threat actors are getting. It's that we're stumbling over our own processes. Organisations lack basic visibility into where risk actually sits. Exporting vendor lists from CRM or procurement systems and manually uploading them into another siloed tool is no longer good enough. Most organisations have developed an allergic reaction to third-party risk management because the market is full of meaningless risk scores and static assessments that don't reflect how companies actually work. Real risk sits in relationships, dependencies, employee exposure, and how those things change over time. Our mission is to enable organisations the ability to continuously detect, assess, and respond to threats in order to stay ahead.
Cook framed the funding as a way to scale the platform and deepen threat intelligence capabilities so customers can move from reactive checklists to continuous detection and response.
The bigger picture
The deal arrives as organisations face a mix of technical complexity and regulatory scrutiny around supply-chain resilience. Regulators in the UK and EU have been emphasising operational resilience and third-party oversight, and that is shifting budget and procurement priorities toward continuous monitoring tools. For cybersecurity investors, the addressable market includes large enterprises with extensive vendor ecosystems and security teams that need to prioritise remediation at scale.
This investment also reflects a broader trend: startups that map dependencies across modern tech stacks — including SaaS and cloud providers — are gaining traction because they translate diffuse exposures into concrete actions.
The funding for Cyb3r Operations highlights growing UK momentum behind startups focused on third-party and supply-chain cyber risk, and suggests further consolidation of investment into tools that bring continuous, contextual visibility to enterprise security.
They've invested in Cyb3r Operations
Get to know these cyber security investors
Click here for a full list of 7,526+ startup investors in the UK