Cado Security
The business, the turning points, and the decisions behind them.
Some sections are still being researched2 / 4
Sections to complete:02 · 05
01 / WHAT IT BUILT
What the company did
Cado Security was a UK-based cyber investigation and response company founded in 2020 by James Campbell (CEO, formerly of PwC and Australia's National Incident Response capability) and Chris Doman (CTO, creator of the ThreatCrowd threat-intelligence portal). Its platform provided cloud-native digital forensics and incident response across multi-cloud, container, serverless, SaaS and on-premises environments - capturing snapshots of device data and conducting forensic investigations to uncover compromise or threats, delivering 'forensic-level detail without forensic-level effort' in minutes rather than days. It raised $31.5 million across three rounds, including a $10 million Series A in 2021 and a $20 million Series B in 2023, from investors including Eurazeo, Ten Eleven Ventures, Blossom Capital and Cylon. In January 2025 it was acquired by Darktrace for up to £131 million.
02 / FAILURE REASONS
Material for this section is being gathered and checked. It will appear here once ready.
03 / EVENT HISTORY
Events in the structured record
- Founded
James Campbell and Chris Doman founded Cado Security in London, building a cloud-native digital forensics and incident response platform.
- $10M Series A
Cado raised a $10 million Series A for its forensic investigation platform covering multi-cloud, container and on-premises environments.
- $20M Series B
Cado raised a $20 million Series B, bringing total funding to $31.5 million; investors included Eurazeo, Ten Eleven Ventures and Blossom Capital.
- Acquired by Darktrace
In January 2025 Darktrace announced its acquisition of Cado Security for up to £131 million, its first deal after being taken private by Thoma Bravo; the deal completed in February 2025, with Cado's founders and team joining Darktrace and its forensics technology integrated into Darktrace's ActiveAI Security Platform.
04 / CONTEMPORARY REBUILD ASSESSMENT
Difficulty of rebuilding this project today
Material for this section is being gathered and checked. It will appear here once ready.
Overall assessment: Not completed
05 / CAUSAL CHAIN / AFTERMATH
Material for this section is being gathered and checked. It will appear here once ready.