Pomegra
Manchester's Cytix raised $7m in Series A funding to monitor and flag security risks that AI-generated code changes introduce across enterprise development pipelines.
Key Takeaways:
- Cytix closed a $7m Series A on 12 August 2026, led by Northern Gritstone, with Auriga Cyber Ventures and NPIF II - PXN Equity Finance also participating.
- NCC Group and KPMG distribute the platform as a managed service, pointing to demand from regulated industries where software change governance carries compliance weight.
- The platform reached general availability on the same day the funding was announced, moving from controlled rollout to open enterprise access.
Lead
Cytix, a Manchester-based cybersecurity startup, closed a $7m Series A on 12 August 2026 - the same day it moved its change-risk platform to general release. Northern Gritstone led the round. Existing backers Auriga Cyber Ventures and NPIF II - PXN Equity Finance, the latter managed by PXN Ventures under the Northern Powerhouse Investment Fund II, also participated. Valuation was not disclosed. The capital funds enterprise rollout of a platform designed to close the gap between AI-assisted development speed and the security oversight that speed is eroding.
What Does Cytix Actually Build?
Cytix sits inside an organization's software development lifecycle and watches every code change that moves through it. The platform continuously monitors, validates, and logs commits generated by AI coding assistants and automated deployment pipelines. Security and compliance teams get a real-time view of what changed, who or what changed it, and whether it introduced risk - without requiring developers to slow down or manually annotate changes.
The company positions itself as the "security decision layer" for enterprises where deployment is continuous and pauses for review are not an option. Most existing code-security tools scan for known vulnerabilities in static code. Cytix's bet is that the more urgent threat is movement - changes shipping faster than any governance framework was designed to handle.
Why Are KPMG and NCC Group the Distribution Partners?
Both KPMG and NCC Group have taken on managed-service partnerships to bring Cytix's platform to their enterprise clients. The two firms occupy different ends of the professional services market but share an overlapping client base: large organizations in financial services, critical infrastructure, and healthcare that face regulatory pressure to document and audit software changes.
The partnerships solve Cytix's go-to-market problem without requiring a full enterprise sales build-out. For KPMG and NCC Group, the arrangement addresses a client question their existing practices could not fully answer: how do you govern the code that your AI coding tools are writing? Packaging Cytix into a managed service lets them respond without building a competing product.
The Compliance Angle Driving Demand
AI-assisted development has compressed how long it takes a single engineer to ship significant changes. That compression creates a documentation problem as much as a security one. Regulatory frameworks in financial services and critical infrastructure increasingly require organizations to evidence who changed what, when, and under what authorization. AI-generated code complicates that audit trail by design.
Static analysis and dependency scanning were built around release cadences that no longer apply at organizations running continuous deployment. Cytix is positioning its platform around this gap - the evidence-logging and validation layer that compliance teams need but that traditional security tooling does not provide.
Northern Gritstone's decision to lead is relevant context. The investor backs science and technology companies across the North of England and has a track record in cybersecurity. Its choice to front a change-governance platform, rather than a more conventional AI security product, reflects a view that the compliance friction is where enterprise budget conversations will land first.
What Does a $7M Series A Signal?
At $7m, this is a lean raise by current UK cybersecurity standards. The round size places Cytix at the stage of proving enterprise repeatability, not scaling a known playbook - which fits given the platform only reached general availability this month. The capital stack is deliberately regional: Northern Gritstone, Auriga, and two Northern Powerhouse-linked vehicles. That structure is not unusual for Manchester-based startups, but it does limit the degree to which this round signals broader institutional confidence in the category. That test comes at Series B.
Outlook
Cytix enters the market with distribution partnerships active and a regulatory tailwind that is only strengthening as AI coding tools deepen inside enterprise engineering teams. The harder commercial question is whether security and compliance budgets will carve out a dedicated line for change-risk governance, or treat the concern as a bolt-on to existing programs. If AI coding tool adoption continues to accelerate - and the current data suggests it will - that budget conversation will arrive faster than most compliance functions are ready for. Cytix is banking on being in the room when it does.
