What Periphery does

Periphery (formerly qomodo, rebranded in January 2025) is an early-stage UK-based company that builds embedded AI threat management software for critical industrial and defence connected devices. Its platform is composed of a build-time assessment agent (Periphery Insights), a runtime security agent (Periphery Outpost), an announced incident-response agent (Periphery Respond), and a core Central AI engine. The technical stack is built around kernel-level eBPF packet inspection, architecture-agnostic deployment across Cortex-M, RISC-V, Linux, and RTOS targets, and a compressed on-device model that runs offline/air-gapped with a claimed sub-3% CPU footprint, which the company positions against a long list of emerging embedded-cyber regulations (EU CRA, NIS2, UK PSTI, US Cyber Trust Mark, FDA premarket guidance, UNECE R155/R156). The company released EdgeWalker as an open-source companion tool in March 2026 to drive developer adoption and feed telemetry back into the Central AI model.

Periphery's business model is enterprise sales of an integrated embedded security platform to defence, critical infrastructure, and regulated industrial buyers, delivered via a quote-based (rather than self-serve) sales motion under an early-access programme. The company is based in Leeds, UK with a recently opened San Francisco office (February 2026), operates with 1–10 employees, and has raised approximately $1.7M to date (a $120K Techstars 2023 round and a $1.6M pre-seed in May 2024). The product roadmap (Insights → Outpost → Respond) is structured to move customers from pre-deployment assessment into continuous runtime monitoring and incident response, with EdgeWalker functioning as a freemium developer on-ramp. Named 'trusted-by' logos include NATO, UK MoD, DHL, Maersk, and Saudi Aramco, though the relationship of these logos to paid contracts is not disclosed.

Channel and ecosystem development is a clear emphasis: Periphery joined the NVIDIA Inception programme in March 2026, partnered with KTTS in September 2025 for defence and industrial go-to-market, and maintains a US presence to access US defence and semiconductor customers. The company is positioned at the intersection of three regulatory tailwinds and a growing attacker focus on edge/embedded devices, but at this stage it remains a 1–10 person team with no disclosed revenue, a long enterprise sales cycle, and customer logos that have not been confirmed as paying contracts.

Name

Periphery

Legal name

Periphery Security Ltd

Website

https://periphery.security

Company type

Private

Founded year

2023

Operating status

Operating

Headcount range

1–10 employees

Short description

Periphery is a Leeds, UK-based startup (rebranded from qomodo in January 2025) that builds AI-native embedded threat management software, combining build-time assessment and kernel-level runtime monitoring via eBPF for defence and critical industrial device fleets.

Ownership category

akta.pro rank

Headquarters

HQ city

Leeds

HQ country

United Kingdom

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Embedded security software licensing (Outpost): Outpost is a runtime security agent licensed/embedded into IoT devices at the point of manufacture. Sold to device manufacturers, OEMs, defence and aerospace customers (including via channel partner KTTS). Quote-based / not publicly disclosed pricing, sold via 'Book a demo' motion.
2. Build-time assessment SaaS (Insights): Insights module is offered as a software agent integrated into the build process, with a 'Try now' / free sign-up available at app.periphery.security, indicating a freemium or self-serve SaaS motion that can expand to paid enterprise use for SBOM analysis, compliance-as-code, and security gap assessments.
3. White-label micro software agent: Periphery offers a 'white label micro software agent' for OEMs and system integrators to detect and mitigate cybersecurity threats on IoT devices, indicating an OEM/embedded licensing revenue stream.
4. Early Access Programme: Periphery runs an Early Access Programme inviting a limited number of partners to actively shape and influence the development of its cybersecurity solutions, suggesting a design-partner / co-development revenue motion ahead of general availability.

