As artificial intelligence accelerates the pace at which software is written, tested and deployed, security teams are facing a new challenge: understanding the risk created by changes before those changes become costly incidents. UK cybersecurity startup Cytix is targeting this emerging problem with a platform designed to monitor software changes continuously and connect them directly to business risk. The company has now secured fresh funding to take its technology deeper into enterprise and regulated markets.
Fresh Capital for Cytix
Cytix has raised $7 million in Series A funding to accelerate the rollout of its change risk management platform and expand adoption among enterprise customers.
The round was led by Northern Gritstone, with participation from existing investors Auriga Cyber Ventures and NPIF II PXN Equity Finance, managed by PXN Ventures through the Northern Powerhouse Investment Fund II.
The funding will support Cytix as it expands its product, commercial operations and customer base, particularly among organisations where software governance and security controls are closely tied to regulatory requirements.
Security at Machine Speed
The growth of AI assisted software development is changing how quickly organisations can introduce new code into production.
Developers can now use AI coding assistants and autonomous agents to generate software, modify applications and complete development tasks at a speed that would have been difficult to achieve through traditional development processes.
Continuous delivery also means software can change frequently, sometimes several times a day.
Cytix argues that traditional application security tools are not designed for this environment. Vulnerability scanners can identify weaknesses in software, but they do not necessarily explain the business risk created by a particular software change.
This distinction is becoming increasingly important as organisations attempt to understand which changes require immediate attention and which can be managed through standard processes.
From Vulnerabilities to Change Risk
Cytix’s platform is built around the concept of change risk management.
Rather than assessing software only after vulnerabilities have been identified, the platform continuously monitors changes and evaluates their potential security implications as they occur.
It analyses individual updates, assesses the risks they introduce and determines what security response may be appropriate.
The system can then validate whether those risks have been addressed and create evidence documenting how each change was handled.
This provides security and compliance teams with a traceable record of software changes and the decisions associated with them.
Connecting Development With Security
Cytix operates between the software development lifecycle and an organisation’s security, risk and compliance functions.
Software engineers can continue developing and deploying applications while security teams gain a central view of what is changing across the organisation.
The platform is designed to answer three critical questions: what has changed, what risk does that change create and what action has been taken to manage it.
For regulated businesses, the ability to demonstrate how software changes were assessed and controlled can also support compliance processes.
Growing AI Security Pressure
Cytix’s funding comes as security leaders face growing uncertainty around AI generated code.
Research cited by the company found that 62 per cent of security leaders believe security risk is shifting from a latent issue into an immediate one. Meanwhile, 38 per cent strongly agree that their organisations are prepared for the volume of AI generated code entering their environments.
These figures highlight the growing gap between the speed of software development and the ability of security teams to understand its consequences.
Targeting Enterprise and Regulated Markets
With its Series A funding, Cytix is targeting broader adoption among large enterprises and regulated organisations.
Customers can access the platform directly from Cytix or through managed service partnerships with NCC Group and KPMG.
The company’s goal is to make change risk management a standard part of software governance, particularly as AI makes development increasingly autonomous.
By giving security teams visibility into software changes and their business impact, Cytix is positioning its platform as a control layer for organisations operating in an era where software can change faster than traditional security processes can respond.
