Prevalent AI takes $22m after nine years, betting security teams need an inventory not another feed

Prevalent AI, a London cybersecurity data company, has raised $22 million from Integrity Growth Partners, the first primary capital it has taken in nine years of trading ^[1]. The product runs against the direction of most security budgets: rather than adding another telemetry source, it builds a queryable graph of the assets, controls and identities that already exist across an estate, and of which of them nobody is watching ^[2].

Mechanically, it is a data fabric that reaches into hundreds of separate enterprise systems and rebuilds what comes back as a knowledge graph that is kept current ^[2]. The company calls the graph sovereign, meaning it sits inside the customer's own infrastructure rather than a shared cloud, with the customer deciding where the underlying data physically lives ^[3]. The Next Web notes that sovereignty is doing real commercial work in that description, and that it is a word the UK market is currently paying for ^[12].

The market case leans on two Gartner numbers pointing in opposite directions. Worldwide end-user spending on information security is forecast to reach $240 billion in 2026, up 12.5 percent year on year ^[4], while Gartner separately expects more than 40 percent of agentic AI projects to be cancelled by the end of 2027, blaming escalating costs, unclear business value and inadequate risk controls ^[5]. Chief executive Paul Stokes says large enterprises do not have a shortage of tools or data but "a shortage of context," with teams asked to decide across thousands of systems, controls and identities that were never designed to work together ^[6]. Prevalent's argument is that the two Gartner findings are one problem wearing two hats ^[7].

The capital history is the more interesting part. The company says it has been profitable since its first customer, has never taken growth capital, and grew on founder-led demand ^[8]. Annual recurring revenue more than doubled over the past 12 months, according to the company, which did not disclose the underlying figure; neither the valuation nor the size of Integrity Growth Partners' stake was released ^[19]. The only prior change on the cap table came in July 2021, when Istari, the Temasek-backed cybersecurity platform, took a significant minority position through a secondary transaction ^[13]. It was founded in 2017 by Stokes and chief operating officer Arun Raj alongside a group with British intelligence heritage, including Sir Iain Lobban, director of GCHQ from 2008 to 2014 ^[14].

The outcome claims are thin in the way vendor claims usually are. Prevalent cites an international banking group that improved incident detection by more than 80 percent and a global insurer that cut the time to produce executive security reports by 95 percent; neither customer is named and neither figure has been independently verified ^[20]. Customers are described as global banks, telecoms carriers, insurers and critical national infrastructure operators ^[9], with managed services sold around the platform to shorten time to live ^[15].

The money funds a formal go-to-market organisation spanning sales, marketing, customer success and partnerships, a deeper US push, and an extension of the graph past security into financial crime analysis, compliance and wider operational risk ^[10]. Stuart Barnard joins as chief financial officer and Mike East as senior vice president of global sales ^[16]. The US expansion runs against recent traffic, with US data-security firms such as Rubrik making London their European base ^[17]. For Integrity Growth Partners, a Santa Monica firm that closed an oversubscribed $220 million fund in December, the cheque is a tenth of the vehicle ^[11][18].

Watch whether the ARR base is ever named, whether founder-led selling survives a quota structure, and whether any of those percentage improvements arrives attached to a customer willing to be identified.