Why Cytix Just Raised $7 Million to Tame AI-Speed Software Changes

Jan de Vries · 2026-08-12

The cybersecurity world just got a serious wake-up call. Cytix, a Manchester-based startup, has closed a $7 million Series A round to tackle something most companies haven't fully wrapped their heads around yet: the risk that comes with software moving at machine speed. Led by Northern Gritstone, with support from existing backers like Auriga Cyber Ventures and NPIF II – PXN Equity Finance, this funding isn't just another check. It's a bet on a growing problem that AI-assisted development has made impossible to ignore. ### The Problem: Software Change Has Outpaced Security Here's the thing. For years, security teams built their defenses around the idea that code changes slowly and deliberately. You'd review, test, then deploy. That worked when humans were writing every line. But that era is over. AI-assisted development, agentic workflows, and continuous delivery have flipped the script. Code now changes at machine speed, and the security models designed to govern it simply can't keep up. Ben Armstrong, CEO of Cytix, puts it bluntly: "AI-assisted development means change now happens at machine speed. Meanwhile, very few security leaders have control over, or understanding of, those changes from a risk perspective." That's the gap Cytix wants to close. ### What Cytix Actually Does Founded in 2020, Cytix has built a change risk platform designed to answer three critical questions for security teams: - Should security even care about a particular change? - What risk does that change introduce to the organization? - What action should be taken to mitigate it? It's a shift from the old way of doing things. Existing tools can tell you what vulnerabilities you have, but they can't tell you about the risk a specific change creates. Cytix aims to give security leaders that missing context, so they can prioritize what actually matters instead of chasing everything. ### Why This Funding Round Matters The $7 million Series A isn't just about keeping the lights on. It's about scaling up. The company plans to accelerate the rollout of its platform, especially targeting enterprise and regulated businesses where change governance isn't just good practice—it's a regulatory obligation. What's interesting is how they're going to market. Customers can access the platform directly through Cytix, or they can go through managed service partnerships with big names like NCC Group and KPMG. That dual approach gives them credibility and reach they wouldn't have on their own. Duncan Johnson, CEO of Northern Gritstone, sees the bigger picture: "The explosion of AI-assisted software development has led to a race to ensure software implementation remains secure. Cytix's platform aims to help enterprises take a realistic approach, recognising where change carries the most risk whilst allowing businesses to innovate." ### The Bigger Shift Happening in Cybersecurity This funding round is a signal. It tells us that the conversation is moving from "how do we find vulnerabilities" to "how do we understand risk in real time." That's a fundamental change in mindset. For security leaders, the takeaway is clear: the tools that worked five years ago won't cut it anymore. If you're building software at speed—and let's face it, who isn't—you need a way to understand what that speed means for your risk posture. Cytix is positioning itself right at that intersection. And with this new funding, they're betting that enough enterprises are feeling the same pain to make this a real business, not just a good idea. Armstrong sums it up best: "Existing tools can tell you what vulnerabilities you have, but can't tell you about the risk. We launched Cytix's change risk management platform to get control of that risk." That's the mission. And now they've got the capital to chase it.