Pricing tiers

Go-to-market motion5 records

Distribution channels5 records

Marketing channels7 records

Core offering

Periphery builds and sells an embedded AI threat management platform for IoT and cyber-physical systems, delivered through two modules: Periphery Insights, a build-time AI agent for SBOM analysis, secret detection, and compliance-as-code mapping (EU CRA, NIS2, IEC 62443, NIST 800-53), and Periphery Outpost, an architecture-agnostic, sub-3% CPU runtime security agent that runs on resource-constrained Linux and RTOS devices to detect and autonomously block threats offline or in air-gapped networks. Both modules are trained and updated by a Central AI engine that compiles telemetry from deployed devices into a condensed on-device model.

Product overview

Periphery (formerly qomodo, rebranded January 2025) is an embedded AI threat management platform for critical infrastructure, defense, and connected/cyber-physical systems, sold to IoT device manufacturers, OEMs, and operators. The product is a platform-plus-modules architecture: Periphery Insights delivers point-in-time security evaluation (SBOM analysis, secret detection, regulatory compliance-as-code), Periphery Outpost provides real-time runtime defense for embedded devices, and a third module, Periphery Respond, is announced as coming soon. All modules are trained and continuously updated by Periphery's Central AI intelligence engine, which compiles telemetry from devices at the edge into behavioral profiles. The agents are architecture-agnostic, resource-light, easy to embed at the point of manufacture, and capable of operating offline or in air-gapped environments for sectors such as drones, autonomous vehicles, semiconductors, and critical national infrastructure. EdgeWalker is Periphery's free open-source companion tool that brings the same assessment logic to home and edge network users.

Differentiator

Problem solved

Functional benefit

Brands

• Periphery Outpost: Real-time runtime security agent for cyber-physical systems, providing autonomous threat monitoring for embedded devices operating in dynamic, resource-constrained, and air-gapped environments.
• Periphery Insights
• Periphery Respond
• EdgeWalker

Products and services

• Periphery Insights An AI agent for product security that integrates directly into the build process (CI/CD and BitBake/Yocto) to extract live device evidence, eliminate hardcoded secrets, perform reachability-based SBOM analysis, and produce compliance-as-code mappings for regulations such as the EU Cyber Resilience Act (CRA), IEC 62443, and NIST 800-53. Designed to take products from 'code complete' to 'audit ready' in hours rather than weeks, for device manufacturers, OEMs, and engineering teams that need audit-ready evidence at build time.
• Periphery Outpost A purpose-built runtime security agent for embedded devices and cyber-physical systems that uses on-device behavioural analysis at the kernel and application layers (including eBPF-based packet inspection) to identify and autonomously block sophisticated attacks, including zero-day exploits, without signature updates. Operates entirely on-premise with a sub-3% CPU footprint, defends autonomous AI/model integrity, and produces continuous attestation evidence for critical national infrastructure, defence, drones, autonomous vehicles, and OT operators. All data is accessible via a user-friendly UI and well-structured APIs for integration with SIEMs and dashboards.
• EdgeWalker A free, lightweight, high-precision open source home/edge cybersecurity assessment tool from Periphery that audits networks, identifies every active service (including industrial-grade management protocols), flags devices using vulnerable factory-default credentials (SSH, FTP, Telnet, SMB), and correlates detected firmware versions against the latest CVE databases. Runs on any standard Linux or Mac environment, available on GitHub, and intended for home users, security researchers, and the broader community.

Quantifiable outcome

• Detect breaches within 1 week vs. industry average of 6 months+
• +3 more outcomes

Named customers5 records

Segments6 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability8 records

Feature7 records

Partnerships

Six partnerships are on record, tiered core technology partner, flagship channel partner, minor / industry body and minor / rebrand agency.

