Summary

• Osney Capital has closed an oversubscribed £60 million seed fund focused on UK cybersecurity startups.
• The firm invests at pre-seed and seed stage, specialising in early stage cyber companies.
• The fund reflects a market where cyber, national resilience, AI security, fraud, and critical infrastructure are becoming closely linked.

Osney Capital has closed an oversubscribed £60 million fund focused on early stage UK cybersecurity companies, reinforcing cyber’s move from specialist software category to national resilience market.

The firm describes itself as a sector specialist investor backing pre-seed and seed stage cybersecurity founders in the United Kingdom. Its website says the fund has closed at a £60 million hard cap and that Osney invests where round sizes are below £5 million, working with founders at the earliest stages of company building.

Osney’s positioning is tightly focused. It invests exclusively in the UK cyber ecosystem and highlights links with organisations including the National Security Strategic Investment Fund, Cyber Runway by Plexal, HMGCC Co-Creation, UKC3, and Cyber ASAP. That network matters because early stage cyber companies often need more than capital. They need access to informed buyers, trusted technical validation, procurement pathways, and sector credibility.

The fund closes as cyber risk keeps widening across the economy. Ransomware, software supply chain attacks, identity compromise, AI enabled fraud, disinformation, and operational technology threats are all pushing security into boardrooms, regulators, insurers, and public sector resilience planning. For startups, that creates opportunity but also a difficult route to market.

Cyber startups need trust before scale

Unlike many SaaS markets, cybersecurity buyers do not easily adopt unproven tools. A flawed product can create exposure, overwhelm teams, or become another system to manage. Early stage cyber companies are therefore unusually dependent on proof, references, and specialist investor support.

Seed capital can help companies build product depth before they are forced into broad commercial promises. In cyber, premature scaling can be dangerous. A startup may be tempted to sell across too many threat categories, integrate with too many platforms, or chase enterprise customers before its product is mature enough for real operating conditions.

The UK has genuine cyber strengths, including GCHQ-linked ecosystems, university research, security clusters, and a history of companies building around fraud, identity, threat intelligence, secure infrastructure, and national security adjacent markets. The challenge is converting that base into scaleups that can sell globally while keeping enough capability anchored in the UK.

Public and strategic capital has a role because cybersecurity sits close to critical national infrastructure, defence, financial services, healthcare, and democratic resilience. A generic venture model may not capture the longer sales cycles, trust requirements, and public interest value of cyber companies. Sector specialist funds can bridge some of that gap if they help founders navigate the market rather than merely pushing growth metrics.

AI is likely to intensify demand. Security teams are already dealing with automated phishing, deepfake enabled social engineering, code generation risks, and the problem of securing AI systems themselves. At the same time, attackers are probing identity systems, cloud environments, and software supply chains that underpin ordinary business operations.

Osney’s fund will be judged by the companies it helps build, not by the close itself. The useful question is whether the UK can produce cyber firms with credible technical depth, strong go-to-market discipline, and buyers beyond the domestic security ecosystem. If it can, early stage capital becomes part of a resilience strategy as well as a venture story.