Luxembourg is celebrating 10 years of participation in the InCyber Forum (FIC) this year, further strengthening its expertise in cybersecurity under the aegis of the Luxembourg House of Cybersecurity (LHC).
In this series of interviews, we highlight the companies and institutions representing Luxembourg at the event in early April. Here, experts from RCDevs, shares his insights on the evolving cybersecurity landscape, key challenges for 2025, and how Luxembourg is reinforcing its commitment to data protection and innovation.
What are your company’s main news and innovations in cybersecurity for 2025?
Our world is changing at an astonishing rate. So is the world of cybersecurity, and CIOs have a more difficult and critical task than ever: they are facing two simultaneous shocks that represent a real break with the past.
First, the exponential progress of AI is fundamentally changing the threat environment, making attacks more sophisticated, faster, more credible, and more systematic.
Second, geopolitical tensions in Europe have exposed vulnerabilities in our vital public and private services, while alliances we once considered immutable have proven uncertain, particularly with the United States.
The CIOs we speak with are facing these dual constraints right now: combating AIpowered attacks while urgently relocating their services and data to intra-European solutions due to uncertainty about the future.
What do you think are the major cybersecurity challenges in 2025, and how is your company responding to them?
The rise of AI-powered attacks represents a significant technical challenge. While autonomous botnets and AI-driven DDoS attacks adapt dynamically to overwhelm defenses and exploit vulnerabilities at scale, deepfakes are on the rise and social engineering becomes increasingly effective as deception tools grow more sophisticated. This shift enables systematic targeting rather than selective approaches.
In response, RCDevs has made strategic choices:
Rather than joining the AI arms race where defensive tools always lag behind evolving attacks, we believe that as the digital world grows more complex, security must rely on physical realities—factors that AI cannot manipulate at will. We’ve evolved our tools and tokens to only grant access when employees are in predefined locations, during established hours. And to automatically shut down all access outside these conditions, ensuring the attack surface is reduced to its absolute minimum.
Simultaneously, the continued growth of BYOD and remote work expands vulnerability zones in enterprise defense lines. RCDevs has ensured that security levels remain equally high whether employees connect from the office or elsewhere, using personal or company devices. Locations, schedules, and devices can all be authorized and managed individually with granular access policies.
Why did you choose to participate in FIC 2025, and what are your objectives for this event?
The current European geopolitical situation presents immediate challenges for businesses and public services. Beyond protecting systems from attacks and ensuring service continuity, organizations increasingly recognize the strategic importance of Europeanhosted solutions. Recent shifts in transatlantic relations have heightened uncertainty, accelerating the need for data sovereignty and reducing reliance on non-European cloud services.
As a result, more organizations are telling us they must move quickly to sovereign alternatives—not only to strengthen data sovereignty and compliance with EU regulations but also to mitigate future risks linked to geopolitical instability. This assessment has led us to establish dedicated secure datarooms hosted on EU soil, as well as new secure email offerings. Of course, we continue to offer these services on-premises, which is our trademark, along with solutions that don’t require organizations to share their user directories to ensure strong authentication and granular access policies.
What does Luxembourg’s presence with a national pavilion at FIC 2025 represent, and how does this enhance the Luxembourg cyber ecosystem?
RCDevs has historically developed solutions prioritizing complete control of confidential data, including user directories, with emphasis on on-premises installations. This approach has driven the company’s success with highly sensitive organizations in military and banking sectors.
As developers of our solutions and primarily an R&D company, we can quickly evolve our software as threats change. We maintain our differentiating aspects that make more sense than ever in the current context: hybrid capabilities covering a wide range of issues regardless of client infrastructure, primarily on-premises solutions, and exceptional versatility that accommodates all types of hybrid infrastructure and software, including legacy systems.
In response to 2025’s challenges, RCDevs has introduced substantial product innovations:
- Presence-based access: Reduces the attack surface to the strict minimum by limiting data access in time and space, with evolved token technology.
- Managed services for secure datarooms and email: Featuring dedicated servers, MFA, zero trust, and proprietary proven cryptography.
- BYOD-ready security: Comprehensive authorization system for all devices (including personal devices) accessing systems, using MAC addresses with finegrained policies.
- Expanded compatibility: Enhanced support for on-premises LDAP infrastructures, including recent SSO/Kerberos integration, acknowledging that on-premises infrastructures will likely remain relevant in the current context.
- IAM federation system: Enables consolidation of multiple IAM systems (especially cloud) under RCDevs’ solution without migration delays.
- AI-powered log analysis: Intelligent analysis of user logs on demand for security teams, helping detect potential errors or malicious attacks while combating alert fatigue.
In this tumultuous beginning of 2025, our IAM and MFA solutions are more relevant than ever. They meet the highest security requirements while offering the same innovations as
cloud solutions, covering European hosting needs, on-premises requirements, redomiciled LDAP directories, legacy app access with MFA for WiFi or VPNs—all while respecting new mobility patterns and the simplicity users now expect.
What key advice would you give to companies, startups, and individuals to strengthen their cybersecurity in 2025?
For organizations looking to enhance their cybersecurity posture in 2025, RCDevs recommends:
- Reconsider your digital sovereignty strategy: With increasing geopolitical uncertainties, evaluate where your critical data is stored and processed. European organizations should prioritize solutions hosted within Europe or on-premises.
- Don’t rely solely on AI-based security: While AI security tools are valuable, they often play catch-up to increasingly sophisticated attacks. Balance digital security with physical security controls like location-based access.
- Implement granular access policies: Move beyond simple access control to timelimited, location-specific, and device-aware access policies that minimize your attack surface.
- Prepare for hybrid realities: The future isn’t purely cloud or purely on-premises—develop a security strategy that accommodates both while maintaining control of your user directories and authentication systems.
- Focus on user experience: Security measures that frustrate users will be circumvented. Ensure your MFA and access control systems balance strong security with the simplicity and mobility today’s workforce expects.
As unprecedented AI threats and geopolitical tensions reshape the cybersecurity landscape in 2025, RCDevs stands at the forefront of European digital sovereignty—delivering battle-tested authentication solutions that secure organizations not just for today’s challenges, but for whatever tomorrow may bring.
