What Lab 1 does

Lab 1 is a London-based, privately held cyber intelligence company founded in 2019 that builds an AI-powered Exposed Data Intelligence Platform. The platform inspects files across open, dark, and private data sources to detect exposed sensitive content — including customer and employee PII, financial documents, source code, legal documents, and credentials — and to surface breach risk in hours rather than weeks. Its capabilities span anomaly detection, cross-source knowledge retrieval, and natural language processing, supported by an internal research base of 141 million files analyzed across 1,297 breaches (referenced in its "Anatomy of a Breach" report).

The company monetizes through enterprise subscriptions on a quote-based, annual billing cadence, distributed via a direct enterprise sales motion with demo-request entry points. It targets Security Operations Center (SOC) teams, CISOs and security leadership, incident response teams, and data stewards, primarily in financial services, fintech, and consulting. Notable backers of the company include information security leaders at Goldman Sachs, Credit Suisse, UBS, Revolut, and McKinsey; the company has also obtained ISO and BSI certifications to support positioning with regulated buyers.

Operationally, Lab 1 remains small (1-10 employees) and seed-stage, having raised £1 million in November 2022 led by MMC Ventures and SyndicateRoom. Leadership comprises Robin Brattel (CEO) and Davide Palmisano (Chief Data Officer). Revenue is not publicly disclosed. The company is led by a content-driven top-of-funnel marketing strategy (research reports, newsletter) and is headquartered in London with a globally distributed web-accessible platform.

Name

Lab 1

Legal name

Lab 1

Website

https://lab-1.io

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

1–10 employees

Short description

Lab 1 is a London-based AI cyber intelligence platform that inspects files across open, dark, and private sources to detect exposed PII, financial documents, source code, and credentials for enterprise SOC teams, CISOs, and incident response units.

Ownership category

akta.pro rank

Product category

Cybersecurity Data Intelligence

NAICS

Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Audit, Explainability & Accountability Tooling (traceability, reporting) (HDAAAKAL)

Keywords

• Data breach detection
• Exposed data intelligence
• Cyber risk management
• Breach response platform
• AI security analytics

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations

Revenue model

1. Cyber Intelligence Platform Subscription: SaaS-based cyber intelligence platform providing breach detection and data risk management capabilities to enterprises

Pricing tiers

Go-to-market motion2 records

Distribution channels1 record

Marketing channels3 records

Core offering

Lab 1 provides an AI-powered Exposed Data Intelligence Platform that inspects files across open, dark, and private data sources to discover exposed customer and employee PII, financial documents, source code, legal documents, and credentials. The platform supports faster breach triage, enterprise-wide risk oversight, and proactive prevention of data leaks for security teams, CISOs, incident response teams, and data stewards.

Product overview

Lab 1 offers a unified exposed data intelligence platform that helps companies proactively discover, detect risk, and prevent loss across internal, structured, and unstructured data. The core Lab 1 Exposed Data Intelligence Platform combines AI inspection capabilities to analyze files and identify what's at risk, supporting use cases from breach detection to enterprise oversight. The platform targets SOC teams, CISOs, incident response teams, and data stewards to manage breach fallouts and fix exposures before they leak.

Differentiator

Problem solved

Functional benefit

Products and services

• Lab 1 Exposed Data Intelligence Platform AI-powered cyber intelligence platform that inspects files across open, dark, and private sources to discover exposed data, detect breaches, and assess cyber risks for enterprise security teams, CISOs, SOC teams, incident response partners, and data stewards.

Quantifiable outcome

• Discovers what data is at risk in hours instead of weeks and months

Named customers5 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability7 records

Feature4 records

Scale indicators2 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• DarkOwl: DarkOwl builds a proprietary dark-web data archive and exposes it through search and intelligence APIs for enterprise security teams. Its focus on dark-source data collection and exposure detection is highly comparable to Lab 1's cross-source breach discovery model.
• SpyCloud: SpyCloud recaptures stolen data from the dark web and curates breach exposure intelligence for enterprise security and fraud teams. It is the closest direct competitor to Lab 1's exposed-data intelligence platform, addressing the same SOC, CISO, and IR personas with breach-derived risk data.
• Cybersixgill: Cybersixgill collects and analyzes threat intelligence from the deep, dark, and surface web to support SOC, IR, and vulnerability management teams. It competes with Lab 1 in surfacing exposed credentials, leaked data, and breach signals from underground sources.
• Flashpoint: Flashpoint delivers finished intelligence from illicit communities, dark-web forums, and breach data to fraud, security, and IR teams. It competes directly with Lab 1 on breach-derived intelligence and shares the same enterprise SOC, CISO, and incident-response buyer.
• Constella Intelligence: Constella Intelligence provides digital risk protection and breach-exposure intelligence built from compromised data records found across the surface, deep, and dark web. It targets the same enterprise security and fraud personas as Lab 1 with comparable cross-source exposure analytics.

Emerging players

• Have I Been Pwned: Have I Been Pwned aggregates breach data and exposes credential exposure checks via APIs, with growing enterprise and identity-protection use cases. While historically consumer-facing, its breach-data corpus and API-led distribution overlap with Lab 1's breach-intelligence thesis.
• RiskBased Security: RiskBased Security aggregates and analyzes vulnerability and breach data, offering enterprise intelligence products similar in scope to Lab 1's breach analytics. It is a smaller, specialized competitor in the breach-data intelligence niche.
• SOCRadar: SOCRadar provides extended threat intelligence, dark-web monitoring, and digital risk protection to enterprises, with strong coverage in EMEA markets. It is comparable to Lab 1 in persona (SOC/CISO/IR) and in combining open, dark, and surface source monitoring.

Broad incumbents

• Recorded Future: Recorded Future is a large threat-intelligence platform that ingests data from the open, dark, and deep web to provide security teams with contextualized risk insights. It overlaps with Lab 1's cross-source breach and credential intelligence but serves a much broader threat-intelligence mandate.
• Mandiant: Mandiant (now part of Google Cloud) is a leading incident response and breach intelligence firm whose breach analytics and threat intelligence overlap with Lab 1's IR-team use case. It is a broad incumbent rather than a focused peer, offering much wider services beyond exposed-data intelligence.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds1 record

Investors2 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Lab 1