Prevalent AI, a London company founded by alumni of Government Communications Headquarters (GCHQ), the UK's signals intelligence agency, took its first outside capital on 24 August: £16.1m from Los Angeles-based Integrity Growth Partners, to be spent expanding into the United States1. The company builds a knowledge graph that cleans and contextualises enterprise data for banks, telecoms operators and insurers. A first institutional round at that size, from a company that had bootstrapped to it, prices an existing customer base rather than a plan.
Three weeks earlier, Bank of America said it would buy MDSec Consulting, a Macclesfield security consultancy with roughly 65 specialists, in a deal expected to complete in the fourth quarter of 2026 subject to regulatory approval2. The bank disclosed no value. It already employs more than 1,400 people in the UK and runs a cyber threat operations centre in Chester, twenty-five miles from Macclesfield, so it is buying capability next door to capacity it already has.
Risk Ledger raised a £24m Series B in July from Axiom Equity and Mercia Ventures, which was British money into a British security company at growth stage. What the fortnight shows is the direction of the larger cheques and, in MDSec's case, of the register itself. Offensive security consultancies of MDSec's size are bought rather than floated, because the asset is roughly sixty-five people and their clearances, and the acquirer that can use them best is usually a bank that already runs a security operations centre.
