Six UK cyber startups join drive to shield key services

Six UK cybersecurity startups have been selected for a new government-backed programme targeting rising cyber threats to critical national infrastructure.

The Cyber Runway CNI initiative brings together small and medium-sized cybersecurity firms with operators in sectors such as energy, water, telecoms, transport and data centres. The move follows a sharp increase in serious online incidents affecting national services. According to the National Cyber Security Centre, "highly significant" cyber attacks that seriously affect central government, UK services, the public or the wider economy have grown by 50% over the past year. This marks a rise for the third consecutive year.

The Department for Science, Innovation and Technology has funded the new programme, which is being delivered by Plexal, an innovation and growth company that works with government and industry. The initiative forms part of the Cyber Growth Action Plan, which aims to expand the UK cybersecurity sector and raise risk awareness in organisations.

New CNI programme

Cyber Runway CNI focuses on cyber threats faced by critical national infrastructure organisations. The programme links six specialist SMEs with operational leaders and security chiefs from operators of essential services. Plexal and DSIT have also recruited representatives from CNI operators, including Chief Information Security Officers. These executives will share first-hand accounts of the security challenges they face and will gain access to vetted products from the participating SMEs. CISOs will be able to examine how these products map to their specific problem areas.

The programme is designed as a cross-sector collaboration. SMEs will gain access to CNI buyers, investors and growth advice, while CNI organisations will see new tools, regulatory insights and supply chain initiatives.

Diane Gilbert, Senior Innovation Lead for Programmes at Plexal, said:

"At Plexal, we understand there's an abundance of UK cyber businesses developing powerful solutions to combat online threats but finding a route to market - especially involving large firms - isn't straightforward. On the other side, we've seen so many high-profile industry attacks throughout this year, the NCSC has declared 'cyber risk is no longer just an IT issue, it's a boardroom priority'."

She added:

"Cyber Runway CNI is positioned to improve the resilience of organisations that are critical to a functioning British society. We're working together with cyber SMEs and critical operations to build sovereign cyber capability. We'll achieve this by accelerating the adoption of British security solutions across CNI sectors to enhance resilience, regulatory readiness and supply chain integrity."

Selected startups

The six SMEs selected for Cyber Runway CNI cover areas ranging from network isolation to quantum-safe encryption and AI-based compliance:

• APIContext is developing a monitoring and governance platform for application programming interfaces. The company focuses on performance, security and compliance for mission-critical APIs. Its product provides real-time visibility across APIs and runs automated checks on whether APIs conform to agreed-upon rules and standards. The firm said this structure supports reliable and standards-compliant interfaces.

• CloudPeek is building an artificial intelligence-powered cloud security platform. The company targets organisations in government, defence and critical infrastructure. Its system combines AI agents, contextual risk analysis and automated remediation. The aim is to detect vulnerabilities and reduce exposure in complex cloud environments.

• Goldilock has created FireBreak, a cybersecurity product that provides instant remote physical isolation of networks. The technology does not rely on internet-based controls and lets organisations disconnect critical systems on demand. The company said this reduces attack surfaces and limits the spread of ransomware across IT and operational networks.

• Hacktonics focuses on cybersecurity training for industrial control systems. The company offers hands-on courses and bespoke programmes. The content targets operators in water, energy and transport networks. The training links theoretical concepts with practical scenarios in operational environments.

• KETS Quantum Security develops chip-based quantum-safe products. Its portfolio includes quantum key distribution technology and quantum random number generators. The products target sectors such as critical infrastructure, telecoms and defence. The company said these systems support encryption that is designed for future quantum computing threats.

• Praeferre is building an AI-based compliance and data privacy platform. The product focuses on regulatory governance and secure digital ecosystems for large organisations. It includes blockchain-based consent management and real-time policy enforcement, and uses a zero-trust approach to data flows. The firm said this structure supports safer use of AI and transparent data practices.

National focus

Plexal said the Cyber Runway CNI programme will run alongside its wider work with government, industry and academia on security and growth. The company operates from hubs in London, Manchester and Cheltenham, and works with partners including DSIT and the National Cyber Security Centre on technology and security initiatives.

The new CNI-focused track sits within these broader efforts to link early-stage firms with large organisations in sensitive sectors. The participating SMEs will now engage with CNI operators and security leaders over the course of the programme as they test and refine their products against live industry requirements.