Xentra raises £2.7M to scale managed cybersecurity for UK SMEs

Xentra (Leeds, United Kingdom) has secured £2.7 million (approximately €3.18 million) from Maven VCTs and NPIF II – Maven Equity Finance, managed by Maven Capital Partners through the Northern Powerhouse Investment Fund II. No stage label is attached to the investment.

The company was founded in 2021 by Marc Fairclough under the name Fairtech Solutions, before being rebranded Xentra following an acquisition and strategic restructuring. CEO Henry Doyle now leads a team delivering managed cybersecurity, compliance, and safeguarding services to small and medium-sized enterprises through a subscription model.

A subscription platform for the SME security gap

Xentra's core product, the STAX platform, bundles cybersecurity, compliance, and safeguarding tools into modular subscription packages. The stated value proposition is operational simplification for organisations that lack a dedicated security function: rather than assembling point solutions from multiple vendors, customers access integrated tooling alongside the managed expertise to operate it. The company reports that ARR has quadrupled over the last two years across a customer base now exceeding 90 organisations.

That growth rate is the most substantive performance signal in the announcement. Ninety customers is a small absolute base; it confirms early product-market fit but does not yet demonstrate the unit economics of scaling. Managed-services businesses grow differently from pure-software SaaS: each new customer adds not just licence revenue but also service delivery cost. The central question the £2.7M must begin to answer is whether Xentra's bundled STAX approach generates enough cross-sell within accounts — compliance, then safeguarding, then a wider cybersecurity audit — to improve revenue per customer without proportional growth in professional services headcount.

Regional capital and a defined growth mandate

Maven VCTs and NPIF II constitute a regional UK investment coalition rather than a deep-tech or product-led VC. Their involvement signals confidence in the management team's execution record and the market opportunity, not in a proprietary technology claim. Lewis Jones, Investment Manager at Maven, noted that demand for outsourced subscription cybersecurity is "driven by increasing cyber risk, regulatory standards and insurance requirements" — the external triggers that push SME buying decisions. He also cited ARR quadrupling across 90-plus customers as the signal that warranted investment.

The £2.7M will fund senior leadership hires, accelerated customer acquisition, sales and marketing expansion, and continued development of the customer portal and the STAX product suite. Those are execution investments, not research bets; the company is expanding a model that works, not searching for one.

The SME cybersecurity segment across the UK is large and persistently under-penetrated: most organisations below 250 employees operate with inadequate tooling and minimal internal security expertise. Xentra's managed subscription approach is designed for exactly that buyer. Whether it can extend the model beyond Leeds and Yorkshire — and whether UK post-Brexit regulatory divergence from EU standards creates complexity for any customers with cross-border operations — will shape the ceiling on the current growth trajectory.

Doyle's framing that the funding will ensure "the high levels of service now expected as we scale" is a careful acknowledgement: managed cybersecurity is only as good as its human response layer, and a quality promise made at 90 customers is harder to keep at 300.