SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
London skyline dusk digital vendor network third party cyber risk

Cyb3r Operations raises $5.4m to tackle cyber risk

Fri, 16th Jan 2026

Cyb3r Operations has raised $5.4 million in a funding round led by Octopus Ventures, with follow-on investment from Pi Labs.

The London-based cybersecurity startup said the deal brings its total funding to $6.75 million. The company focuses on third-party cyber risk, an area that has attracted more attention as organisations expand their use of suppliers and software services outside their direct control.

Cyb3r Operations said more than a third of major cyber incidents now involve third parties. It said many organisations still manage those risks through annual questionnaires, spreadsheets, and point-in-time audits.

Third-party focus

The company sells software that provides ongoing monitoring of cyber risk linked to external suppliers and service providers. It positions its product as an alternative to vendor assessments that rely on static scoring.

Cyb3r Operations said it integrates with an organisation's existing technology stack. It said the platform identifies and monitors risks across supply chains in real time.

The company said its software highlights which external relationships matter most and how risk changes over time. It said the platform flags vulnerabilities across third-party ecosystems. It also said it can surface shadow IT, fourth-party exposures, and supply-chain weaknesses. The company also referenced "undisclosed sanctions risks" as part of the issues it can identify.

Use of funds

Cyb3r Operations said it will use the new capital to scale the platform and deepen its threat intelligence work. It also said it will expand sales to more organisations dealing with third-party and supply-chain cyber risk.

The round adds to investment activity in cybersecurity tools that address supplier exposure and outsourced technology services. As companies adopt more SaaS tools and cloud services, security teams often handle a broader inventory of vendors and integrations. That can create gaps in monitoring and incident response when data or systems sit outside the perimeter of a single organisation.

Founder comments

Vincent Cook is Founder and CEO of Cyb3r Operations.

"One of the biggest problems in cybersecurity today isn't just how advanced threat actors are getting. It's that we're stumbling over our own processes. Organisations lack basic visibility into where risk actually sits," said Vincent Cook, Founder and CEO, Cyb3r Operations.

"Exporting vendor lists from CRM or procurement systems and manually uploading them into another siloed tool is no longer good enough. Most organisations have developed an allergic reaction to third-party risk management because the market is full of meaningless risk scores and static assessments that don't reflect how companies actually work," said Cook.

"Real risk sits in relationships, dependencies, employee exposure, and how those things change over time. Our mission is to enable organisations the ability to continuously detect, assess, and respond to threats in order to stay ahead," said Cook.

Investor view

Octopus Ventures led the round. Pi Labs participated as a follow-on investor.

"We invested in Cyb3r Operations because they're tackling a critical blind spot in cybersecurity: the growing gap between perceived third-party risk and real exposure. As organisations scale their digital ecosystems, risk now flows through suppliers, SaaS tools and hidden dependencies, but most teams are still operating reactively. Cyb3r Operations delivers continuous, contextual visibility across the tech stack, making third-party risk genuinely actionable," said Constanza Diaz, Investor, Octopus Ventures.

The company said it already works with some of the world's largest organisations. It did not name customers.

Cyb3r Operations said it will continue to develop its platform around continuous monitoring of third-party exposure as vendor ecosystems expand and supply-chain security remains a board-level issue.