UK-based Netcraft, a cybercrime detection company founded in 1995, raised $100M led by Spectrum Equity in its first fundraising to date
After years of growth, funding for cybersecurity startups is beginning to slow down, a symptom of the broader economic malaise and — perhaps — market oversaturation.
Context & Ripple Effects
Netcraft is not a typical 2023 fundraising story: the UK cybercrime-detection firm has operated since 1995 and this $100M round led by Spectrum Equity is its first outside money ever, meaning it arrives with nearly three decades of self-funded operations behind it. That timing matters because it lands mid-slump — cybersecurity startup funding fell to $8.2B across 692 deals in 2023, half of 2022's total and the lowest since 2018.
The UK angle has precedent: Darktrace scaled through successive mega-rounds including its $75M Series D and later $50M Series E at a $1.65B valuation, while earlier-stage peers like SenseOn raised far smaller Series A checks. Netcraft's debut round inverts that pattern — a mature, revenue-proven company attracting a large single check precisely when early-stage deal flow is drying up.
First-order effects
- Spectrum Equity gains a controlling position in a 28-year-old detection business with no prior investor cap table to negotiate against, while Netcraft gets growth capital for the first time without having diluted founders across multiple earlier rounds.
- Netcraft now competes against venture-backed rivals like Vectra, which had already accumulated $220M+ in total funding by 2019, with fresh institutional backing of its own.
Second-order effects
- Growth-equity firms like Spectrum Equity are positioned to absorb the deal flow VCs are abandoning: with Q4 2023 cyber funding down to just $1.3B, large single checks into profitable incumbents become the efficient deployment vehicle.
- Rivals still burning venture capital face a competitor that can fund expansion from a balance sheet backed by one deep-pocketed owner, pressuring them toward profitability or exit rather than another priced round.
Third-order effects
- If the pattern holds, cybersecurity capital structures bifurcate: concentrated growth-equity stakes in mature cash-generative firms at the top, and a thinning early-stage market below — reversing the 2017-2019 era when dedicated funds like Trident Capital Cybersecurity's $300M vehicle were built to seed many small startups.
- A sector that once minted unicorns through stacked rounds may consolidate around fewer, older companies whose longevity itself becomes the diligence signal investors price.
The trend: Cybersecurity funding is rotating from broad early-stage venture rounds toward concentrated growth-equity bets on mature, self-funding companies as overall sector capital contracts.