Cybersecurity in Europe

European cybersecurity vertical: 22 companies across 23 countries, plus 91 European software listings serving the sector.

Vertical at a glance

  • 22 companies
  • 91 software listings serving this vertical
  • 23 countries: Austria, Belgium, Bulgaria, Czech Republic, Denmark, Estonia, Finland, France, Germany, Iceland, Ireland, Italy, Lithuania, Luxembourg, Netherlands, Norway, Poland, Portugal, Romania, Spain

Companies

  • FAST LTA GmbH, Germany: FAST LTA provides secure storage solutions for backup, archiving, AI and ransomware protection, featuring air gap technology and GDPR compliance.
  • RoyaleHosting B.V., Netherlands: High-performance hosting and infrastructure with 6Tbps backbone and EU sovereign DDoS protection. Bare metal, VPS, and IP transit built to scale securely.
  • Materna Virtual Solution, Germany: MVS are experts in secure mobile working. With software approved by BSI (VS-NfD/NATO RESTRICTED), we provide "IT Security made in Germany" since 1996.
  • Logmanager, Czech Republic: Logmanager is a European vendor of a log management/SIEM platform that simplifies response to cyberthreats, compliance, and troubleshooting.
  • Trout Software, France: EU-built Zero-Trust for industrial networks. Trout secures legacy OT and IoT on-premise, no agents, no rewiring, and delivers NIS2 compliance.
  • Obrela, United Kingdom: A Gartner-recognized MDR service provider offering market-proven cybersecurity solutions and real-time risk management for clients globally.
  • IT- Security und Technologieberatung, Germany: Interims- CISO, CISO as a Service. externer Informationssicherheitsbeauftragter, Information Security Management, ISMS. ISO 27001, IEC 62443, CISSP, CISA, CISM
  • TNNet Oy, Finland: Datacenter company who has 15 years of knowledge to create Opensource hypervisor solutions with Openstack, Proxmox and KVM.
  • Cyberzy, Spain: Cybersecurity services and audits for ENS, NIS2, ISO27001 and solutions like vCISO, EDR, cybersecurity training, 24x7 Incident suport.
  • Plus.line AG, Germany: Plus.line AG provides tailored IT, managed hosting, cloud, and network solutions from ISO-certified German data centers with 24/7 support and expert service.
  • SECURIX AG / SECURIX Deutschland GmbH, Switzerland: SECURIX is part of Allurity and specializes in Identity and Access Management (IAM), Observability Security and GRC-Consulting within DACH.
  • Tievolu GbR, Germany: Cloud and on-premise DDoS protection solutions with deep packet inspection.
  • DeviDevs Technologies, Romania: DeviDevs is a software development and digital transformation agency providing custom web and mobile application solutions.
  • Argorex, Spain: Argorex: Cybersecurity services led by ex-Google. We eliminate silent security debt to enable velocity and protect valuations for high-growth tech companies.
  • SECNORA OÜ, Estonia: Secnora is a cybersecurity solution provider offering specialized services and 24/7 support to secure businesses globally.
  • OuiHeberg, France: OuiHeberg provides professional web hosting services, including VPS, dedicated servers, and domain names tailored for individuals and businesses.
  • ReeVo Cloud & Cyber Securité, France: ReeVo is a European Cloud & Cybersecurity provider offering cloud services, data protection, and security services to accelerate digital transformation.
  • Stormshield, France: Stormshield provides comprehensive cybersecurity solutions , aiming to ensure digital sovereignty and protection for institutions and businesses.
  • Blaze Information Security GmbH, Germany: Blaze is a boutique pentest firm founded in 2016, serving 200+ organizations across 25 countries, with strong roots in finance and expansion into tech & energy.
  • Adfinis The Netherlands (Adfinis IT Nederland B.V., Netherlands: Open Source solutions for cloud, security, automation and DevSecOps. Building sovereign infrastructure with 24/7 support. Incl. secrets management with OpenBao.
  • Cyberweerbaarheid.nl, Netherlands: Helps Dutch SMEs improve their digital security and resilience against cyberattacks through services and advisory.
