Lupovis

What Lupovis does

Lupovis is a Glasgow-based cybersecurity company that provides AI-driven cyber deception technology through a SaaS platform, founded in June 2021 as a spin-out from the University of Strathclyde by Dr. Xavier Bellekens and Prof. Ivan Andonovic. The company's product suite consists of Snare (Deception as a Service), a no-code platform that deploys collaborative decoys, adaptive narratives, and breadcrumb technology both inside and outside customer networks, and Prowl, an IP reputation and internet-noise identification product delivered as a usage-based API on the AWS Marketplace at $0.02 per request. Snare raises high-fidelity alerts only when adversaries interact with deception assets, with the stated goal of near-zero false positives and a mean time to deceive of under seven minutes; Prowl enriches logs with threat actor data, tactics, techniques, and procedures. The platform ingests approximately 10 million daily signals from its global sensor network and engages roughly 7 million daily threats.

The platform integrates with existing SIEM, SOAR, and notification infrastructure (Azure Sentinel, Slack, Microsoft Teams, ServiceNow, email), enabling alert delivery and incident response orchestration without custom code. Lupovis sells through a hybrid go-to-market combining direct enterprise sales, self-serve SaaS, an MSSP channel partnership with Orange Cyberdefense, and AWS Marketplace distribution. Target buyers are enterprise security teams, SOC analysts, and managed security service providers in finance, higher education, manufacturing, and insider-threat use cases. The company is venture-backed at the pre-seed stage, with disclosed funding of over £615,000 (€700k+) co-led by Techstart Ventures and Nauta Capital with participation from the University of Strathclyde, supplemented by Scottish Edge, CyberASAP, Scottish Enterprise, and CENSIS grants, and a 2024-06 investment event from Volta Ventures.

Name

Lupovis

Legal name

Lupovis

Website

https://lupovis.io

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

Lupovis is a Glasgow-based cybersecurity startup that sells an AI-driven cyber deception SaaS platform, including its Snare decoy deployment product and Prowl IP reputation API, to enterprise security teams, SOC operators, and MSSPs for high-fidelity threat detection.

Ownership category

akta.pro rank

Product category

Cybersecurity / Cyber Deception

akta.pro primary industry

Deception Technology & Threat Hunting (HDADAGAI)

akta.pro secondary industries

Deception & Honeypot-Based Network Defense (HDADABAN), Threat Intelligence, Hunting & Adversary Emulation (BPAKAHAE)

Keywords

• Cyber deception platform
• Deception as a service
• Threat intelligence API
• IP reputation lookup
• Network threat detection

Headquarters

HQ city

Glasgow

HQ country

United Kingdom

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Operations

Revenue model

1. Deception as a Service (Snare): SaaS subscription model for the deception platform. Provides no-code deployment of decoys with automated alerting and threat intelligence. Pricing likely tiered based on network size or deception assets deployed.
2. Prowl API (IP Enrichment): Usage-based API pricing for IP reputation and threat intelligence enrichment. Available on AWS Marketplace at $0.02 per request. Provides threat actor data, TTPs, and indicators of compromise for IP addresses.
3. Enterprise and MSSP Contracts: Direct enterprise sales and MSSP partnerships for larger deployments with customized configurations and dedicated support. Includes integration services and threat intelligence reporting.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels6 records

Core offering

Lupovis sells an AI-driven cyber deception platform delivered as SaaS. Its core product, Snare, deploys realistic decoys and breadcrumbs inside and outside customer networks to detect in-network attackers with high-fidelity alerts. Its secondary product, Prowl, is a global IP reputation and internet noise intelligence feed available as an API for log and SIEM enrichment.

Product overview

Lupovis offers a cyber deception platform consisting of two integrated products: Snare (Deception as a Service) as the core product for deploying no-code decoys and traps, and Prowl (IP Reputation and Internet Noise) as a threat intelligence API for IP enrichment. The platform is powered by AI to dynamically engage attackers, characterize adversary behavior against a global threat repository, and deliver high-fidelity alerts with zero false positives.

