Decoding the world of cybersecurity

Prevalent AI raises $22m for expansion

Prevalent AI has raised $22 million in its first primary funding round, with plans to expand its security data platform into wider enterprise-risk use cases.

Prevalent AI raises m for expansion
Summary
  • Integrity Growth Partners has invested $22 million in UK-based Prevalent AI.
  • The company says annual recurring revenue has more than doubled over the past year.
  • New capital will support US expansion and the extension of its knowledge graph beyond cyber security.

UK-based Prevalent AI has raised $22 million from Integrity Growth Partners in the first primary funding round of its nine-year history, giving the previously bootstrapped cyber-security company capital to expand internationally and move into wider enterprise-risk use cases.

Prevalent AI was founded in 2017 by Paul Stokes and Arun Raj. The company says it has remained profitable since its first customer and previously expanded primarily through revenue rather than institutional growth funding.

Temasek-owned Istari acquired a minority stake in 2021 through a secondary transaction, meaning capital changed ownership between shareholders rather than being injected into the business. The Integrity Growth Partners investment is therefore the first primary external capital Prevalent AI has taken.

The company’s platform collects information from hundreds of enterprise systems and connects it through a continuously updated knowledge graph. In cyber-security deployments, that can link assets, identities, controls and other operational information that would otherwise remain distributed across separate products and databases.

Prevalent AI describes the resulting architecture as a sovereign knowledge graph because customers retain control over where the underlying information is held. Its customer base includes organisations in banking, telecommunications, insurance and critical infrastructure.

The company says annual recurring revenue has more than doubled during the past 12 months. It also attributes an improvement of more than 80 per cent in incident detection to one banking deployment and a 95 per cent reduction in executive reporting time at an insurance customer. Those performance figures are supplied by Prevalent AI and have not been independently audited.

The new funding will support a more formal global sales, marketing and customer-success operation, expansion in the United States and development of the platform beyond security into areas including financial crime, compliance and operational risk.

That expansion is built around a familiar enterprise problem. Security estates have accumulated specialist products for assets, vulnerabilities, identities, cloud environments and incident response. Each can hold accurate information within its own domain while still producing conflicting or incomplete views when organisations attempt to understand the estate as a whole.

AI increases the consequence of those inconsistencies. A model asked to prioritise vulnerabilities or identify control gaps can process large quantities of information quickly, but it cannot compensate reliably for assets recorded twice, stale ownership data or missing relationships between systems.

Knowledge graphs offer one approach by modelling those relationships explicitly rather than treating every data source as an isolated record store. The commercial question is whether enterprises want another independent layer to reconcile their existing technology stack or expect the same capability to emerge inside larger security and data platforms.

Prevalent AI’s move beyond cyber security will test whether the contextual model travels successfully into other risk functions. Financial crime, compliance and operational resilience use different datasets and ownership structures even where the underlying challenge of fragmented enterprise information is similar.

The $22 million investment therefore marks more than a financing event. Prevalent AI is shifting from founder-led, capital-efficient growth towards a more conventional international expansion model while attempting to prove that technology developed around security data can become infrastructure for broader enterprise decision-making.

×