Cyber threat-intel software, now packaged for operators
Critical-infrastructure operators and large enterprises are increasingly paying for threat-intelligence workflows that connect cyber signals with information operations and real-world disruption risk. Luxembourg-based Osavul is positioning its platform for that buyer, aiming to remove a familiar pain point: fragmented monitoring across information, cyber and physical domains that slows detection and response.
Osavul has raised EUR 8.5 million in Series A funding led by 33N Ventures, with participation from Balnord, G+D Ventures and existing investor 42CAP. The round brings Osavul’s total funding to approximately EUR 12 million.
What Osavul sells and why it travels
Osavul’s platform uses artificial intelligence to detect information attacks, cyber threats and indicators of emerging hybrid attacks. The company describes the product as identifying hostile intent across information, cyber and physical domains, then surfacing signals that would otherwise remain siloed.
One commercial differentiator is deployment flexibility. Osavul’s platform is deployable on-premises, allowing government, defence and enterprise customers to keep sensitive data inside their own infrastructure. For regulated operators, that can directly reduce procurement friction and shorten internal security approval cycles versus cloud-only tooling.
Osavul reports customers in more than 10 countries, including NATO, and says its technology is used by NATO and government and defence organisations across those markets.
Strategic lens: moving from sovereign buyers to scaled operators
The core move is a go-to-market expansion: Osavul is looking to broaden beyond government and defence customers into enterprises and critical-infrastructure operators. Reported target sectors include energy, transport, logistics and defence, reflecting rising demand for tools that can connect digital and physical threat signals.
This is a with-trend financing: investors are backing platforms that treat “hybrid” activity as an operational risk, not just a cybersecurity problem. The investment was framed around rising geopolitical tensions and intensified hybrid activity, including cyberattacks, sabotage, espionage and information manipulation.
For Osavul, the enterprise and critical-infrastructure push typically implies three execution requirements:
- Product packaging for non-sovereign security teams. Government and defence buyers can tolerate specialist tooling and bespoke workflows. Enterprises tend to require clearer ROI narratives, integration playbooks and repeatable deployments.
- Integration depth. Expansion in critical infrastructure often depends on how well a platform plugs into existing security operations tooling and incident processes, not only detection accuracy.
- Sales motion discipline. On-premises deployability helps, but regulated operators still buy through longer cycles and formal procurement. Building pipeline coverage, partner channels and implementation capacity becomes as important as R&D.
Investor mix signals a category bet
The round combines a cybersecurity-focused lead (33N Ventures), corporate participation (G+D Ventures) and a returning venture investor (42CAP). That mix is consistent with a company moving from early sovereign reference customers toward broader commercial adoption, where distribution, credibility and deployment support can matter as much as the underlying models.
Outlook
Osavul’s near-term opportunity is to translate defence-grade credibility into repeatable enterprise use cases, especially in sectors where on-premises requirements are hard constraints. The challenge will be proving that “hybrid threat” intelligence becomes a budgeted workflow inside security operations, rather than an episodic purchase during heightened geopolitical events.
What this enables
- Broader commercial go-to-market beyond government and defence into enterprise and critical infrastructure
- Product hardening and deployments that keep sensitive data inside customer infrastructure via on-premises options
- Sector-focused expansion into energy, transport and logistics use cases
What to watch
- How Osavul packages outcomes for enterprise buyers (use cases, integrations, and measurable response improvements)
- Evidence of repeatable deployments in critical-infrastructure accounts, where procurement and implementation are heavy
- Whether the company builds partner channels to complement direct sales in regulated markets