Luxembourg Cybersecurity Startup Radar 2026
Published July 20, 2026
- Cybersecurity
Key takeaways from the radar
- A young and concentrated ecosystem: 20 active startups (all founded since 2020), with an average age of 3.1 years and 75% founded since 2022.
- 2024 was the peak year for startup formation (+7 startups), followed by +2 in 2025 and +1 already in 2026.
- Broad NIST CSF 2.0 coverage: Govern (4), Identify (1), Protect (9), Detect (4), Respond (2), Recover (0), a defense-first ecosystem.
- AI is now mainstream: 75% of startups use AI, and 2/3 of them embed it at the core of their product.
- Early internationalization is the default: 65% plan to continue or start expansion within 12–18 months, with Germany, France and Belgium as natural first corridors.
- Notable 2025 funding rounds include Tadaweb (€20M) and Passbolt (€8M). At the same time, 45% of startups remain bootstrapped.
With 20 startups, Luxembourg’s cybersecurity ecosystem is small but fast-moving, dynamic, and increasingly structured
Luxembourg’s cybersecurity innovation ecosystem keeps gaining momentum. Despite its size, the country continues to produce startups tackling key areas, from post-quantum cryptography and digital trust to cloud security and AI, with an early international mindset and strong ties to a compact, pro-business support ecosystem.
For its second edition, Wavestone, in partnership with the Luxembourg House of Cybersecurity (LHC), is proud to release the Luxembourg Cybersecurity Startup Radar. Jointly produced by both organizations, the research covers the local ecosystem as of mid-2026.
A young ecosystem gaining momentum
Luxembourg’s cybersecurity startup landscape is young, concentrated, and gaining momentum. With 20 companies identified this year, including new entrants such as CyberExM, AARG (MON5) and CloudSoul, the ecosystem confirms its 2024 founding peak and continues to grow at a steady pace. Three quarters of the startups have been founded since 2022, and the average age remains low at 3.1 years.
The radar maps startups across eleven categories, from historical strongholds such as Cryptology (LuxQuantum, Abstraction Lab), Identity & Access Management (PanIAM, XAYone) and Secure Data Exchange (IgniSign, CYCLOP), to newer areas like OT Security (AARG) and Threat Intelligence (CyberExM), reflecting the ecosystem’s evolution.
Broad coverage across the NIST CSF 2.0 pillars
The distribution across the NIST CSF 2.0 pillars highlights significant cybersecurity investments in a defense-first ecosystem. Nine startups sit in Protect, four each in Govern and Detect, two in Respond, and one in Identify. Only Recover remains uncovered, a potential white space for future entrants.
Luxembourg’s startups cover five of the six NIST CSF 2.0 functions, with Protect leading and Recover still uncovered.
A strong support and funding landscape
Luxembourg startups benefit from a strong governmental presence and a structured funding landscape:
- Luxembourg House of Cybersecurity (LHC) drives national coordination and runs LUCYA, the national cybersecurity acceleration program offering mentoring, residency, testing lab access and expertise dedicated to cyber startups.
- Luxinnovation, the national innovation agency, hosts Startup Luxembourg and runs Fit4Start, an equity-free acceleration program offering up to €150k funding.
- The Chamber of Commerce federates the entrepreneurial ecosystem and hosts the country’s largest campus of incubators and accelerators, the House of Startups.
On the funding and community side, PULSE acts as the founder-led voice of Luxembourg startups; LBAN (200+ members, €63M+ invested) bridges the seed to pre-Series A gap; and LPEA (550+ members) consolidates Luxembourg’s position as Europe’s leading fund domicile for private capital.
45% of Luxembourg cyber startups remain bootstrapped, while 2025 saw notable rounds by Tadaweb (€20M) and Passbolt (€8M).
Small teams, large clients
Luxembourg startups remain small and focused: 80% have 1 to 5 employees and are mainly established in Luxembourg City, Esch-sur-Alzette, Eppeldorf, Leudelange, Mamer and Bettembourg. Only 2 out of 20 are led by a female CEO.
Their go-to-market is clearly enterprise-oriented: 75% target enterprises and large organizations, mostly in regulated sectors, with CISOs and CTOs as their primary buyers. Most startups originate from a concrete operational need, and SaaS & subscription models dominate the ecosystem, while one-quarter of the solutions are at least partially open source.
Small, enterprise-focused teams cluster around Luxembourg City and a handful of regional locations.
International from day one
Early internationalization is the default in Luxembourg, where startups target EU markets from day one. Around 75% focus on the EU only, with Germany, France, and Belgium acting as natural first expansion corridors. 65% plan to continue or start expansion within the next 12 to 18 months, and 1 in 4 already expand outside the EU.
Luxembourg startups internationalize early, with Germany, France and Belgium as natural first expansion corridors.
AI, post-quantum, and other emerging domains
AI is now also well anchored in the ecosystem: 75% of startups use it, and 2/3 of them place it at the core of their product.
Luxembourg startups are also actively investing in other emerging cybersecurity domains:
- Post-quantum and cryptographic frontier, with LuxQuantum and Abstraction Lab.
- eIDAS-compliant digital signature platform, with IgniSign.
- Dedicated infrastructure for cybersecurity hiring, with Cyberr.
Every year, as part of the Cybersecurity Week Luxembourg (CSWL), the LHC’s flagship national campaign, cybersecurity excellence is showcased and homegrown innovation is recognized through a dedicated award. The 2025 edition awarded PanIAM for its next-generation CNAPP that unifies cloud risk visibility through proprietary, client-tailored technology.
What are the next steps for the ecosystem?
Luxembourg’s ecosystem is dynamic but must continue to structure itself to reach the next stage.
For startups, focus on deep-tech innovation and don’t scale alone. Leverage Luxembourg’s compact, accessible and pro-business ecosystem to accelerate faster than in larger markets.
For public and private investors, keep supporting the ecosystem at every stage while helping national champions stay anchored in Luxembourg. Back early-stage deep-tech and bridge the growth gap so high-potential assets and talent can scale globally without leaving home.
For enterprise clients, take advantage of the local ecosystem to work more closely with startups, enabling faster feedback cycles and more tailored solutions.
Luxembourg Cybersecurity Startup Radar 2026 (EN only)
pdf · 2173KO
Download the radarMethodology
The Luxembourg Cybersecurity Startup Radar features companies headquartered in Luxembourg whose core activities focus on cybersecurity products and services. To be included, startups must have fewer than 35 employees, have been established for seven years or less (unless significant business transformations justify an exception), and derive the majority of their activity from product- or innovation-driven offerings rather than consulting services. Data is current as of mid-2026, and the radar is built on a combination of desk research, ecosystem intelligence, and qualitative exchanges with most of the featured companies as well as key players of the Luxembourg innovation ecosystem.