• NVIDIA Inceptioncore technology partnerTechnology or Integration · 9 March 2026Joined NVIDIA Inception (announced 9 March 2026) to secure the next generation of AI hardware. Provides Periphery with early access to NVIDIA's latest hardware and SDKs to optimize how it protects local AI models on specialized silicon, and enables collaboration with NVIDIA experts to refine Periphery's 'embedded-native' approach to security and compliance.
• KT Technical Solutions (KTTS)flagship channel partnerChannel Partner/ Reseller/ Distributor · 4 September 2025Partnership announced 4 September 2025 to offer Periphery's embedded AI threat management for cyber-physical systems to global defence and aerospace manufacturers. Periphery joins KTTS's curated network of supplier partners, with Insights and Outpost sold globally alongside batteries, PCBAs, display systems and precision components. KTTS brings 40+ years of experience serving defence and aerospace customers.
• IoT Security Foundationminor / industry bodyOthersPeriphery is listed as a member of the IoT Security Foundation, an industry body for IoT cybersecurity. Logo displayed in website footer.
• ARPAS-UK (The UK Drone Association)minor / industry bodyOthersPeriphery is a member of ARPAS-UK, the UK Drone Association. Logo displayed in website footer.
• Commplicatedminor / rebrand agencyGTM or Marketing PartnerBranding agency that helped Periphery bring the new brand (qomodo -> Periphery) to life in January 2025. Publicly acknowledged by CEO.
• HEAVY™minor / rebrand agencyGTM or Marketing PartnerBranding agency credited alongside Commplicated for helping bring the new Periphery brand to life (January 2025).

Scale indicators11 records

Recent moves7 records

Expansion highlights5 records

Direct peers

• Armis: Armis is a leading agentless IoT/OT asset visibility and security platform used by enterprises to discover, monitor and protect connected devices. It directly competes with Periphery's connected-device security thesis across enterprise and industrial verticals.
• Claroty: Claroty secures cyber-physical systems and OT environments in critical infrastructure, manufacturing and healthcare. It is one of Periphery's closest direct peers given overlapping focus on CPS, extended IoT and operational resilience.
• Nozomi Networks: Nozomi Networks delivers OT/IoT visibility, vulnerability management and threat detection for industrial and critical infrastructure operators. It competes head-to-head with Periphery in the OT/ICS and connected-device threat management category.
• Karamba Security: Karamba Security provides embedded runtime security and integrity software for connected vehicles and IoT devices, sold to OEMs and Tier-1 suppliers. It is closely comparable to Periphery's Outpost module, particularly for automotive and industrial OEMs.
• Sternum: Sternum offers on-device, eBPF-based runtime protection and observability for IoT and embedded devices with a focus on resource-constrained environments. It is one of the closest technical peers to Periphery Outpost in terms of architecture (eBPF, kernel-level, low-CPU footprint).
• Finite State: Finite State provides firmware security, SBOM analysis and vulnerability management for connected devices and supply chains. It directly overlaps with Periphery Insights' build-time assessment, SBOM risk analysis and compliance-as-code capabilities.
• Vdoo (now part of JFrog): Vdoo, acquired by JFrog, delivered embedded device security and SBOM-driven product security analysis for IoT manufacturers. It is a direct analogue to Periphery Insights, particularly for OEM product security teams.
• Cybellum (LG Electronics): Cybellum, now part of LG Electronics' vehicle component business, provides product security and SBOM management for connected devices and automotive OEMs. It is a direct comparator to Periphery Insights in the embedded product security/compliance space.
• Ordr: Ordr delivers connected device security and asset intelligence for enterprise IoT, healthcare and OT environments. It competes with Periphery's connected-device threat management value proposition across mid-market and enterprise customers.

Broad incumbents

• CrowdStrike: CrowdStrike is a leading endpoint security incumbent expanding into IoT/OT protection via Falcon for IoT. It does not specialise in resource-constrained embedded devices to the same degree as Periphery but represents the most likely broad-incumbent threat to Periphery's expansion into adjacent endpoint use cases.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/periphery-security/edgewalker
• LinkedInlinkedin.com/company/peripherysecurity

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds2 records

Investors7 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Periphery