Luxembourg Cybersecurity Startup Radar 2026

Luxembourg’s cybersecurity innovation ecosystem keeps gaining momentum. Despite its size, the country continues to produce startups tackling key areas, from post-quantum cryptography and digital trust to cloud security and AI , with an early international mindset and strong ties to a compact, pro-business support ecosystem.

For its second edition, Wavestone, in partnership with the Luxembourg House of Cybersecurity (LHC), is proud to release the Luxembourg Cybersecurity Startup Radar. Jointly produced by both organizations, the research covers the local ecosystem as of mid-2026.

Luxembourg’s cybersecurity startup landscape is young, concentrated, and gaining momentum. With 20 companies identified this year , including new entrants such as CyberExM, AARG (MON5) and CloudSoul, the ecosystem confirms its 2024 founding peak and continues to grow at a steady pace. Three quarters of the startups have been founded since 2022 , and the average age remains low at 3.1 years .

The radar maps startups across eleven categories , from historical strongholds such as Cryptology (LuxQuantum, Abstraction Lab), Identity & Access Management (PanIAM, XAYone) and Secure Data Exchange (IgniSign, CYCLOP), to newer areas like OT Security (AARG) and Threat Intelligence (CyberExM), reflecting the ecosystem’s evolution.

The distribution across the NIST CSF 2.0 pillars highlights significant cybersecurity investments in a defense-first ecosystem. Nine startups sit in Protect , four each in Govern and Detect, two in Respond, and one in Identify. Only Recover remains uncovered , a potential white space for future entrants.

Luxembourg startups benefit from a strong governmental presence and a structured funding landscape:

On the funding and community side, PULSE acts as the founder-led voice of Luxembourg startups; LBAN (200+ members, €63M+ invested) bridges the seed to pre-Series A gap; and LPEA (550+ members) consolidates Luxembourg’s position as Europe’s leading fund domicile for private capital.

45% of Luxembourg cyber startups remain bootstrapped , while 2025 saw notable rounds by Tadaweb (€20M) and Passbolt (€8M) .

Luxembourg startups remain small and focused: 80% have 1 to 5 employees and are mainly established in Luxembourg City, Esch-sur-Alzette, Eppeldorf, Leudelange, Mamer and Bettembourg. Only 2 out of 20 are led by a female CEO .

Their go-to-market is clearly enterprise-oriented: 75% target enterprises and large organizations , mostly in regulated sectors, with CISOs and CTOs as their primary buyers. Most startups originate from a concrete operational need, and SaaS & subscription models dominate the ecosystem , while one-quarter of the solutions are at least partially open source.

Early internationalization is the default in Luxembourg, where startups target EU markets from day one. Around 75% focus on the EU only , with Germany, France, and Belgium acting as natural first expansion corridors. 65% plan to continue or start expansion within the 12 to 18 months, and 1 in 4 already expand outside the EU.

AI is now also well anchored in the ecosystem: 75% of startups use it, and 2/3 of them place it at the core of their product.

Luxembourg startups are also actively investing in other emerging cybersecurity domains:

Every year, as part of the Cybersecurity Week Luxembourg (CSWL), the LHC’s flagship national campaign, cybersecurity excellence is showcased and homegrown innovation is recognized through a dedicated award. The 2025 edition awarded PanIAM for its -generation CNAPP that unifies cloud risk visibility through proprietary, client-tailored technology.

Luxembourg’s ecosystem is dynamic but must continue to structure itself to reach the stage.

For startups , focus on deep-tech innovation and don’t scale alone. Leverage Luxembourg’s compact, accessible and pro-business ecosystem to accelerate faster than in larger markets.

For public and private investors , keep supporting the ecosystem at every stage while helping national champions stay anchored in Luxembourg. Back early-stage deep-tech and bridge the growth gap so high-potential assets and talent can scale globally without leaving .

For enterprise clients , take advantage of the local ecosystem to work more closely with startups, enabling faster feedback cycles and more tailored solutions.

The Luxembourg Cybersecurity Startup Radar features companies headquartered in Luxembourg whose core activities focus on cybersecurity products and services. To be included, startups must have fewer than 35 employees , have been established for seven years or less (unless significant business transformations justify an exception), and derive the majority of their activity from product- or innovation-driven offerings rather than consulting services. Data is current as of mid-2026, and the radar is built on a combination of desk research, ecosystem intelligence, and qualitative exchanges with most of the featured companies as well as key players of the Luxembourg innovation ecosystem.

Senior Manager - Luxembourg

Consultant - Luxembourg

Consultant - Luxembourg