  • PHYSEC GmbH, Germany: Holistic cyber-physical IoT/OT security

Software serving this vertical

  • Rublon, Poland: Rublon MFA protects IT resources with centrally managed multi-factor authentication, letting employees confirm logins with FIDO2 Passkeys and other methods.
  • Cloud-IAM, France: Cloud-IAM delivers managed Keycloak as a service, sovereign, open-source identity and access management hosted in Europe, zero vendor lock-in.
  • Whaller, France: Whaller is a secure, customizable collaboration platform for building social networks to facilitate professional communication and teamwork.
  • Kverno, Spain: Kverno provides sovereign security platforms designed to protect critical infrastructure and sensitive data with advanced digital defense solutions.
  • SikkerKey, Denmark: A secrets management platform facilitating secure machine authentication using Ed25519 cryptographic signatures to eliminate token leaks.
  • Defguard, Poland: Self-hosted open-code platform for enterprise-grade WireGuard VPN management, Multi-Factor Authentication (MFA), and identity management.
  • Visulox, Switzerland: amitego develops Visulox, a German privileged remote access platform providing secure, traceable access for administrators and service providers without a VPN.
  • Kopexa, Germany: Kopexa is an AI-powered GRC platform for SMEs, automating ISMS, risk management, and compliance for standards like ISO 27001, NIS2, and GDPR.
  • Double Open, Finland: Double Open provides automatic tools for detecting and managing security and license compliance within software products and supply chains.
  • Passbolt, Luxembourg: Passbolt is an open source credential platform built-first for security-conscious IT teams, yet simple enough for company-wide adoption.
  • Xopero Software | GitProtect, Poland: Xopero is a European technology leader delivering Backup & Recovery solutions that protect data from ransomware, outages, human error, and downtime.
  • PromptEasy.EU, Finland: A centralized prompt management platform and sovereign vault for AI intellectual property, offering GDPR-ready encryption and simplified workflows.
  • Bare.ID GmbH, Germany: Bare.ID provides Identity and Access Management (IAM) featuring single sign-on (SSO) and multi-factor authentication, focusing on security and GDPR compliance.
  • Enforce Administrator, Germany: Enforce Administrator by FB Pro GmbH is the leading European tool for system hardening to automate and simplify secure configuration of IT systems.
  • Entryscope UAB, Lithuania: Entryscope is an External Attack Surface Management (EASM) platform allowing organizations to map and continuously monitor their external IT attack surface.
  • SpaceTime, Finland: Cloud-based storage-as-a-service solution providing high-performance alternatives to hyperscaler storage for diverse workloads.
  • Kiel-IT GmbH, Germany: An IT system house providing managed services, IT security, and IT support for businesses in Schleswig-Holstein.
  • Ansvar Systems AB, Sweden: Open-source legal and compliance data for AI agents. Enterprise-grade threat modeling for product teams. One architecture powering both — 91 MCP servers, zero hallucination, full auditability.
  • Corma, France: Corma is the a license & access governance platform for modern IT teams.
  • MTG AG, Germany: MTG is a leading provider of advanced encryption technologies from Germany. We offer customer-driven Managed Services & On-Prem solutions for CLM, PKI, and KMS.
  • Octohide VPN, Lithuania: Octohide VPN: lightning-fast, no-logs protection with unlimited bandwidth. Free global servers and smooth switching. 20M+ users trust it.
  • DevGuard, Germany: Open-source developer security platform for hardening software-supply-chains. DevGuard is a vulnerability management platform built by developers, for developers. As an OWASP Incubating Project by L3montree (Germany), it integrates security seamlessly into the software development lifecycle—making robust security practices accessible to every team, regardless of dedicated security expertise. It is supported by the German Center for Digital Sovereignty of Public Administration (ZenDiS).
  • BeCloudTech, Romania: European provider for Hardened container images for safer software delivery.
  • OneSpace Security, Netherlands: OneSpace is a secure file-sharing platform that transfers files directly between devices over end-to-end encrypted peer-to-peer connections.
