Inforcer raises $50M for AI security and Shadow AI detection for SMB MSPs

Inforcer, a London-based MSP software provider, has raised a $50 million Series C led by Insight Partners to expand its platform for managing Microsoft 365 across small and medium businesses, with new features like Shadow AI detection and threat response. For AI builders, this signals growing demand for security tools that integrate with SMB workflows and the evolution of pricing models toward per-user and consumption-based models.

What happened

Inforcer announced a $50 million Series C round led by Insight Partners, with participation from Dawn Capital and Meritech Capital. Since its 2023 launch, the company has raised three rounds totaling $110 million. Co-founder and CEO Jamie Daum told TechCrunch that business has been growing 300% year-over-year and that the company doubled its valuation between Series B and C, though the exact figure was not disclosed.

The funding will accelerate product development, including Shadow AI detection to flag employee use of unauthorized AI tools on company devices, and a threat detection and response tool to catch cybersecurity risks as they occur. Co-founder William Connor noted that attacks now take minutes to execute rather than months, with attackers using AI to analyze targets and craft convincing phishing emails.

Inforcer is also evolving its pricing. The 365 Manager was priced per client, but with the new threat-detection tool, the company is moving to a per-user model. Daum indicated that future AI products could use consumption or token-based pricing.

Why AI builders should care

The Inforcer raise reflects a broader shift: SMBs are adopting AI tools faster than their security posture can keep up, and MSPs are becoming the primary channel for delivering AI risk management. For builders creating AI products for small businesses, this means your tools need to integrate with MSP platforms and Microsoft 365 workflows rather than compete with them.

The per-user and potential token-based pricing models signal how AI security features may be priced in the SMB market. If you are building AI-powered security or compliance features, expect buyers to prefer usage-based pricing that aligns with their customer count rather than flat per-client fees.

Inforcer positions itself as complementary to Microsoft, not a competitor. This suggests there is room for specialized tools that layer on top of Microsoft 365 rather than trying to replace it. For AI builders, that means focusing on deep integration with existing SMB infrastructure rather than building standalone platforms.

Practical implications

If you are building AI tools for SMBs or MSPs, consider these takeaways:

• Shadow AI detection is becoming table stakes. As employees adopt ChatGPT, Claude, and other tools on company devices, MSPs need visibility. Building API-level detection or integration with platforms like Inforcer could be a distribution channel.
• Threat detection timelines are compressing. AI-powered attacks now execute in minutes. Your security tooling needs to respond in real time, not batch-process logs.
• Pricing flexibility matters. The shift from per-client to per-user (and potentially token-based) means your pricing model should support multiple tiers. Build for granular billing from day one.
• Microsoft 365 remains the center of gravity. Any AI security tool for SMBs should integrate with Microsoft Graph, Exchange Online, and SharePoint. Inforcer's focus on the Microsoft suite reinforces that this ecosystem is where SMB IT lives.

Caveats

Growth metrics and valuation details come from company statements in the TechCrunch article and have not been independently verified. The company did not disclose user counts, profitability, or specific revenue figures. Future pricing models (token-based, consumption) are described as possibilities, not commitments. The Shadow AI detection and threat response tools are announced but not yet widely deployed, so real-world effectiveness is unproven.

Inforcer's focus on the Microsoft ecosystem means its platform may not suit organizations using Google Workspace or other productivity suites. Builders targeting non-Microsoft SMBs should look for different integration points.