Cybersecurity · Industry brief

Comp AI, an AI-native governance, risk, and compliance automation startup founded in January 2025, raised $34 million in Series A funding led by Roo Capital and Grand Ventures, bringing total raised to over $36 million. The Florida-based company plans to expand its GRC platform into continuous cybersecurity with real-time monitoring and control validation, and will use the funding to hire across customer success, engineering, marketing, operations, product, and sales in Miami and New York. The round reflects growing enterprise investment in AI-driven compliance automation as organizations accelerate software delivery and seek to reduce manual compliance work through agentic AI technologies.

The Cyber Security and Resilience (Network and Information Systems) Bill brings data centres into scope as a new category of "essential services" under UK regulation, with Ofcom established as the operational regulator. The Bill expands incident reporting obligations significantly, requiring initial notification within 24 hours and full notification within 72 hours of incident awareness, capturing near-misses and pre-positioning attacks regardless of materialization. A tiered penalty regime applies for non-compliance, with regulators empowered to recover oversight costs through published charging schemes, while IT managed service providers are newly brought within scope and the Secretary of State retains power to expand the regime to additional sectors through secondary legislation.