Blackwall Quadruples Its Valuation to 2.2 Billion Dollars on a 100 Million Dollar Series C for AI Agent Traffic Defense

Blackwall, the Estonian company filtering web traffic for hosting providers, announced on Tuesday that it has raised a 100 million dollar Series C at a 2.2 billion dollar valuation. AVP led the round, with existing investors Dawn Capital, MMC Ventures and Tera Ventures participating. The valuation is roughly four times the level of Blackwall's previous fundraise in 2025, and comes just weeks after the company was reported to have joined Estonia's unicorn club at a one-billion-euro valuation, ranking fifth in the TopTech 2026 list of the country's most valuable technology companies. The company claims the round makes it Europe's most valuable cybersecurity scaleup to date.

Blackwall's position is unusual among security vendors: it does not sell to websites at all. Founded in 2019 in Tallinn by Nikita Rozenberg and Denis Prochko, the company deploys inside the infrastructure of web hosting providers, managed service providers and cloud platforms, where it identifies real visitors and legitimate automated traffic among malicious bots, attacks and traffic abuse - filtering billions of requests per day. Its platform spans bot mitigation, DDoS protection, a web application firewall, load balancing, server-side encryption, and, increasingly, management of agentic AI traffic, which the company describes as rapidly taking over the internet.

Telling machines apart has become the core technical problem. Blackwall uses digital fingerprinting to identify the software sending a request - distinguishing, say, a request from Microsoft Office from one sent by a coding agent such as Codex - and runs its own AI models at customers' endpoints to analyze the intent and behavior behind incoming requests. The goal is to separate an agent dispatched by a real user for a real task from a malicious bot, intruder or scraper. Customers start with a free tier that shows the traffic and threats hitting their network, then pay for protection and remediation tools.

The commercial model is white-label. Hosting providers bundle Blackwall's components, set their own prices, keep the customer relationship, and share revenue with Blackwall - a deliberately different posture from Cloudflare or Akamai, which sell under their own brands and, in the hyperscaler case, compete with providers for the same end customers. Rozenberg argues the hosting layer is the only scalable route to most of the web, in a hosting market the company sizes at 200 billion dollars and describes as deeply fragmented. The new funding will expand operations across 12 regions in North America, Europe, Asia-Pacific and the Middle East.

Investors framed the thesis in agent-era terms. Warda Shaheen, general partner at AVP, said Blackwall is "already the layer in front of millions of websites, and as more of the web's traffic comes from agents, the company in that position becomes indispensable." Norman Fiore of Dawn Capital put it more bluntly: "A tsunami of agents will overwhelm infrastructure optimised for human traffic." Dawn's portfolio materials credit Blackwall with a 30 percent improvement in malicious activity detection and a 15 to 20 percent cut in aftercare costs - figures supplied by an investor rather than independently audited.

The competitive context is real but indirect. Cloudflare's AI Crawl Control already lets websites permit, block or charge individual AI crawlers, and Akamai and Imperva occupy the same enterprise segments. Blackwall's wager is distribution: that the millions of small and mid-sized sites served by hosting providers will get their agent defenses from the provider they already pay, white-labeled, rather than migrating to a hyperscale platform. It is a bet on the long tail of the web keeping its own infrastructure.

What the round really acknowledges is that web security is becoming a machine identity problem. For three decades the industry assumed automated traffic was an anomaly to detect and block. AI agents break that assumption, because some machines are now legitimate customers - browsing, comparing, and eventually transacting on behalf of the humans who sent them. The next decade of the web will need access control, authorization and payment for machines, and the companies that build it will sit on some of the most valuable chokepoints online. Blackwall just paid 2.2 billion dollars of valuation for a seat at that table.