← HomeAll journeys    About    Share your journey
← United KingdomThe Exclusive FeatureShare your journey
Startup Talk
The people who built United Kingdom's companies · November 2026

AI cybersecurity

Darktrace

Darktrace used unsupervised machine learning to learn a normal pattern of life for each network, device and user, then flag and respond to deviations on its own.

Poppy Gustafsson
Poppy Gustafsson. Photograph: Number 10, CC BY 2.0, via Wikimedia Commons

The company that later promised to spot attackers hiding in quiet networks was itself born inside someone else's company. Darktrace was founded in 2013 at Invoke Capital, owned by Mike Lynch, and many of its early managers came straight from Autonomy, Lynch's software firm: Poppy Gustafsson, Jack Stockdale, Nicole Eagan among them.

That is the hidden thread. It was not a garage story. It began with mathematicians and cyber-defence specialists in Cambridge, backed by a patron who could open doors, and with a team that already knew how to build and sell enterprise software.

Its Antigena product could respond on its own, and a visual tool showed activity as it happened.

Their idea was unusual. Instead of keeping a list of known threats, Darktrace used unsupervised machine learning to learn the normal pattern of life of each network, device and user. Anything that behaved oddly stood out. Its Antigena product could respond on its own, and a visual tool showed activity as it happened. The company says it can catch zero-day attacks such as Log4j.

Becoming known took visibility. It struck a partnership with McLaren Racing in 2020 and extended it in 2021. In April 2021 it listed on the London Stock Exchange at about £2.5 billion, and within months the value neared £7 billion.

Then came the price. In January 2023 the New York hedge fund Quintessential Capital alleged accounting errors, especially in contracts from before the listing. Darktrace disputed it. By July an EY review found a small number of errors and inconsistencies, none material. The share price never regained its high.

In April 2024 Thoma Bravo offered $5.3 billion. The deal completed on 1 October 2024, ending the listing. Gustafsson stepped down as chief executive in September 2024, and Jill Popelka's successor Ed Jennings took over in March 2026 after her 16 months. The last public year, 2023, showed revenue of $545.4 million and net income of $59.0 million.

For a first-time founder, the lesson is about borrowed strength. Darktrace's start was helped by an experienced network, and its trouble came when public scrutiny hit a young story. Being well introduced opens the door; it does not answer the questions asked inside.

The Chronology year by year

  1. 2013
    • founded by mathematicians and cyber-defence experts at Invoke Capital
  2. 2020
    • McLaren Racing partnership
  3. 2021
    • LSE IPO (~£2.5bn)
  4. 2022
    • buys Cybersprint for EUR47.5m
  5. 2023
    • short-seller allegations
    • EY finds small errors, not material
  6. 2024
    • Gustafsson steps down; 1 Oct 2024: Thoma Bravo deal completes
    • early 2025: buys Cado Security
  7. 2026
    • Ed Jennings CEO

The Money Trail how it was funded

  1. 2013 founded within Invoke Capital (Mike Lynch)
  2. Apr 2021 LSE IPO at about £2.5bn
  3. Oct 2024 taken private by Thoma Bravo for $5.3bn

Principal backers: Invoke Capital (Mike Lynch), Thoma Bravo (owner since Oct 2024)

The Close Calls what nearly broke it

  • Jan 2023: Quintessential Capital short-seller report alleging accounting errors, disputed
  • Jul 2023: EY found a small number of errors, not material; value fell from about £7bn peak to a takeover at $5.3bn
  • Mike Lynch controversy links
  • 2026: CEO Jill Popelka replaced after 16 months

In Their Own Words from the record

Spotted something wrong? Send a correction.

Startup Talk · Preview edition · Figures are from public sources and may be out of date