Cyb3r Operations raises $5.4m to close third-party cyber risk gaps

January 16, 2026

Cyb3r Operations, a London-based cybersecurity startup, has raised $5.4m (£4m) to help organisations gain continuous visibility into third-party cyber risk across their digital ecosystems.

The funding round was led by Octopus Ventures, with follow-on investment from Pi Labs. Following the raise, Cyb3r Operations’ total funding now stands at $6.75m (£5m).

The company is addressing a growing challenge for enterprises, with more than a third of major cyber incidents now linked to third parties, it said. Despite this, many organisations still rely on outdated methods such as annual questionnaires, spreadsheets and static audits, which quickly become obsolete as supplier networks expand.

Cyb3r Operations replaces these manual processes with continuous, automated oversight that integrates across an organisation’s technology stack. Its platform enables real-time monitoring of third-party and supply-chain cyber risks, helping security teams understand where risk actually sits and how it changes over time.

Unlike traditional tools that generate abstract risk scores, the platform highlights which external relationships matter most and where action should be prioritised. It also surfaces issues such as shadow IT, fourth-party exposure, undisclosed sanctions risks and supply-chain vulnerabilities that are often missed by point-in-time assessments.

The new funding will be used to scale the platform, enhance its threat intelligence capabilities and support more organisations managing third-party and supply-chain cyber risk.

Cyb3r Operations founder and CEO Vincent Cook said, “One of the biggest problems in cybersecurity today isn’t just how advanced threat actors are getting. It’s that we’re stumbling over our own processes. Organisations lack basic visibility into where risk actually sits.

“Exporting vendor lists from CRM or procurement systems and manually uploading them into another siloed tool is no longer good enough. Most organisations have developed an allergic reaction to third-party risk management because the market is full of meaningless risk scores and static assessments that don’t reflect how companies actually work.

“Real risk sits in relationships, dependencies, employee exposure, and how those things change over time. Our mission is to enable organisations the ability to continuously detect, assess, and respond to threats in order to stay ahead.”