  • Dream Broker, Finland: Dream Broker provides secure European video communication software for video meetings, chat, file sharing, and video lifecycle management.
  • TrustPin, Spain: Update SSL certificates instantly, with zero downtime. OWASP-compliant certificate pinning—no app releases, no MITM risk.
  • metaeffekt GmbH, Germany: metaeffekt provides professional services and solutions for software composition analysis, license compliance, and governance in the software supply chain.
  • Rexilience S.r.l., Italy: mySCORE.is provides Cyber security Rating and Compliance Risk Evaluation platform to help companies to assess the digital security supply chain for NIS2 & DORA
  • Observes.io, United Kingdom: Observes provides outcome-focused compliance for DevOps, aligning policy and implementation to bridge the security perception gap in CI/CD environments.
  • AV-Comparatives, Austria: AV-Comparatives is an independent organization that provides systematic testing and certification for antivirus software and security solutions.
  • Engity, Germany: Engity is a European, fully managed cloud IAM platform with customizable login, strong security, and GDPR-compliant data hosting in Europe.
  • CybersecTools, Netherlands: The largest database of cybersecurity products and companies. API access to 10,000+ products, 2,800+ vendors, and 15,000+ monthly security pro visitors.
  • Daspren, France: Daspren provides data access security by centralizing usage mapping, data classification, and active data control for real-time protection.
  • Threat Landscape, Sweden: Threat Landscape is a threat intelligence SaaS suite containing threatlandscape.io and threatlandscape.ai.
  • Link11, Germany: Link11 is an IT security specialist that uses an AI-powered cloud platform to protect infrastructure and web applications from DDoS attacks and cyber threats.
  • AISafe Labs, Romania: On-demand penetration tests and code audits powered by AI agents to secure web applications.
  • iProov, United Kingdom: iProov provides biometric solutions that enable organizations to streamline secure remote onboarding and authentication for digital and physical access.
  • Rediacc, Germany: Rediacc provides a self-hosted platform for cloning production environments and disaster recovery, designed to run on users' own hardware.
  • deltaDAO AG, Germany: deltaDAO AG focusses on data & AI ecosystem, Agentic data spaces, software development, integration, operation & consulting. Operating the Pontus-X ecosystem.
  • Trapster, France: Trapster provides a comprehensive Deceptive Security solution using honeypots to secure businesses through rapid deployment and instant threat detection.
  • Scamy AI, Romania: Scamy offers an AI-powered website scanner and browser extension to protect users from online scams, phishing, and malware threats.
  • INFODAS, Germany: Military-grade cybersecurity solutions for defense, critical infrastructure, and public sector. Offers the SDoT product family for secure cross-domain data exchange, certified to the highest security levels.
  • Infinito Nexus, Germany: Infinito.Nexus enables digital sovereignty by automating self-hosted, on-premise open-source infrastructure for businesses, organizations, and individuals.
  • DC Pretorian, Germany: A platform providing direct access to certified and qualified cyber security experts from the EU at competitive prices.
  • Credenco, Netherlands: Credenco provides the European Business Wallet.
  • Contextal, Poland: Founded by the original authors of ClamAV, Contextal develops advanced solutions for contextual threat detection & intelligence.
  • Nordic Information Control AB, Sweden: The new standard for automated compliance and information security for NIS2, DORA, GDPR and the AI Act. Eliminate manual GRC work.
  • RationalEdge, Switzerland: Provides a platform for advanced threat analysis and cybersecurity intelligence, with comprehensive malware database with tens of millions of samples analysed.
  • Linutronix GmbH, Germany: Service provider for industrial Linux, real-time systems, bsps, and kernel development. We help build, secure, and maintain reliable embedded systems.
  • Halon Security AB, Sweden: Halon provides enterprise-grade email infrastructure and security solutions designed for service providers and enterprises to manage complex email flows.
  • IP Twins, France: IP Twins provides global domain name management, online brand protection, and cybersecurity services to help businesses protect their digital presence and intellectual property.
