Summary
- Blackwall has announced a $100m Series C at a $2.2bn valuation, led by AVP with participation from Dawn Capital, MMC Ventures and Tera Ventures.
- Its platform delivers bot mitigation, DDoS protection, application security and traffic management through hosting and infrastructure providers.
- The financing will support international expansion and additional capabilities for managing automated traffic, including AI agents.
Estonia-founded Blackwall says it has raised $100 million in a Series C financing round at a $2.2 billion valuation, securing new capital to expand web traffic management and security services sold through hosting providers.
The round was led by AVP, with existing investors Dawn Capital, MMC Ventures and Tera Ventures participating. Announced on 20 October, the financing will support expansion into additional international markets and the development of capabilities for managing automated traffic, including requests generated by artificial intelligence agents.
Blackwall’s business centres on distributing technology through web hosting, cloud and managed service providers. Those partners incorporate security and traffic management services into their own offerings, allowing website operators to obtain protection through existing infrastructure suppliers.
The company says its $2.2 billion valuation represents approximately a fourfold increase from its previous funding round in 2025, when it announced a €45 million Series B. That valuation reflects the terms associated with the latest financing and should not be interpreted as annual revenue, profitability or the cash value of customer contracts.
Hosting providers control the commercial relationship
Blackwall’s distribution model gives infrastructure providers the ability to offer additional security products under their existing customer relationships. Rather than requiring every website owner to contract directly with a separate specialist, partners can incorporate Blackwall’s capabilities into hosting and managed service packages.
The company’s GateKeeper technology operates as a reverse proxy, inspecting incoming requests before they reach the application being protected. It can apply security and traffic management controls at a point where the hosting provider can manage protection across multiple customers.
Available capabilities include bot mitigation, distributed denial-of-service protection, a web application firewall, load balancing and server-side encryption.
The commercial model allows providers to offer different combinations of functionality according to customer requirements. Basic protection may be included within a hosting package, while additional traffic management or application security services can be sold separately.
This creates potential recurring revenue for hosting businesses, although the economics depend on the wholesale cost of the technology, the provider’s pricing and the level of customer demand.
Blackwall also depends on its partners’ ability to deploy, maintain and support the services. Providers remain responsible for communicating with customers and resolving operational problems that may arise when security controls interfere with legitimate website activity.
AI traffic adds demands to existing controls
Blackwall is developing its platform as automated activity becomes more varied. Traditional bot protection addresses problems including abusive scraping, credential attacks and unwanted requests that consume excessive infrastructure resources.
AI agents can produce different patterns of activity because they may retrieve information, interact with applications and complete sequences of requests on behalf of users.
Some automated interactions may be authorised and commercially useful, while others can impose unnecessary costs or attempt access that the website operator does not permit.
Blackwall says its technology uses digital fingerprinting and behavioural analysis to classify requests and distinguish acceptable activity from potentially harmful automation.
These methods can support decisions about filtering, blocking and managing traffic, but they depend on accurate interpretation. Legitimate automated services may generate unusual request volumes, while malicious clients can attempt to imitate normal activity.
Website operators therefore need controls that consider the purpose and permissions of requests as well as their technical characteristics.
Infrastructure filtering can limit unwanted traffic, while application-level authentication and authorisation determine whether a client is permitted to access protected information or perform a particular transaction.
The two functions are complementary. A hosting security service can help identify suspicious requests before they reach an application, but the application itself retains responsibility for enforcing the rules governing customer accounts and sensitive operations.
Investment supports geographic and product expansion
Blackwall intends to use the financing to expand its presence across North America, Europe, Asia-Pacific and the Middle East. Its announcement describes plans to extend the hosting-provider network and introduce additional traffic management capabilities.
International development involves integrating with infrastructure businesses using different server environments, customer management systems and operating procedures.
The company will need to support consistent security functions while allowing partners to configure services for the applications and customers they manage.
Deployment also creates requirements for reporting and technical support. Hosting companies need information about blocked traffic, application performance and service incidents so they can investigate problems without losing visibility into the controls operating on customers’ behalf.
Security performance will influence adoption. Customers must be able to use legitimate services without excessive false positives, while providers need confidence that traffic controls reduce exposure to attacks and avoidable infrastructure demand.
Maintaining that balance becomes more complicated when patterns of automated activity change. A configuration suitable for one customer may require adjustment for another, particularly where applications have different traffic profiles and access requirements.
These demands place Blackwall in competition with established infrastructure security businesses, including Cloudflare and Akamai. Its emphasis on hosting-provider distribution is a commercial distinction, although the services themselves operate in an established market.
Valuation creates expectations for execution
The $100 million financing strengthens Blackwall’s resources for expansion, but its commercial performance will depend on converting investment into deployments, recurring revenue and sustainable operating results.
The reported $2.2 billion valuation cannot establish those results independently. Blackwall has not disclosed sufficient financial information alongside the announcement to assess profitability, annual recurring revenue or the relationship between its valuation and operating earnings.
Its business model will be tested through the growth of its hosting-provider network and the extent to which partners adopt additional services.
Customer demand will also determine whether emerging AI traffic controls become a material part of the offering. Hosting providers must establish whether customers value those capabilities enough to support their cost, while maintaining the performance expected of existing websites and applications.
Blackwall’s next measurable milestones will therefore be additional provider integrations, product deployments and evidence that its services can manage unwanted automated activity without obstructing legitimate traffic.












