CodeWall has emerged from stealth with $4 million in pre-seed funding led by Osney Capital, alongside participation from InReach Ventures, Antler and angel investors. The company is developing an offensive security layer for enterprises through autonomous attack agents that begin with an external perspective and collaborate to demonstrate how an organization’s systems could be compromised.
Enterprise security has traditionally relied on adding layers of defense, deploying more tools and controls, and managing increasingly complex environments. Meanwhile, advances in AI are enabling attackers to automate entire attack chains, move more quickly and operate at unprecedented scale. CodeWall aims to address this imbalance by putting scalable offensive capabilities in the hands of defenders.
With AI, organizations can extend their offensive security capabilities beyond the number of specialists they can recruit. This enables enterprises to test their own environments from an external attacker’s perspective, uncover unexpected attack paths and determine how far a potential adversary could penetrate their systems.
“Enterprises shouldn’t have to wait for a real attacker to find out whether their defenses hold,” said Paul Price, founder and CEO of CodeWall. “That’s why we’re turning offensive security from a periodic assessment into a permanent capability, giving every enterprise an attacker that keeps looking for a way in. We’re here to put the offensive advantage in the hands of defenders.”
CodeWall is already working with banks and financial institutions to identify and verify exploitable attack paths across their environments. Earlier this year, the company’s autonomous agents discovered vulnerabilities across platforms operated by McKinsey & Company, Boston Consulting Group and Bain & Company. The research included obtaining read and write access to the production database behind McKinsey’s Lilli AI platform in just two hours.
“We’re working with CodeWall to bring autonomous offensive security into our security program, helping us test our applications more frequently and from an attacker’s perspective,” said Raghu Valipireddy, SVP, Chief Information Security Officer at Axos Financial. “As AI changes what attackers are capable of, we think it’s important to be adopting these technologies early.”
CodeWall’s platform begins from the same position as an external attacker, requiring no credentials, source code or internal access. Its specialized agents investigate different areas in parallel and exchange findings through a persistent investigation graph. A vulnerability in one application can reveal a potential route into connected systems, identities or data. The platform provides security teams with visibility into what could be compromised, the path an attacker could follow and supporting evidence to verify the findings.
Built for continuously evolving enterprise environments, the platform returns to investigate and retest within its authorized scope as systems are introduced, applications change and vulnerabilities are addressed. CodeWall aims to establish continuous adversarial testing as an ongoing enterprise security capability rather than an assessment conducted once or twice a year.
“For years, the advantage has sat with the attacker. They can keep probing, adapting and looking for another way in, while enterprises defend an environment that never stops changing,” said Paul Wilkes, Partner at Osney Capital. “What we saw in CodeWall was an opportunity to turn that dynamic on its head by giving every enterprise an attacker of its own. One that starts from the outside, with no privileged knowledge, and keeps looking for a way through.
We believe there’s a future where having an attacker working for you is as fundamental as having defenses in place, and CodeWall is building for that future.”
The new funding will support the expansion of the environments and systems accessible to CodeWall’s autonomous attack agents, alongside further development of the platform’s continuous testing, verification and remediation workflows. The company also plans to expand its offensive security, engineering, customer success and go-to-market teams in London.
To deploy CodeWall or explore career opportunities, visit codewall.ai.
__________
About CodeWall
CodeWall exists to give every enterprise an attacker of its own. Its autonomous attack agents start from the outside, without requiring credentials, source code or inside access. They share discoveries, follow weaknesses across connected systems and produce verified evidence of exploitable attack paths. CodeWall is building the offensive layer for enterprise security: sustained adversarial testing that scales beyond scarce specialists and periodic assessments, under the defender’s control.
Learn more at codewall.ai.
Join our LinkedIn group Information Security Community!