  • Modat, Netherlands: Modat founded in 2024 is AI-powered, research-driven cybersecurity company dedicated to helping security professionals outpace adversaries and stay ahead of evolving threats. By design, the Modat Magnify platform helps offensive and defensive professionals by giving them the fast, smart, easy way to stop searching and start finding. Our 'Device DNA' catalogues the essential attributes of each internet connected device to create a unique profile to support proactive cybersecurity.
  • CyberPass, France: CyberPass provides an automated platform to help businesses manage and simplify product security compliance and cybersecurity certifications.
  • Artifact Security, United Kingdom: Artifact Security is an independent cyber security testing organisation providing innovative and transparent security testing services.
  • Kikimora Agent, Bulgaria: Kikimora is an AI-powered security analyst agent designed to centralize and automate cybersecurity operations. Rather than acting as a simple chatbot, it serves as a "single pane of glass" that integrates with an organization’s existing security stack to fetch, correlate, and act on data.
  • Colchix, Ireland: Colchix intercepts LLM traffic before data leaves the EU perimeter — real-time tokenization, EU-sovereign logging, audit evidence for GDPR and AI Act.
  • CertMate, Italy: Self-hosted certificate lifecycle management: issue, renew, discover, inventory and deploy TLS certificates across your infrastructure. MIT license.
  • hifo.co, United Kingdom: Hifo.co is a platform that makes it easier for buyers to find the best in tech by making the vendor research process faster and more transparent.
  • Mailspike, Portugal: Mailspike is an email deliverability platform that offers tools for monitoring IP and domain reputation to improve email inbox placement.
  • RealTyme SA, Switzerland: Swiss-engineered secure messaging and sovereign collaboration suite for governments, professionals, and organizations. Quantum-ready, NIS2 & DORA compliant.
  • AnubisNetworks, Portugal: AnubisNetworks provides advanced email cybersecurity solutions and threat intelligence for enterprises and service providers.
  • Infin8y Software SRL, Spain: Infin8y is a creative technology studio focused on building bespoke digital technology, interactive web solutions and AI SaaS tools.
  • Infrawatch, United Kingdom: Provides real-time visibility and high-fidelity signals to track proxies, VPNs, and hostile networks for threat intelligence and fraud prevention.
  • Ermes, Italy: Ermes provides an AI-based browser security extension that protects enterprises with a zero-trust architecture, we provide real AI Protection.
  • Cordaata, Belgium: Cordaata is a cyber risk platform that builds your risk picture from your business reality and expresses it in financial terms your organisation can act on.
  • Cleanmail by Alinto, France: Cleanmail is a professional cloud-based antispam that protects you from all dangers and keeps your organisation email communications clean.
  • Onaware, Ireland: Onaware develops identity (IAM) and privacy management solutions that help regulated organisations achieve and maintain compliance.
  • Baysec, Poland: A cybersecurity firm providing threat visibility through intelligence, offensive security, and geopolitical insight powered by AI solutions.
  • Link11, Germany: Link11 is a European IT security specialist with AI and cloud-based IT security solution for WAAP, DDoS protection, network security. ISO 27001, BSI-qualified.
  • ProvenRun, France: ProvenRun provides ultra-secure software solutions and operating systems for connected devices, leveraging formal verification to ensure high-level security for IoT and automotive industries.
  • ROOTKey, Portugal: A cyber-resilience platform providing provable data integrity and audit-ready evidence to ensure operational continuity before, during, and after cyber incidents.
  • TWINSOFT biometrics GmbH & Co. KG, Germany: BioShare from TWINSOFT biometrics is a central solution for secure digital identities.
  • TWINSOFT GmbH & Co. KG, Germany: The TWINSOFT IT status report provides a continuous analysis of a company's current IT threat and security situation. The automated IT status report combines current information from sources such as the BSI, consumer advice center, and Heise-Security. It is supplemented by manual research conducted by our experts. This results in transparent analyses and trends, which can be used as a basis for making targeted recommendations to strengthen IT security.
  • FerrisKey, France: FerrisKey is a modern, high-performance open-source Identity and Access Management (IAM) solution built in Rust and designed for cloud-native scalability.
