Tracebit, a cloud-native cybersecurity company focused on threat detection, has raised a $20m Series A round led by FirstMark, Tech.eu reported on 17 March 2026. Accel took part, as did MMC Ventures, Tapestry VC and CCL.
The round follows a $5m seed round in 2024 led by Accel, bringing Tracebit's total funding to $25m, according to Tech.eu. London TechWatch listed Tracebit among London startup funding deals in its report for 18 March 2026 and also put total reported equity funding at $25m. No valuation was disclosed.
What Tracebit does
Tracebit was founded in 2023 by two former Tessian employees, Andy Smith, the chief executive, and Sam Cox, the chief technology officer. It builds deception technology: the system lets organisations deploy decoy assets, called canaries, across their environments so that an intruder who touches one raises an alert. Tech.eu said the approach supports an assume-breach stance on security.
Tracebit's website describes the canaries as realistic decoy resources such as storage buckets, secrets, credentials and identities that hold no real data and are not used by anything else in the customer's stack. It says that most teams can deploy the product in minutes, often through Terraform, without installing agents or changing the network, and that the company's alerts are high-confidence because they come from an attacker touching a decoy rather than from pattern matching. These are company statements.
The site contrasts the approach with SIEM, endpoint detection and cloud posture tools, which it says rely on logs, rules and known indicators.
Tracebit's homepage cites a figure that the average attacker spends 11 days inside an environment before anyone notices, and argues that detection should sit at the start of a security programme. The company does not source that figure on the page, so it is presented here as Tracebit's own claim.
Customers and scale
According to Tech.eu, the platform currently supports thousands of accounts, monitors around five billion events each week and generates millions of canaries every day. Customers named include Riot Games, Snyk, Synthesia, Docker and Admiral Insurance.
New products and what the money is for
Tracebit began with AWS and has since widened support to Azure, Kubernetes, CI/CD pipelines, developer workstations and identity providers, Tech.eu reported. With the Series A it is introducing Perimeter Canaries, Deceptive Artefacts and support for Google Cloud Platform.
Tech.eu explained that decoys have traditionally been placed deeper inside systems to detect intrusions, while Perimeter Canaries place them at the edge of software-as-a-service and cloud environments to add a layer of defence and speed up detection. The outlet linked this to the growing threat from AI-driven attacks that can rapidly scan systems for weaknesses.
The company plans to use the Series A to roll out the new products, expand its customer base and grow its go-to-market and engineering teams. The sources reviewed did not report Tracebit's headcount or revenue, and did not include a direct quote from FirstMark or the founders.
Company website: tracebit.com