UK-based Netsparker, a developer of web application security scanning software used by customers including Microsoft, Samsung, and NASA, raises $40M Series A
Duncan Riley / SiliconANGLE :
Context & Ripple Effects
Netsparker's $40M Series A lands in a web application security market that investors had been warming to for years — Netskope had already pulled in a $75M round led by Iconiq Capital back in 2015 for adjacent cloud and web app security. What makes this round notable is the customer base attached to it: Microsoft, Samsung, and NASA were already running the scanner, so the raise funds scaling a proven product rather than proving one.
The longer arc matters more than the round itself. The same company later re-emerged as Invicti Security — formed by merging Netsparker with rival scanner Acunetix — and went on to raise $625M led by Summit Partners in 2021, making this 2018 round the early institutional money on what became a consolidation play.
First-order effects
- Netsparker gets the capital to push its scanner beyond its existing enterprise logos (Microsoft, Samsung, NASA) into broader sales and marketing motion, competing head-on with other web app scanning vendors rather than growing organically.
- Enterprise buyers of web app security tooling gain a well-funded independent alternative at a moment when security budgets were flowing toward dedicated vendors.
Second-order effects
- Rival scanning vendors face pressure to match the funding-fueled go-to-market push — pressure that ultimately showed up as merger logic, with Netsparker and Acunetix combining into Invicti rather than fighting it out separately.
- The round helped set the pricing benchmark for follow-on security raises: Netskope's later $169M round at a $1B+ valuation and SecurityScorecard's $50M Series D show investors extending the same thesis across the appsec and risk-monitoring stack.
Third-order effects
- If the pattern holds, standalone web app security scanners consolidate into platform companies — exactly what happened when the Netsparker-Acunetix combination became Invicti and attracted a $625M round — leaving fewer independent point tools and larger, better-capitalized appsec vendors.
- For buyers like Microsoft, Samsung, and NASA, the structural shift means security scanning increasingly comes from consolidated platform vendors with private-equity-scale backing, concentrating negotiating leverage on the vendor side over time.
The trend: Web application security is consolidating from independently-funded point scanners into large platform vendors, with Netsparker's 2018 Series A as an early data point on the road to Invicti.