
The VETTDD 50 · UK startups · 2026Cybersecurity
Jacob Prime
Co-founder and CEO, Ploy · ploy.io ↗
Mid-sized companies still track who can access what in spreadsheets. Ploy’s co-founder has built an AI agent that runs their access reviews and revokes stale permissions for them
- seed round led by Osney Capital, October 2025
- £2.5m
- SaaS apps discovered across customers at the time of the round
- 26,000
- integrations listed
- 62
- Infosecurity Europe Cyber Startup finalist
- Jun 2026
Jacob Prime co-founded Ploy in London in 2023 with Harry Lucas, its chief technology officer, and is its chief executive. Both were previously leaders at Metomic. Ploy is an identity governance and administration (IGA) platform for companies with up to 5,000 employees: it automates joiners, movers and leavers, access requests and access reviews across SaaS applications, cloud platforms and collaboration tools.
A seed round and a finalist place
In October 2025 Ploy raised £2.5m in a seed round led by Osney Capital, with Superseed, Tiny.vc and Rule30. At the time it said it had secured more than a million access entitlements and discovered 26,000 SaaS apps across its customers, and had doubled revenue with four employees. Customers include PayFit, Not On The High Street, Welcome to the Jungle, ComplyAdvantage, Liberis and Times Higher Education.
“Spreadsheet-based access tracking is now a legal and security liability. Teams need real-time visibility into who has access to what, before attackers or regulators find the gaps,” Prime said.
In June 2026 Ploy was one of five finalists, selected from a worldwide field, in the first Infosecurity Europe Cyber Startup competition, pitching live to senior security leaders, investors and buyers.
An agent that does the work
Ploy’s product is now built around Luna, an AI agent that the company says carries out access requests, reviews, revocations and evidence collection rather than only flagging them. Ploy lists 62 integrations, including Okta, AWS, GitHub, Google Workspace, Microsoft, Slack and Workday, and has added agent governance, which shows what a customer’s own AI agents can reach and act as. Luno uses it to run access reviews for 600 people across three continents.
Why it matters to UK buyers and partners
Ploy says 93% of organizations suffer multiple identity incidents every year. Mid-sized UK firms face the same audit demands as larger ones, from SOC 2 to ISO 27001, usually without an identity team or an enterprise IGA budget. Ploy is priced and built for that gap, and the evidence Luna files is aimed at the auditor as much as the IT team.
It also runs a partner program for value-added resellers, managed service providers, MSSPs, consultancies and virtual CISOs. Partners get deal registration and a named Ploy migration engineer, at no cost, for each client they bring across. Ploy says its margin terms are still being written. For MSPs that already handle joiners and leavers for clients, it offers a way to run that work as a managed service on one platform.
Prime has built Ploy with a small team around a clear target: businesses that have outgrown spreadsheets but not the budget for enterprise identity tools. Its partner program suggests the next stage of growth will come through MSPs and resellers as much as through direct sales.
Jacob Prime’s leader profile →The full 2026 list →
- Ploy, Ploy raises £2.5m as 93% of businesses suffer multiple identity breaches annually, 15 October 2025
- Infosecurity Magazine, The Infosecurity Europe Cyber Startup Competition: meet the finalists, 18 May 2026
- Infosecurity Europe, Our 2026 Cyber Startup Award winner – Konvu, June 2026
- Ploy, Identity governance, handled for you (homepage), accessed 28 September 2026
- Ploy, Partner programme, accessed 28 September 2026