$2.2 billion. $100 million in fresh cash. Revenue: Undisclosed. ARR: Undisclosed. Customer count: Undisclosed, beyond “millions of websites.”
That’s the Blackwall Series C, announced today. AVP led, and Dawn Capital, MMC Ventures and Tera Ventures came back in (per Business Wire). Executive chairman Roi Carthy told TechCrunch the round quadrupled the valuation from its 2025 raise. Our math on that: the March 2025 Series B would have priced around $550 million. Blackwall didn’t publish that number then either.
So you can’t run a revenue multiple. What you can underwrite is the distribution model. That’s the whole thesis anyway.
What Blackwall actually is. It used to be BotGuard, founded in Estonia in 2019. The flagship, GateKeeper, is a reverse proxy. A DNS change points traffic at Blackwall, requests get inspected, and junk gets dropped before it hits the origin server (per Blackwall). The stack now covers bot mitigation, L7 DDoS, WAF, load balancing, certificate management and AI agent traffic. Technically it’s Cloudflare-shaped. Commercially it’s the opposite.
The channel is the product. Blackwall doesn’t sell to websites. It sells to hosting providers, MSPs and cloud hosts. They plug it in through cPanel, Plesk, WHMCS or a partner API and resell it under their own brand (per Blackwall’s docs and TechCrunch). The host sets the price. Blackwall takes a cut. In March 2025 that meant 100-plus partners, more than 2.3 million websites and a 65-person team (per TechCrunch and PR Newswire). The pitch to hosts is blunt: filter bots before they eat server capacity, cut operating costs by up to 25%, and sell security as a new line item.
Think about why that lands. A direct edge network grows by pulling a site’s DNS and its security relationship away from whoever hosts it. Every site that moves is a customer the host just got a little less important to. Blackwall tells the host: keep the customer, keep the margin, we’ll run the filtering. Blackwall pegs hosting as a $200 billion, fragmented market. Every mid-size host wants to hear that pitch.
The bull case in one stat. Imperva’s 2026 Bad Bot Report says automated traffic was more than 53% of all web traffic in 2025, up from 51% the year before. Humans are the minority now. Hosting economics were built for humans. Every bot request a host serves is compute nobody pays for. A filter that runs inside the host’s own infrastructure is a cost line first and a security product second. Cost lines are sticky.
Then add agents. Blackwall says it fingerprints the software behind a request, Microsoft Office or Codex for example, and runs its own models at the edge to judge intent (per TechCrunch). If agents end up paying for access, someone has to authenticate and meter them at the front door. Blackwall wants to be that door for the long tail of the web.
The hole. Revenue share through a channel caps your price at whatever a host can charge a small business. The end buyer is an SMB paying a bit more on a hosting plan. Millions of sites times a thin cut can still be a real number. But nobody outside the cap table knows it, and “millions of websites” is a reach metric, not a revenue metric. One sanity check: on the 2.3 million sites from March 2025, $2.2 billion is roughly $950 of valuation per protected site. The count is surely higher now. It’s still a lot per site for a product resold at SMB prices.
Competition isn’t asleep. Cloudflare already lets site owners allow, block or charge individual AI crawlers (per TechCrunch). DataDome raised $42 million in 2023 and Netacea $12 million in 2022 (per Tech Funding News). Even the “Europe’s most valuable cybersecurity scaleup” line is contested; Exein made the same claim at $1.7 billion.
What we’d ask before calling it cheap or rich. Net revenue retention by hosting partner. Revenue share from the top five hosts. How many protected sites pay for protection versus sitting on the free visibility tier, since Blackwall gives hosts the threat view for free and charges for the fix (per TechCrunch). And false positives on legitimate agents. A host that blocks a paying customer’s checkout bot churns faster than one that lets a scraper through.
For practitioners. If anything you run sits on shared or managed hosting, ask the provider who actually does the L7 filtering. It may already be Blackwall under a white label. That changes your incident path, your logs and who terminates your TLS. Find out before an outage does it for you.
Our take: this valuation is a bet on distribution, not detection. Bot detection is a crowded field. Owning the host’s control panel isn’t. If hosts stay loyal and agent traffic keeps climbing, $2.2 billion will look early. If the big edge networks keep pulling sites off small hosts, Blackwall’s channel shrinks underneath it.