  • Licel, United Kingdom: Licel is the pioneer and global leader in mobile application and mobile channel protection, securing 12+ billion instances of protected applications worldwide. We provide everything from obfuscation, RASP, whitebox crypto to advanced threat intelligence, attack telemetry, and the most sophisticated Licel vTEE, the only software-based trusted execution environment certified under EMVCo SBMP for both Android and iOS, protecting mobile wallets, banking, and payments at scale.
  • MIA, France: MIA is a no-code Identity and Access Management (IAM) application for SMEs that centralizes and simplifies identity management and access control.
  • TraceGuard, Netherlands: TraceGuard provides predictive cyber intelligence for software supply-chain risk, combining SBOM, vendor, and compliance signals into actionable security decisions.
  • Mividas Video Solutions AB, Sweden: Mividas provides secure meetings made simple for everyone, including meeting management solutions, analytics, and automation tools for video conferencing platforms like Pexip and Cisco. Mividas gives the und user the ability stay sovereign with an on-prem or fully air-gapped deployment or go the hybrid approach to leverage cloud assets.
  • SimpleBackuos, Belgium: SimpleBackups is a backup automation platform for developers, agencies, and SaaS teams. It automates backups for databases, servers, cloud storage, and SaaS apps through a simple, centralized dashboard. Encrypted in transit and at rest, it gives teams full control over their storage and recovery processes. Reliable, developer-friendly backups, without the complexity.
  • HTTP Toolkit, Spain: A suite of open-source tools for intercepting, debugging, and testing HTTP(S) traffic on Windows, Linux, and Mac.
  • Dectar, Ireland: Dectar an Irish-Italian cybersecurity company develops unique all-in-one unified cyberdefense platform ACSIA SOS.
  • CYBORUX, Spain: Cyborux provides external exposure intelligence to help organizations identify and secure their internet-facing assets and digital footprint.
  • Keystrike, Iceland: Keystrike provides continuous remote access governance through hardware-rooted identity verification to prevent session hijacking and unauthorized access.
  • Infoquestpro Sp. z o.o., Poland: IT Solutions and Services Providers
  • NovaStor GmbH, Germany: Backup software that competes with any famous products; made in Germany
  • web&co, Austria: Anbieter von digitalen Lösungen, Web und Mobile Applikationen Spezialsiert auf das NEOS CMS, ein Content-Mansgoment-System basierend auf strukturierte Daten. web&co bietet vom Managed Hosting, über Dev-Ops, Monitoring, Development und Optimierung von Websystem alles an
  • Achtwerk GmbH & co. KG, Germany: IRMA®: Passive OT network monitoring, anomaly detection, OT asset - , vulnerability and risk management. Attack detection system (SzA), BSI-CS134 Passives OT-Netzwerkmonitoring, Anomalierkennung, OT-Asset-, Schwachstellen-, Risiko-Management. System zur Angriffserkennung (SzA), BSI-CS134
  • Optimalisert AS, Norway: Optimalisert is a Norwegian consultancy helping businesses implement AI in a practical and ethical way. They specialize in automating routine tasks and providing secure AI assistants through their LokaliQ solution. By focusing on GDPR compliance and data security, they bridge the gap between complex technology and real-world value, helping companies save time and work smarter. We turn AI into a reliable, "optimized" coworker.
  • Hovi, Finland: Hovi is a digital identity platform, allowing businesses to integrate with EUDI and other digital identity infrastructures using verifiable credentials technology.
  • Zero.ms, Romania: Zero.ms provides enterprise-grade, low-latency IP transit with advanced DDoS protection and immediate mitigation for game servers and critical infrastructure.
  • IRM360, Netherlands: We support organisations — from SMEs to government, healthcare, critical entities and enterprises — in managing cybersecurity, privacy, AI and business continuity risks, as well as in demonstrating compliance and certification and governance In a single integrated platform, you can secure ISO 27001, Cbw-NIS2, GDPR, DORA, AI legislation and 46+ other standards and frameworks. Based on Plug & Play management systems, such as the ISMS for information security and expandable to full a GRC solution.