Think Cyber Security

Think Cyber Security is a technology company.

Active

Updated: Mar 22, 2026 ·

About

Think Cyber Security develops Redflags, a Human Cyber Risk Management platform. It uses on-device behavioral telemetry and intelligent, pre-emptive nudges. Applying behavioral science, the solution fosters secure employee habits, delivering timely, context-sensitive guidance at decision points to mitigate human cyber risk beyond traditional awareness.

Co-founded in late 2016 by Dr. Mike Butler and Tim Ward, the company emerged from their extensive experience as former global heads of Information Security and Information Services. Their insight highlighted conventional security training's limitations, driving them to create a solution focused on real-time behavioral change for robust organizational defense.

Redflags serves global organizations transforming human cyber risk. The platform empowers employees with engaging cyber guidance and intelligently intervenes on devices when risky behavior is detected. Think Cyber Security envisions adaptive, workflow-integrated security awareness, enabling individuals to measurably contribute to an organization's cyber resilience.

Recent News & Mentions

Mar 1, 2024FundingThink Cyber Security - Seed

Financial History

Think Cyber Security has raised $4.0M across 1 funding round. Most recently, it raised $4.0M Seed in March 2024.

Total Raised

$4.0M

Valuation

N/A

Funding Rounds Raised

Date	Round	Lead Investors	Other Investors
Mar 1, 2024	$4.0M Seed		Fuel Ventures

Financial History

Think Cyber Security has raised $4.0M across 1 funding round.

Total Raised

$4.0M

Valuation

N/A

Deep Dive

Think Cyber Security is a London‑based cybersecurity company that builds behaviourally‑driven, real‑time security awareness products (branded Redflags/RedFlags) to reduce human risk inside organisations by nudging users away from risky actions at the moment of decision.[4][3]

High‑Level Overview

Think Cyber Security is a product company focused on operationalising security awareness through *real‑time, contextual nudges* that change user behaviour and reduce incidents such as clicking unknown links or opening unsafe attachments[3][4].- Mission: empower people to protect organisations from cyber threats by embedding measurable secure behaviours using evidence‑based behavioural and learning science.[1][4]- Investment philosophy: (applies if viewed as an investable startup) the company has attracted VC and grant backing (including Innovate UK funding and a round led by Fuel Ventures) indicating a growth‑stage, product‑market fit approach that prioritises measurable ROI for CISOs and security teams[4][6].- Key sectors: enterprise IT, financial services, government and other regulated sectors where human risk and phishing are primary concerns; customers are typically CISOs, security managers and IT teams[3][4].- Impact on the startup ecosystem: advances the security‑awareness category by shifting focus from periodic training to live, behavioural interventions—this both creates a differentiated product niche and raises competitive expectations for measurable behaviour change across other vendors[4][6].

Origin Story

Founding year and founders: Think Cyber Security (ThinkCyber) was incorporated in December 2016 and was founded by cybersecurity veterans including Tim Ward and Dr. Mike Butler; the company also traces roots to founder David Shiffman and early collaborators in their research and training work (company materials reference early training activities originating in 2016)[5][1][4].- How the idea emerged: founders combined experience from defence/enterprise security and Innovate UK‑supported research into behavioural and learning science to address a persistent problem—traditional awareness training did not produce durable behaviour change—so they developed RedFlags to provide in‑the‑moment interventions informed by cognitive psychology[1][6][4].- Early traction / pivotal moments: Innovate UK grants and participation in programs (e.g., Digital Catapult case study) helped validate the product; Fuel Ventures and other investors subsequently backed the business, and pilots reported measurable reductions in risky behaviours (examples include large decreases in unknown‑sender clicks)[6][4][3].

Core Differentiators

Behavioural science foundation: RedFlags is explicitly built on cognitive psychology and learning science rather than just content or simulated phishing campaigns, enabling interventions designed to change habits at decision time[6][4].- Real‑time, contextual nudges: the product intervenes at the moment a user is about to perform a risky action (e.g., opening an attachment or clicking a link), rather than relying solely on pre/post training modules[3][6].- Measurable outcomes: positioning and case data emphasise quantifiable reductions in risky behaviours (cited examples include large % decreases in unsafe clicks), making ROI easier to demonstrate to security teams[3][4].- Integration and coverage: RedFlags is designed to integrate with existing security infrastructure and deliver organisation‑wide coverage while allowing targeting of high‑risk populations[3].- Recognition and validation: Innovate UK funding, inclusion in Digital Catapult case studies, and investor backing (Fuel Ventures) provide third‑party validation of approach and technology[6][4].

Role in the Broader Tech Landscape

Trend alignment: Think Cyber Security rides two converging trends—(1) growing recognition that humans are the primary attack vector and (2) the shift from episodic training to continuous, context‑aware security controls—positioning it well as organisations seek scalable ways to reduce human error[4][6].- Why timing matters: increased phishing sophistication, hybrid workforces, and tighter regulatory scrutiny (data protection and incident reporting) have raised demand for measurable ways to reduce operational risk beyond technical controls[3][4].- Market forces in their favour: budgets for security awareness and human risk reduction have expanded as CISOs look for technologies with demonstrable impact; demand for behaviour‑change solutions that integrate with existing toolchains creates a growing addressable market[3][4].- Influence on ecosystem: by proving the efficacy of real‑time nudges, Think Cyber Security pressures competitors to pivot toward behavioural metrics and deeper integrations, raising the bar for what “security awareness” means in enterprise procurement[6][4].

Quick Take & Future Outlook

What’s next: expect product maturation (deeper integrations with mail gateways, EDR, and identity platforms), more robust analytics tying behavioural changes to incident reduction, and international expansion from the UK base.[3][4]- Shaping trends: continued emphasis on measurable human risk reduction, regulatory expectations around security programmes, and the use of behavioural science in security tooling will shape Think Cyber Security’s growth trajectory[4][6].- Risks and opportunities: success depends on scaling enterprise sales, proving long‑term sustained behaviour change (not just short‑term lifts), and competing with larger vendors adding behaviour‑based features; however, their evidence‑based approach and grant/investor validation are meaningful advantages[6][4].

Quick take: Think Cyber Security has carved a clear niche by combining behavioural science with real‑time interventions (RedFlags) to reduce human cyber risk—if they can scale deployments and maintain measurable impact, they are well‑positioned to redefine security awareness for enterprises.[4][3]

Sources

Frequently Asked Questions

How much funding has Think Cyber Security raised?

Think Cyber Security has raised $4.0M in total across 1 funding round.

Who are Think Cyber Security's investors?

Think Cyber Security's investors include Fuel Ventures.