Wavestone and the Luxembourg House of Cybersecurity unveil 20 startups shaping the Grand Duchy’s cybersecurity scene.
Twenty startups, a young but clearly accelerating ecosystem: that’s the headline takeaway from the Luxembourg Cybersecurity Startup Radar 2026, published by Wavestone with support from the Luxembourg House of Cybersecurity. Three-quarters of the companies listed were founded since 2022, with a peak of seven new startups in 2024 alone. Average age: just 3.1 years.
Unsurprisingly, protection dominates the field, with nine startups operating in that space, well ahead of detection (4) or response (2). Recovery, meanwhile, remains a complete blind spot for the sector.
The radar also confirms a clear B2B ambition: 75% of startups target enterprises and regulated industries, with CISOs and CTOs as the primary buyers. Even the smallest players — 80% have just 1 to 5 employees — think international from day one, with Germany, France and Belgium as natural first expansion markets.
Among the names featured, industrial cybersecurity player MON5 recently won the Luxembourg round of the Startup World Cup, while PanIAM took home the LHC’s Cybersecurity Innovation Award last year.
Another strong trend: AI is everywhere, with 75% of startups using it and two-thirds embedding it at the core of their product. On funding, the ecosystem remains largely self-financed (45% bootstrapped), though two 2025 raises stand out: Tadaweb (€20M) and Passbolt (€8M). Among the emerging niches to watch: post-quantum cryptography (LuxQuantum, Abstraction Lab), eIDAS-compliant digital signatures (IgniSign) — a space where LuxTrust and INCERT have also just teamed up on digital ID — and dedicated cybersecurity recruitment (Cyberr).
