CodeWall, a cybersecurity company building autonomous attack agents for enterprises, has raised a £3 million pre-seed round led by Osney Capital, with participation from InReach Ventures, Antler and angel investors.
CodeWall is building the offensive layer for enterprise security: specialist agents that start where an external attacker starts, without requiring credentials, source code or inside access. The agents investigate in parallel, share discoveries through a persistent investigation graph, and show defenders what could be compromised, how an attacker got there and the evidence to prove it. The platform is designed to return and retest as systems change, within an authorised scope.
CodeWall is already helping banks and financial institutions identify and verify exploitable attack paths. Earlier in 2026, its agents identified vulnerabilities across platforms belonging to McKinsey & Company, Boston Consulting Group and Bain & Company, including gaining read and write access to the production database behind McKinsey's Lilli AI platform within two hours.
Founder and CEO Paul Price said the funding will be used to expand where its autonomous attack agents can operate across the enterprise and to develop the platform for sustained testing, verification and remediation workflows. CodeWall will grow its offensive security, engineering, customer success and go-to-market teams in London.
Enterprises shouldn't have to wait for a real attacker to find out whether their defenses hold. That's why we're turning offensive security from a periodic assessment into a permanent capability, giving every enterprise an attacker that keeps looking for a way in. We're here to put the offensive advantage in the hands of defenders.
We're working with CodeWall to bring autonomous offensive security into our security program, helping us test our applications more frequently and from an attacker's perspective. As AI changes what attackers are capable of, we think it's important to be adopting these technologies early.
For years, the advantage has sat with the attacker. They can keep probing, adapting and looking for another way in, while enterprises defend an environment that never stops changing. What we saw in CodeWall was an opportunity to turn that dynamic on its head by giving every enterprise an attacker of its own. One that starts from the outside, with no privileged knowledge, and keeps looking for a way through. We believe there's a future where having an attacker working for you is as fundamental as having defenses in place, and CodeWall is building for that future.
