British cybersecurity startup Ploy has secured £2.5 million (approximately $3.3 million) in a seed funding round to scale its AI-powered platform designed to combat the pervasive enterprise threat of “identity sprawl.” The round was led by Osney Capital, with significant participation from Superseed, Tiny.vc, and Rule30. The investment is further bolstered by a syndicate of high-profile angel investors from some of the identity and security industry’s most successful companies, including ForgeRock, Digital Shadows, Zscaler, and Rapid7.
The funding arrives at a critical moment for enterprise security. As organizations increasingly rely on a vast and decentralized ecosystem of Software-as-a-Service (SaaS) applications, identity has unequivocally become the new security perimeter. With some industry reports suggesting that as many as 80 percent of all security breaches now stem from compromised identities, the need for robust, automated governance has never been more acute. Ploy aims to address this challenge directly, targeting the fragmented access controls and poor visibility that define identity sprawl.
The Problem: Identity as the New Perimeter
The modern enterprise technology stack, often comprising hundreds or even thousands of SaaS applications, cloud platforms, and collaboration tools, has created a complex and often chaotic identity landscape. This “identity sprawl” leaves organizations vulnerable, with security and IT teams struggling to track who has access to what. The traditional method of managing these permissions—often relying on manual spreadsheets—is no longer viable.
“With 80 percent of breaches now stemming from identity, boards are realizing it’s the biggest area they need to prioritize in their security strategy,” said Jacob Prime, CEO and co-founder of Ploy. “Spreadsheet-based access tracking is now a legal and security liability. They need real-time visibility into who has access to what, before attackers or regulators find the gaps. That’s exactly the problem Ploy solves.”
This urgent need is fueling rapid expansion in the Identity Governance and Administration (IGA) market, which is projected to surge from $7.1 billion in 2023 to over $23.4 billion by 2032. Ploy is positioning itself to capture a significant share of this growth by focusing on the underserved mid-market, a segment often neglected by legacy IGA solutions that are too complex and costly to deploy.
The Solution: AI-Powered, Just-in-Time Access
Founded by former Metomic executives Jacob Prime (CEO) and Harry Lucas (CTO), Ploy has developed a cloud-first IGA platform that automates the entire employee identity lifecycle, from onboarding and role changes to offboarding. The platform distinguishes itself from legacy systems through several key innovations.
Its core principle is enforcing Just-in-Time (JIT) access, which makes all permissions temporary by default. This model drastically reduces the attack surface by ensuring employees only have the access they need, for as long as they need it, adhering to the principle of least privilege.
Embedded within the platform is an AI assistant named “Luna,” which acts as a copilot for security teams. Luna helps detect access anomalies, provides context for decision-making, and can even answer plain-language queries about the organization’s identity landscape, turning complex data into actionable intelligence.
Perhaps most critically for the mid-market, Ploy emphasizes rapid deployment. With pre-built integrations, the company claims organizations can be up and running and automating identity processes in under 20 minutes, a stark contrast to the multi-month implementation cycles common with traditional IGA vendors. The platform has already demonstrated significant traction, having secured over one million individual access entitlements and discovered more than 26,000 SaaS applications across its growing customer base, which includes notable companies like Payfit, Not On The High Street, and ComplyAdvantage.
Strategic Backing from Industry Veterans
The composition of Ploy’s investors signals a strong vote of confidence from those with deep domain expertise. Beyond the venture capital firms, the list of angel investors reads like a who’s who of cybersecurity pioneers: Johnathan Scudder (co-founder of ForgeRock), Alastair Paterson and James Chappell (co-founders of Digital Shadows), and senior executives from Zscaler, Rapid7, Egress, and ComplyAdvantage. This strategic backing provides Ploy not just with capital, but with an invaluable network of advisors and potential customers, significantly de-risking its go-to-market strategy.
Joshua Walter, Partner at lead investor Osney Capital, who will join Ploy’s board, highlighted the platform’s modern approach. “Identity sprawl has become a significant issue for organisations of all shapes and sizes, but particularly those with modern technology stacks,” he said. “Ploy’s just-in-time approach to access, making all access temporary by default, and identifying risks centrally in real-time, is becoming the only approach that scales with modern threats, ways of working and technology stacks.” This endorsement underscores the market shift away from static, role-based controls toward more dynamic, risk-aware models for securing modern, cloud-native enterprises.
Ploy’s success in raising this seed round validates the growing recognition of a major gap in the market. Legacy IGA solutions were built for a different era of enterprise IT. The explosion of SaaS has created a massive, underserved mid-market in desperate need of agile, AI-native, and easy-to-deploy solutions. Ploy’s funding signals that investors are betting on a new wave of tools designed to democratize identity security, bringing powerful, automated governance capabilities from the Fortune 500 to the broader business community. The new capital will be used to accelerate product development, scale go-to-market operations, and expand the company’s global reach.
Sources: The SaaS News, Ploy.io, Retail Technology Innovation Hub, SC Media
–
By Ji-seo Kim
