Hello dear Getquin Community,

Over the past few days, I have been working intensively on the topic of cyber security and its fundamental importance in various sectors such as healthcare, technology, energy, armaments & defense, e-commerce, software, insurance, industry, utilities, commodities, banks, fintech, holdings, crypto and blockchain. I took a closer look at the big players, the hidden champions and the essential blade manufacturers in the industry. My aim was to gain as comprehensive a picture as possible of the different levels of this industry.

If I have overlooked any important aspects or have not categorized something correctly, I look forward to your comments and interesting additions @Tenbagger2024
@Multibagger
@Simpson
@Vegasrobaina . Together we can understand the topic even better and learn from each other.

Feel free to leave a 👍. I wish you every success with your investments 🚀

At the request of @Multibagger I have subsequently added my personal favorites in each sector. I have an investment horizon of five to ten years. In addition to the quarterly figures, my main focus was on the long-term competitive advantages and the strength of the respective moat.

Contribution:

Cybersecurity is evolving from a peripheral topic to the foundation of global markets. Whether healthcare, banking, utilities, armaments & defense, energy, industry or the digital infrastructure for artificial intelligence and blockchain, the need for protection mechanisms is increasing everywhere. While the big players such as $PANW (-1,91 %) Palo Alto Networks, $CRWD (-2,33 %) CrowdStrike or $ZS (-4,57 %) Zscaler are in the spotlight, more and more specialized providers are emerging that are essential in their niches and often have disproportionately high growth potential. Hidden champions such as $SECT B (-0,88 %) Sectra in the healthcare sector, $NCNO (-5,83 %) nCino in the banking sector or $ESTC (-6,18 %) Elastic in the data center show that cyber security has long been a diversified ecosystem. In addition, we must not overlook the blade manufacturers, i.e. the companies that provide the technological basis. These include chip manufacturers such as $NVDA (-1,53 %) , $INTC (+17,62 %) Intel or $AMD (+4,98 %) AMD, data center operators such as $EQIX (+1,69 %) Equin$DLR (+1,89 %) Digital Realty as well as software and infrastructure providers such as $ESTC (-6,18 %) Elastic, $DDOG (+0,18 %) Datadog or $ANET (-2,44 %) Arista Networks, without whose technology the security providers' solutions would not be scalable. The capital markets are reacting to this with valuation premiums, as the dependence on secure infrastructures is comparable to electrification in the 20th century. Investors are now faced with the question of whether to favor the established market leaders or invest in smaller companies that fly under the radar but could potentially be the real winners of tomorrow.

🔑Takeaway:

Cybersecurity is not an isolated trend, but a key investment factor across all industries from hospitals to data centers from payments to crypto platforms.

Healthcare

Major players:

$PANW (-1,91 %) Palo Alto Networks (PANW), $FTNT (-3,79 %) Fortinet (FTNT), $CHKP (-5,49 %) Check Point (CHKP), $CRWD (-2,33 %) CrowdStrike (CRWD), $S (-2,45 %) SentinelOne (S), $CYBR CyberArk (CYBR), $ZS (-4,57 %) Zscaler (ZS), $NET (+1,12 %) Cloudflare (NET), $AKAM (-0,2 %) Akamai Tech. (AKAM)

- Core provider for firewalls, zero trust, endpoint and web security

My top 2 recommendation in this sector are $ZS (-4,57 %) Zscaler global Zero Trust Exchange, huge barrier to entry as infrastructure is built globally and $PANW (-1,91 %) All-in-one platform, extremely high customer retention, hard to replace + acquisition of the company $CYBR

Hidden champions:

$SECT B (-0,88 %) Sectra (SECT-B.ST) - secure imaging & healthcare security

$VRNS (-4,42 %) Varonis Systems (VRNS) - protection of sensitive patient data

Imprivata (private, partnerships with listed players) - identity management for clinics

My top recommendation
$SECT B (-0,88 %) Niche leadership in healthcare security & medical technology

Blade manufacturer:

$NVDA (-1,53 %) Nvidia (NVDA), $INTC (+17,62 %) Intel (INTC), $AMD (+4,98 %) AMD (AMD) - Chips & computing power for security appliances

$EQIX (+1,69 %) Equinix (EQIX), $DLR (+1,89 %) Digital Realty (DLR) - Data center infrastructure for clinical data

$ESTC (-6,18 %) Elastic (ESTC), $DDOG (+0,18 %) Datadog (DDOG) - basic software for monitoring & analytics

My top 2 recommendations are $NVDA (-1,53 %) - GPUs, quasi-monopoly in high-end compute and $EQIX (+1,69 %) - largest global colocation provider, enormous switching costs

🔑 Takeaway healthcare

Healthcare data is highly sensitive and clinics are at high risk of ransomware. In addition to large security providers, hidden champions such as Sectra and Varonis are gaining in importance as they secure directly at the interface between patient data and medical devices.

