UK Cybersecurity Startups Are Multiplying Fast. Almost None Are Scaling Up.
New cybersecurity startups are being founded across the UK at a pace nobody predicted. In 2026, 155 new companies were identified in the sector up 252% from just 44 the year before. That's the kind of number that usually signals a sector about to break out. But look one step further along the pipeline, and the picture changes: the number of UK cybersecurity scaleups stayed completely flat, at nine.
That gap between company formation and company growth is the real story in UK cybersecurity right now. It's not a sector short of ideas, founders, or early believers. It's a sector where something specific is breaking between the "we've launched" stage and the "we're scaling" stage and the funding data points fairly clearly at what that something is.
Startups are spreading out and that's mostly good news
One of the more encouraging shifts is where these new companies are being built. 86% of newly identified UK cybersecurity startups in 2026 134 out of 155 are based outside London, up from just 52% the year before. London remains an important hub, but it's no longer where most new entrants are forming.
That's a meaningfully different pattern to a lot of UK tech sectors, where funding and founder activity still concentrate heavily in the capital. Cybersecurity's spread reflects real regional strength: Cambridge and Oxford remain major sources of university spinouts (Darktrace and Featurespace trace back to Cambridge; PQ Shield and Quantum Dice to Oxford), while newer activity is showing up in places like Leeds and the North of England, where Northern Gritstone-backed Cytix and NPIF-backed Xentra have both raised funding this year. The risk, which the data doesn't fully answer yet, is whether local funding and support networks outside London are strong enough to keep pace with where the founders now are.
The money is shifting toward smaller, safer bets
Here's where the real bottleneck shows up. Funding rounds below £2.5 million have been increasing with the sharpest growth specifically in rounds under £100,000 while funding above that threshold keeps declining from an already low base. In other words: it's getting easier to get a small cheque to start something, and harder to get a meaningful cheque to grow it.
That pattern matters more in cybersecurity than in a lot of sectors, because the buyers here are often governments and large enterprises with long procurement cycles. A startup that's proven its product but needs 12–18 months of runway to close its first serious enterprise contracts is exactly the kind of company this financing gap leaves stranded too far along for a pre-seed cheque, not proven enough yet for the growth-stage investors who are pulling back.
Where the bigger checks are actually landing
It's not that later-stage capital has disappeared entirely it's concentrating hard on a small number of companies with clear enterprise traction. London cybersecurity firms alone raised $281 million across 18 rounds in 2025, a 376% increase on 2024, and the sector now carries $5.26 billion in aggregate VC and PE backing. Geordie AI closed a £22.3 million Series A, and Mindgard raised £22.22 million to scale an AI model-security platform both examples of the "AI-native security" category that's currently attracting the most investor attention, alongside identity and access management and supply-chain defence.
There's a genuine tension in the national numbers worth being upfront about: while deal formation and headline late-stage rounds look strong, Tracxn recorded total UK cybersecurity equity funding down 66% for the year to March 2026 compared with the same period in 2025. Both things are true simultaneously more companies are being founded, a handful of standout deals are landing at real scale, and yet the sector's overall funding total has fallen. That's consistent with a market getting more selective, not one collapsing.
What this means if you're building here
For founders, the read is straightforward: investors are funding two things confidently right now very early ideas, and companies with proven enterprise traction. The stage in between, where you've built something real but haven't yet closed the contracts that prove it commercially, is where UK cybersecurity is currently underfunded. If you're approaching that stage, treat your first enterprise customer relationships as fundraising assets in their own right, not just revenue investors pulling back from rounds above £2.5m are explicitly looking for that proof before they commit.
The regional shift is also worth building a strategy around rather than treating as incidental. If you're outside London, that's increasingly normal rather than a disadvantage but it does mean actively seeking out region-specific funds (Northern Gritstone, NPIF, Maven VCTs) rather than assuming London generalist VCs will find you.
FAQ
1. Is UK cybersecurity startup funding growing or shrinking in 2026?
Both, depending on what you measure. New company formation rose 252% and London-specific funding rose 376% in 2025, but total UK cybersecurity equity funding was down 66% year-on-year for the period to March 2026, according to Tracxn pointing to a market that's more selective, not smaller in ambition.
2. Why aren't more UK cybersecurity startups becoming scaleups?
The clearest signal in the data is a financing gap: funding rounds below £2.5 million are increasing, while rounds above that threshold keep declining. That leaves companies that have proven their product but need growth-stage capital to close enterprise contracts under-served.
3. Which UK cybersecurity startups are considered the strongest right now?
Seedtable's 2026 ranking places Kraken Technology Group, Quantexa and Risk Ledger at the top of the UK sector, while Darktrace, Featurespace, PQ Shield and Quantum Dice remain the most-cited university spinout successes.
Sources: SecurityBrief UK, Ellty, Tracxn, EU-Startups, Seedtable. Figures reflect the most recent available data at the time of writing (August 2026).

Comments
Post a Comment