Osavul raises €8.5M Series A for hybrid threat intelligence

Osavul, the Luxembourg-headquartered, Ukrainian-founded hybrid threat intelligence company, has raised a €8.5M Series A led by 33N Ventures, with Balnord, G+D Ventures and existing investor 42CAP participating, to push its NATO-proven platform beyond governments into enterprise.

Europe’s adversaries stopped respecting categories years ago – the same actor seeds a disinformation wave one week and probes an airport or a substation the next. The hard truth is that most of our security tooling is still sliced by channel. The good news is that the companies built inside the war’s pressure cooker are now selling the fix, and investors have noticed.

Below, I lay out the round, the company behind it, and what a Kyiv-built platform with a Luxembourg address tells us about where European security budgets are heading.

One specialist lead, a quadrupled contract book

Announced on 1 October 2026, the €8.5M Series A is led by 33N Ventures, the Iberian fund that invests exclusively in cybersecurity and defence software. Balnord joined, alongside G+D Ventures – the venture arm of Munich security group Giesecke+Devrient – and existing investor 42CAP. The round takes Osavul’s total funding to roughly €12M since its founding in 2022, after $1M raised in 2023 and $3M in September 2024.

The company says the new capital will accelerate its expansion, deepen its AI capabilities, build out a commercial organisation and open new markets and industries. The traction behind the raise is stated plainly in the announcement: total contract value quadrupled in 2025.

“Adversaries operate across information, cyber and physical channels at once; most security tools are still siloed,” said Carlos Alberto Silva, managing partner at 33N Ventures, in the announcement. That gap between how attacks work and how defences are organised is precisely the wedge Osavul is selling into.

Built in Kyiv, incorporated in Luxembourg

Founded in 2022 by Dmytro Plieshakov and Dmytro Bilash, Osavul started where the problem was loudest: AI that reads open sources – social platforms, messaging channels – to spot coordinated hostile information campaigns, work that grew straight out of Ukraine’s information war.

The platform today goes further. It analyses open and privileged data to identify the actors targeting an organisation, then maps that intent against its people, facilities and supply chains to flag attacks before they land. Assessments pass through analyst review, and the system can run on-premise inside sovereign environments – a hard requirement for the customers it serves.

And those customers are not trivial. Osavul is one of three companies providing NATO’s Information Environment Assessment Capability, and it works with government and defence organisations in more than ten countries, including the UK, Germany, Poland, the Nordics and the US. Enterprise traction is building in energy, transport and finance.

A $13bn market growing at 15% a year

The segment Osavul sells into is both sizeable and accelerating: the global threat intelligence market is projected to grow from $13.15bn in 2026 to $26.68bn by 2031, a 15.2% CAGR (MarketsandMarkets, September 2026). The demand driver is painfully concrete – Osavul counts more than 150 state-linked incidents across Europe since 2022, hitting energy, aviation and shipping.

For scale against our own records: September alone brought Exein’s $270M round for embedded device security, Hackuity’s $19M for vulnerability management and Kontext’s $4M seed for AI agent security – that last one led by 42CAP, the same Munich fund doubling down here. A €8.5M Series A sits at the modest end of Europe’s cyber cheques; the strategic weight of the customer list does not.

Defence-grade software is becoming a European export

So what are we seeing? First, wartime Ukrainian tooling maturing into European commercial products, on a now-familiar structure: engineering rooted in Kyiv, a legal and commercial base inside the EU – Luxembourg, in this case. Second, specialist capital stepping up where generalists hesitate: a dedicated cyber fund leading, corporate security money from Giesecke+Devrient sitting beside it. When the industry’s own strategists co-invest, the buyers’ side is telling us something.

The thing to watch is the government-to-enterprise bridge. Selling to defence ministries and selling to an airport operator or a bank are different sports, and plenty of defence-proven vendors have stumbled on the transition. A fourfold contract book in 2025 suggests Osavul’s bridge is already carrying traffic – the next 18 months will show how much weight it bears. The full picture of who is funding this category lives in our fundraising data.

Europe does not need to copy anyone’s playbook here. Hybrid threats found us first, and the companies answering them are ours to back. Watch Osavul’s enterprise push – and watch which Kyiv-built platform crosses into Europe’s boardrooms next.