Technology, Data centers & AI, Telecommunications

Major players:

$ZS (-4,57 %) Zscaler (ZS), $S (-2,45 %) SentinelOne (S), $CHKP (-5,49 %) Check Point (CHKP)

- Protection for cloud and AI environments

My top recommendation $ZS (-4,57 %) - Global Zero Trust Exchange, almost impossible to copy

Hidden champions:

$ESTC (-6,18 %) Elastic (ESTC) - Security-Analytics

$ANET (-2,44 %) Arista Networks (ANET)

- Network switches for data centers

My top recommendation $ANET (-2,44 %) - High-end switches, hyperscaler customers

Shovel manufacturer:

$EQIX (+1,69 %) Equinix (EQIX), $DLR (+1,89 %) Digital Realty (DLR)

- Data center infrastructure

$NVDA (-1,53 %) Nvidia (NVDA), $INTC (+17,62 %) Intel (INTC), $MRVL (+4,31 %) Marvell Tech. (MRVL)

- Chips & computing power for AI and security

My top 2 recommendation $NVDA (-1,53 %) - GPUs, quasi-monopoly in high-end compute and $EQIX (+1,69 %) - largest global colocation provider, enormous switching costs

Special players Telecommunications

$AKAM (-0,2 %) Akamai Tech. (AKAM) & Cloudflare (NET) - secure traffic and mobile data

$RDWR (-4,37 %) Radware (RDWR) - DDoS protection for telcos

$CSCO (-1,21 %) Cisco (CSCO) - network security for carriers

$CLAV (+0,97 %) Clavister Holding AB (CLAV) - through SD-WAN and carrier security

My top recommendation $AKAM (-0,2 %) - Established CDN + Security

🔑 Takeaway technology, data centers & AI

Data centers and AI platforms are the backbone of the digital economy. Zero Trust and cloud security from Zscaler or SentinelOne meet shovel manufacturers such as Equinix or Nvidia, who are indispensable with infrastructure and chips.

Energy

Major players:

$FTNT (-3,79 %) Fortinet (FTNT, NASDAQ) - OT/ICS security for power grids and power plants

$PANW (-1,91 %) Palo Alto Networks (PANW, NASDAQ) - Zero Trust & network protection for energy suppliers

$CHKP (-5,49 %) Check Point (CHKP, NASDAQ) - Critical infrastructure protection, gas and oil industry

My top recommendation $FTNT (-3,79 %) - ASIC hardware + software, cost advantage

Hidden champions:

Dragos (private, IPO candidate) - leader in OT security, specialized in energy infrastructures

$RDWR (-4,37 %) Radware (RDWR, NASDAQ) - DDoS defense for energy networks

$NCC (-3,53 %) NCC Group (NCC.L, London) - penetration tests & audits for utilities

$CLAV (+0,97 %) Clavister Holding AB (CLAV) - OT/ICS and infrastructure security

My top recommendation $CLAV (+0,97 %) - small niche player (carrier security)

Shovel manufacturer:

$SBGSY (-0,45 %) Schneider Electric (SBGSY, OTC) - OT/ICS hardware with security components

$ENR (+5,03 %) Siemens Energy (ENR, Frankfurt) - Energy infrastructure with embedded security solutions

$AVGO (-0,08 %) Broadcom (AVGO, NASDAQ) - Security chips for networks in energy environments

My top recommendation $AVGO (-0,08 %) - Chip giant + Symantec Enterprise Security

E-Commerce

Major players:

$NET (+1,12 %) Cloudflare (NET, NYSE) - DDoS and API protection for online stores & payment platforms

$AKAM (-0,2 %) Akamai (AKAM, NASDAQ) - Application security & bot management in e-commerce

$FFIV (-3,39 %) F5 Networks (FFIV, NASDAQ) - API & payment security for digital platforms

My top recommendation $NET (+1,12 %) - worldwide network for DDoS/API, network effects

Hidden Champions:

$RSKD (-4,05 %) Riskified (RSKD, NYSE) - Fraud prevention in online trading

$VRNS (-4,42 %) Varonis Systems (VRNS, NASDAQ) - Protection of customer data

$CYBR CyberArk (CYBR, NASDAQ) - Identity & access protection for payment processes

My top recommendation $CYBR - Standard for Privileged Access

Shovel manufacturer:

$V (-0,46 %) Visa (V, NYSE) & $MA (-1,22 %) Mastercard (MA, NYSE) - not classic cybersecurity, but operators of secure payment networks

$ESTC (-6,18 %) Elastic (ESTC, NYSE) - fraud analytics for e-commerce platforms

$DDOG (+0,18 %) Datadog (DDOG, NASDAQ) - monitoring & security analytics for retail infrastructure

My top recommendation $V (-0,46 %) - Global payment network, enormous network effect

🔑 Takeaway:

Energy is particularly vulnerable due to OT/ICS systems, specialists such as Dragos are emerging here.