Differentiator

Problem solved

Functional benefit

Brands

• Snare: Deception as a Service platform that deploys realistic traps and decoys inside and outside of networks to detect threats with high-fidelity alerts.
• Prowl

Products and services

• Snare – Deception as a Service No-code SaaS deception platform that deploys realistic traps and decoys inside and outside customer networks, raises high-fidelity alerts when adversaries interact with deception assets, gathers threat intelligence, and integrates with SIEM/SOAR. Targeted at enterprise security teams, SOC operators, and MSSPs.
• Prowl – Identify Internet Noise / IP Reputation Global threat intelligence feed and IP enrichment API that identifies internet noise and malicious IP addresses, returning indicators of intelligence, TTPs, and adversary context for SIEM/SOAR and log enrichment use cases.
• Lupovis Deception Platform (Snare + Prowl) Integrated AI-driven deception environment combining Snare decoys with Prowl intelligence to enable proactive cyber-attack mitigation, reduce dwell times, and increase alert fidelity.

Quantifiable outcome

• Reduces mean time to deceive to under 7 minutes
• +4 more outcomes

Named customers4 records

Segments5 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration7 records

AI capability5 records

Feature5 records

Partnerships

Five partnerships are on record, tiered core, flagship and major.

• AWS (Amazon Web Services)coreTechnology or Integration · 21 July 2023AWS is a key infrastructure partner supporting Lupovis deception platform and Prowl API. Featured in AWS 'Let's Build a Startup' Twitch series. Prowl API available on AWS Marketplace for easy customer procurement.
• NCSC (National Cyber Security Centre)flagshipStrategic or Co-development Partner · 24 February 2022Chosen for NCSC for Startups program to help solve UK cyber challenges. Working with NCSC, Plexal, and industry partners including Deloitte, CyNam, Hub8, and QA on national cybersecurity innovation.
• PlexalmajorStrategic or Co-development Partner · 24 February 2022Innovation center partner in NCSC for Startups program. Provides workspace and ecosystem for cybersecurity startups working on UK government challenges.
• DeloittemajorStrategic or Co-development Partner · 24 February 2022Industry partner in NCSC for Startups program, collaborating on developing solutions to UK cybersecurity challenges.
• Orange CyberdefensemajorChannel Partner/ Reseller/ DistributorMSSP partnership where Orange Cyberdefense integrates Lupovis deception technology into their Micro-SOC offering. Enhances threat intelligence and accelerates incident response for their managed security customers.

Scale indicators7 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Pentera: Pentera automates security validation and adversary simulation, offering comparable value to deception-led early threat detection for enterprise SOC teams and MSSPs.
• AttackIQ: AttackIQ operates a breach and attack simulation platform used by enterprise and MSSP security teams to validate defenses, overlapping with Lupovis in adversary-emulation-driven threat intelligence.
• Acalvio Technologies: Acalvio offers an enterprise deception platform (ShadowPlex) with AI-driven decoy deployment and adaptive adversary engagement, directly competing with Lupovis Snare in mid-to-large enterprise SOC environments.
• CounterCraft: CounterCraft delivers a deception-based threat intelligence platform that creates realistic fake assets to detect adversaries — closely aligned with Lupovis's Snare + Prowl approach in target market and use cases.
• Cymulate: Cymulate provides breach and attack simulation with deception-influenced threat validation, serving similar enterprise security and MSSP buyers and overlapping in adversary emulation and TTP coverage.
• SafeBreach: SafeBreach is a breach and attack simulation platform that tests security controls against real adversary techniques — adjacent to Lupovis's deception-driven adversary characterization use case.
• XM Cyber: XM Cyber provides attack path management and continuous security validation, comparable to Lupovis in proactive adversary-emulation positioning and enterprise SOC buyer targeting.

Broad incumbents

• SentinelOne: SentinelOne acquired Attivo Networks and now offers deception as part of its Singularity XDR platform — a broader incumbent that bundles deception alongside endpoint and identity security, competing for the same enterprise budget.
• CrowdStrike: CrowdStrike's Falcon platform offers a broad set of detection, EDR, and threat intelligence capabilities that increasingly encompass deception-style techniques, creating platform-level competition for point deception vendors.
• Rapid7: Rapid7's InsightIDR and broader security analytics suite compete with Lupovis in SOC threat detection, with overlapping customer segments in mid-market and enterprise security teams.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• GitHubgithub.com/Lupovis
• Xx.com/lupovisdefence
• LinkedInlinkedin.com/company/lupovis

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds2 records

Investors4 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Lupovis