Osavul targets infrastructure operators with €8.5m for hybrid-threat intelligence

Osavul announced €8.5 million in Series A funding on October 1 to expand its hybrid-threat intelligence business among enterprises and critical-infrastructure operators. For potential customers, the development is a broader commercial push by a supplier that combines information, cyber and physical risk. The round does not, by itself, establish how accurately the platform predicts attacks.

The Next Web reported the round that day. Osavul's own announcement and participating investor Balnord both confirm the funding and its intended expansion.

A wider market for connected risk

33N Ventures led the round, with Balnord, G+D Ventures and existing investor 42CAP participating. The announcements put total funding at approximately €12 million. Osavul plans to deepen its AI capabilities, build its commercial operation and enter additional markets while continuing government and defence work.

Energy, transport and financial services are among the commercial sectors identified in the funding materials. This is an expansion of the customer base, rather than evidence that those operators previously had no security coverage. The company's proposition is to connect risks that can otherwise be assessed in separate teams.

Give each signal an operational context

Osavul says it combines open and privileged data, then maps indications of hostile intent to a customer's people, facilities and supply chains. Its product descriptions cover data collection and investigation, narrative analysis, alerts and risk modelling.

For a transport operator considering such a service, a useful assessment would need to identify the relevant asset and explain why the evidence calls for action. A cluster of online messages is not sufficient on its own to prove that a physical attack will follow. Connecting signals can support an investigation; the reasoning connecting them needs to remain open to scrutiny.

That is an evaluation question for buyers, not a finding from a TechKili test. The funding releases provide no independently measured false-alert rate or accuracy score for predicting future incidents.

Read the evidence behind the security claims

There is documented background beyond the fundraising announcement. The NATO Strategic Communications Centre of Excellence's June 2024 report page credits a partnership with Osavul on information-environment research. It describes using the technology to identify hostile campaigns and coordinated groups, especially on Telegram.

That historical work supports the company's experience in analysing influence activity. It does not measure how a current enterprise deployment would forecast sabotage or cyber incidents.

Osavul and Balnord also describe analyst-reviewed, evidence-traced assessments and an on-premises deployment option. Those are supplier claims about the workflow and architecture. A customer still needs to establish who can access its data, which processing occurs locally and how retention and support access work.

Evaluate the handoff from intelligence to action

Before treating an alert as a reason to disrupt operations, an infrastructure team should ask for its supporting evidence, uncertainty and review history, then identify who owns the response. An assessment that crosses cyber and physical security also needs a clear handoff between those functions.

The new financing can fund that commercial expansion. The practical buying decision still depends on whether a deployment supplies reviewable intelligence that the customer's existing teams can use, with a defined response process.

Sources

• TNW's October 1 funding report.

• Osavul's October 1 Series A announcement.

• Balnord's funding and expansion announcement.

• Osavul's current product descriptions.

• NATO StratCom COE's June 2024 research publication.