The Venture Codex Logo

The Venture Codex

TFX Capital

1750 Hwy 160 W Ste 101-266, Fort Mill, SC, United States

Overview

TFX Capital is a B2B early-stage technology venture capital firm investing in service-driven, high-performing and commercially tested Military and National Security Veterans who have a passion for solving real-world issues by using technology to build ideas that are net new to our society.

Total investments
16
Lead investments
1
Investments · 12mo
3
Active investors
2

Sector focus

  • Finance
  • Financial Services
  • Venture Capital
Visit website

Investment portfolio

  • Apeiron Labs

    Participated · Series A · Feb 2026

    Founded in 2022 by former In-Q-Tel CTO Ravi Pappu, Apeiron Labs develops three-foot-long, 20-pound autonomous underwater vehicles (AUVs) capable of cycling 400 m up and down the water column once or twice per day to sample temperature, salinity and acoustics. Each AUV links to a cloud-based operating system that predicts resurfacing points, uploads sensor readings and refines ocean models on every dive. The cylinders can be launched from boats, airplanes and existing U.S. Navy launchers, allowing rapid, low-cost deployment in lines or arrays spaced 10–20 km apart for high-resolution coverage. Apeiron sells the data and hardware to both civilian markets such as fisheries, offshore wind developers and meteorologists, and to defense customers interested in persistent maritime monitoring. Pappu says the system already reduces the cost of ocean data collection by 100-fold and aims to achieve a 1,000-fold reduction next year. The company positions itself as a “CubeSat for the ocean,” envisioning fleets of dozens or hundreds of units providing continuous sensing. To date, Apeiron Labs has secured $29 million in venture financing, most recently closing a $9.5 million Series A round to scale manufacturing and sales of its AUVs.

  • SkyFi

    Participated · Series A · Jan 2026

    SkyFi is an Austin-based Earth-intelligence company offering a web platform, mobile app and developer APIs that make satellite imagery ordering and analytics simple and affordable. Its network of more than 50 imagery partners spans optical, SAR, hyperspectral and aerial data sources, enabling users in defense, energy, finance, agriculture, infrastructure, insurance and other sectors to derive actionable insights without specialized GIS expertise. The dual-use platform supports both civilian and military customers, featuring flexible ordering, transparent pricing and built-in AI analytics. In 2025 the company launched custom platforms for Vantor (formerly Maxar Intelligence), ICEYE US and Planet to provide instant access to high-resolution imagery. SkyFi was also selected for NATO’s DIANA 2026 Challenge Programme, highlighting its relevance to defense innovation. With fresh capital, the team plans to enhance its user interface, expand analytical tools and deepen partnerships with additional satellite operators to broaden its on-demand data offerings.