E-commerce needs fraud prevention in addition to traditional web security, which is why players such as Riskified are occupying a niche.

Armaments & Defense

Major players:

$NOC (+0,12 %) Northrop Grumman (NOC, NYSE) - leader in cyberdefense for military & intelligence agencies, also developing offensive cyber capabilities

$BAESY (-1,79 %) BAE Systems (BAESY, OTC) - strong cyber intelligence division, protects critical military and government networks

$RTX (-0,06 %) Raytheon Technologies (RTX, NYSE) - defense company with growing cybersecurity portfolio for military communications & satellites

My top recommendation $NOC (+0,12 %) - Top defense contractor with cyber dominance

Hidden champions:

$PLTR (-5,79 %) Palantir Technologies (PLTR, NYSE) - Data and analytics platform with strong cybersecurity component, often for defense contractors

$CACI (+2,08 %) CACI International (CACI, NYSE) - specializes in cyber intelligence, network protection and military IT services

$LDOS (-1,6 %) Leidos Holdings (LDOS, NYSE) - IT and cybersecurity service provider for US defense and NATO

$CLAV (+0,97 %) Clavister Holding AB (CLAV) - used by government and military organizations

$ADVE Advenica (ADVE) - Specialized security, relevant for government agencies and national infrastructure

My top recommendation $CACI (+2,08 %) - Cyber intelligence, deep roots in the defense sector

Shovel manufacturer:

$LHX (-0,14 %) L3Harris Technologies (LHX, NYSE) - provides communications and cyber hardware for military networks

$GD (-0,71 %) General Dynamics (GD, NYSE) - with its IT division GDIT also a provider of cyber defense infrastructure

$KTOS (-3,77 %) Kratos Defense (KTOS, NASDAQ) - specializes in drones, satellite systems and cyber hardening of defense communications

My top recommendation $GD (-0,71 %) - strong role in defense cyber with GDIT

🔑 Takeaway:

In the defence sector, the boundaries between traditional defense and cybersecurity are becoming blurred. Alongside the large defense contractors, hidden champions such as Palantir, CACI and Leidos are emerging to provide pure cyber and data expertise. Shovel manufacturers such as L3Harris and Kratos secure the technical infrastructure.

Software & insurance

Big players:

$OKTA (-1,85 %) Okta (OKTA), $CYBR CyberArk (CYBR), $CRWD (-2,33 %) CrowdStrike (CRWD)

- Identity, endpoint and cloud security

My top recommendation $CRWD (-2,33 %) - Network effect through Falcon & Threat Graph

Hidden champions:

$VRNS (-4,42 %) Varonis (VRNS) - Data Security

SailPoint (private, formerly NYSE) - Identity Governance

$FROG (-0,01 %) JFrog (FROG) - DevSecOps & Supply-Chain-Security

$CYBE (+0,72 %) CyberCatch Holdings, Inc (CYBE) - Provides AI-based cybersecurity SaaS

$GEN (-5,74 %) Gen Digital (GEN) - one of the largest consumer cybersecurity providers worldwide (Norton, Avast, LifeLock), strong in identity protection and data protection for consumers & small businesses

$RBRK (-6,05 %) Rubrik (RBRK) - data compliance and security in the area of cloud data security

My top recommendation $GEN (-5,74 %) - Consumer security giant (Norton, Avast, LifeLock), strong brand power

Shovel manufacturer:

$MSFT (-2,22 %) (MSFT), $GOOG (+0,38 %) Alphabet (GOOGL), $AMZN (+0,39 %) Amazon (AMZN)

- Cloud security base

$FFIV (-3,39 %) F5 Networks (FFIV) - API protection for SaaS & insurance platforms

My top recommendation $GOOG (+0,38 %) - global cloud security + Mandiant, strong moat through infrastructure & Threat Intel

🔑 Takeaway Software & Insurance

Data and identity protection take center stage. Major players such as Okta and CyberArk secure access, while hidden champions such as Varonis and JFrog provide specialist solutions. Cloud providers such as Microsoft and Amazon are both platform operators and security suppliers.

