Spur Raises $200M From Insight to Map Bot Infrastructure

The interesting part of Spur Intelligence's $200 million round from Insight Partners isn't the check size, it's the timing. TechCrunch reports the company was founded in 2017 by two former Defense Department engineers and ran fully bootstrapped for nine years before taking a dollar of outside capital. Nine years is a long time to say no to venture money, which usually means either the founders had strong opinions about dilution or the business didn't need the cash. Either way, the timing of the yes is the signal.

The context Insight is leaning on is Cloudflare's mid-2026 disclosure that bots now generate more online activity than humans. Cloudflare CEO Matthew Prince, quoted in the piece, said agentic traffic is growing so fast that bots have now passed human traffic online for the first time in the internet's history, earlier than he had predicted. Thomas Krane, the Insight managing director leading the round, framed the enterprise problem as visibility: as sophisticated criminal VPNs, residential proxy networks, and anonymization infrastructure proliferate, organizations are, in his words, operating with a critical blind spot. Spur sells IP-origin intelligence into exactly that gap, telling security and fraud teams what a request actually is before they let it through.

For buyers, the demand signal is loud. Spur's own 2026 IP Intelligence Study, cited in coverage of the round, puts 94% of organizations at having encountered anonymizing VPNs or residential proxies during security incidents, with nearly half planning to implement, upgrade, or buy a commercial IP intelligence tool inside the next twelve months. That is a market where a well-regarded bootstrapped incumbent suddenly having $200M to spend on coverage and enterprise motion matters.

The honest caveat is that the reporting does not give you Spur's valuation, revenue, customer count, or whether this is primary capital or partly secondary for the founders, so take those specifics as unreported, not settled. Nor does the piece explain how Spur distinguishes legitimate agentic AI traffic, the Claude or ChatGPT agent actually working on a user's behalf, from adversarial bot infrastructure, which is the harder problem sitting underneath the fraud one. If the company is right that the two need different treatment, the winners over the next couple of years are the fraud, ad-verification, and identity teams who wire IP-origin signals into their stack now, and the AI platforms whose agents can prove they belong.