  • Tidal Cyber

    Participated · Series A · Sep 2025

    Tidal Cyber offers a Threat-Led Defense platform that helps organizations measure and improve the effectiveness of their security stack against real-world threats and adversary behavior. The platform operationalizes MITRE ATT&CK and delivers independent tools and services to align security efforts to the threats that matter without vendor bias. Tidal Cyber plans to build a comprehensive CTI and adversary behavior–driven platform to shift organizations from managing intel to proactive, threat-informed defense. The company raised $10 million in Series A funding to accelerate product innovation and fuel company growth. Tidal Cyber was founded in 2022 and is based in Reston, Va. It was co-founded by three former MITRE experts — Rick Gordon, Richard Struse, and Frank Duff — who bring extensive experience in threat-informed defense and related standards and programs. Tidal Cyber offers a Threat-Informed Defense SaaS platform (Enterprise Edition) that aggregates MITRE ATT&CK®, third-party threat intelligence, and internal research to produce Tidal Confidence Scores and Coverage Maps. The platform recently integrated Breach and Attack Simulation (BAS) test results to compare tests against existing confidence scores. The company also maintains a freely available Community Edition used by over 3,000 security professionals globally. Tidal Cyber plans to use new investment to accelerate go-to-market activities, expand sales and marketing, and enhance both Community and Enterprise Editions. The company reported customer and financial growth exceeding 10x over the past year. Founded in January 2022 by threat-intelligence veterans with experience at MITRE and the U.S. Department of Homeland Security, Tidal Cyber aims to lead adoption of Threat-Informed Defense across critical infrastructure segments. Tidal Cyber offers a threat-informed defense platform that embeds the MITRE ATT&CK knowledge base to help security operations teams focus on the most relevant adversarial tactics and techniques. The platform includes a threat profile builder to identify and prioritize relevant threats, a prioritized to-do list for daily defensive actions, a map to optimize defensive tooling, and a proprietary confidence score to assess cyber posture. Tidal’s tools aim to align threats with the right defensive capabilities and streamline communication about an organization’s security program. The company is led by CEO Rick Gordon, CTO Richard Struse, and CINO Frank Duff. Tidal plans to use newly raised capital to accelerate growth of its platform. The company is based in Reston, VA. Tidal Cyber offers a SaaS-based threat-informed defense platform that maps an organization’s security capabilities to adversary tactics and techniques, including MITRE ATT&CK and additional intelligence sources. The platform includes a registry of vendor product capabilities mapped to adversary behaviors to produce actionable insight on defensive coverage, gaps, and overlaps. Tidal provides a free Community Edition that was made generally available at Black Hat USA in early August, featuring enriched technique data and the Tidal Product Registry. The company plans an enterprise edition with enhanced features, including reporting driven by a Tidal Confidence Score to help evaluate and communicate cyber risk reduction. Led by CEO Rick Gordon, Tidal intends to use the new funding to expand the platform and ramp up customer acquisition. Financially, the company raised $4M in funding to support these product and go-to-market efforts.

  • LeakSignal

    Participated · Seed · Mar 2024

    LeakSignal builds a microservices cybersecurity platform that classifies and protects sensitive data in transit across microservices, service mesh, serverless and LLM-driven architectures. The company uses Rust and WebAssembly (WASM) within service mesh environments to perform real-time in-transit data classification, map data flows, block threats, and mitigate data leakage. LeakSignal positions its solution as addressing gaps left by API security, DLP, and DSPM tools—namely high false positives and limited visibility into production traffic such as API, log, and database flows. Its platform is used by enterprise customers including multinational banks and airlines, and the company has worked with two of the top ten largest U.S. banks and a major international airline. Headquartered in Atlanta, LeakSignal plans to accelerate product development, expand evangelism, and equip platform and security engineers with in-transit capabilities that integrate natively into modern architectures. Financially, LeakSignal recently closed an oversubscribed $1.6 million seed round to support this growth.

  • Xona

    Participated · Series A · May 2022

    Xona provides a zero-trust user access platform for industrial operations, enabling employees, contractors, consultants, vendors and part-time workers to gain secure, adaptive access to critical systems and applications. The platform is technology-agnostic, configured in minutes, and uses proprietary protocol isolation and a zero-trust architecture to eliminate common attack vectors. It gives authorized users seamless and secure control of operational technology from any location or device while reducing operational and cyber risks and increasing operational efficiency. The solution focuses on OT enterprise zero-trust user access and operational technology control. Led by CEO and founder Bill Moore, Xona sells into industrial operations environments. The company intends to use new funding to enhance its OT enterprise zero-trust user access platform. XONA offers a frictionless user access platform purpose-built for operational technology (OT) and critical infrastructure, delivering secure remote control of systems from any location or device. The product is technology-agnostic, configurable in minutes, and uses proprietary protocol isolation and a zero-trust architecture to eliminate common attack vectors. It includes integrated multi-factor authentication, user-to-asset access controls, user session analytics, and automatic video recording, acting as a single secure portal between the cyber and physical worlds. XONA has deployed its solution globally through direct sales and partners, including GE and Baker Hughes, and reports a presence in more than 25 countries. The company has more than doubled its workforce in the last six months and will use new funding to fuel product innovation and expand its footprint across energy, oil and gas, transportation, manufacturing, government and other markets. Total funding to date is $9.4 million since inception.

Team