Industry, supply & raw materials

Major players:

$FTNT (-3,79 %) Fortinet (FTNT), $CSCO (-1,21 %) Cisco (CSCO), $PANW (-1,91 %) Palo Alto Networks (PANW)

- Network protection for critical infrastructures

My top recommendation $FTNT (-3,79 %) - ASIC hardware + software, cost advantage

Hidden champions:

$RDWR (-4,37 %) Radware (RDWR) - DDoS protection

$NCC (-3,53 %) NCC Group (NCC.L) - OT-Security & Penetration Tests

$SECT B (-0,88 %) Sectra (SECT-B.ST) - secure infrastructure in the OT/healthcare intersection

$CLAV (+0,97 %) Holding AB CLAV) - OT/ICS and infrastructure security

$ADVE Advenica (ADVE) - Specialized security, relevant for public authorities and national infrastructure

My top recommendation $ADVE - Specialized Crypto/OT-Security for public authorities

Shovel manufacturer:

$AVGO (-0,08 %) Broadcom (AVGO) - security chips

Juniper Networks (JNPR) - network backbones

$ANET (-2,44 %) Arista Networks (ANET) - high-end switches

My top recommendation $AVGO (-0,08 %) - Chip-Giant + Symantec Enterprise Security

🔑 Takeaway Industry, Utilities & Commodities

OT/ICS systems in production, energy and raw materials are attractive targets. Fortinet and Palo Alto dominate, but hidden champions such as Radware and the NCC Group offer special expertise for attacks on industrial control systems.

Banks, Fintech & Holdings

Big players:

$CRWD (-2,33 %) CrowdStrike (CRWD), $PANW (-1,91 %) Palo Alto Networks (PANW), $ZS (-4,57 %) Zscaler (ZS)

- Core protection for banks & digital platforms

My top recommendation $ZS (-4,57 %) - Global Zero Trust Exchange, almost impossible to copy

Hidden champions:

$NCNO (-5,83 %) nCino (NCNO) - Cloud Banking Security

$NCC (-3,53 %) NCC Group (NCC.L) - Audits & Compliance

$CYBE (+0,72 %) CyberCatch Holdings, Inc (CYBE) - Provides AI-based cybersecurity SaaS

$GEN (-5,74 %) Gen Digital (GEN) - through fraud prevention and identity topics

My top recommendation $GEN (-5,74 %) - Consumer security giant (Norton, Avast, LifeLock), strong brand power

Shovel manufacturer:

$FFIV (-3,39 %) F5 Networks (FFIV) - API security for payments

$AKAM (-0,2 %) Akamai Tech. (AKAM) - Web & Payment Security

$ESTC (-6,18 %) Elastic (ESTC) - Fraud Analytics

My top recommendation $FFIV (-3,39 %) - Leader in Application & API Security

🔑 Takeaway Banks, Fintech & Holdings

High regulatory pressure makes cybersecurity a mandatory field. In addition to established providers, banks are relying on hidden champions such as nCino or Darktrace for cloud banking and anomaly detection. Shovel manufacturers such as F5 or Akamai secure payment APIs and banking portals.

Crypto & blockchain

Big players:

$PANW (-1,91 %) Palo Alto Networks (PANW), $FTNT (-3,79 %) Fortinet (FTNT), $CRWD (-2,33 %) CrowdStrike (CRWD)

- Core protection for exchanges, wallets and blockchain infrastructure

My top recommendation $FTNT (-3,79 %) - ASIC hardware + software, cost advantage

Hidden champions:

$BBAI (-5 %) BigBear.ai (BBAI) - Blockchain Fraud Detection

$RIOT (-0,13 %) Riot Platforms (RIOT) - Mining with a focus on security

$CHKP (-5,49 %) Check Point - the new blockchain firewall initiative (Web3)

My top recommendation $CHKP (-5,49 %) - Strong brand & existing customers, but limited innovative strength

Shovel manufacturer:

$NVDA (-1,53 %) Nvidia (NVDA), AMD (AMD) - chips & mining hardware

$NET (+1,12 %) Cloudflare (NET), $AKAM (-0,2 %) Akamai Tech. (AKAM)

- Network protection for wallets & exchanges

My top recommendation $NVDA (-1,53 %) - GPUs, quasi-monopoly in high-end compute

🔑 Takeaway crypto & blockchain

Crypto ecosystems are heavily affected by attacks on exchanges, wallets and smart contracts. While traditional security players provide protection, niche providers such as BigBear.ai and Riskified are emerging that specialize specifically in fraud and blockchain risks.

Source: Own analysis, image material: schwarz-digits

Dear GQ community, after paying special attention to the cyber security segment in Europe, which was mentioned in my post: https://getqu.in/JeWbLY/

you will find below an AI-supported analysis of three selected cyber security companies with niche potential, validated by me to the best of my knowledge and belief.

I am in $CLAV (+0,97 %) and $CYBE (+0,72 %) invested. This is not an investment recommendation but "food for thoughts".

SMEs are increasingly exposed to ransomware attacks, which is not only annoying but can also threaten their existence. Large players such as Palo Alto, Fortinet or Cisco often do not focus on these SMEs. Increasingly, the European directives NIS2 Directive and the Cyber Resilience Act (CRA) fs for the "big players" mean increased costs, new compliance obligations and greater legal liability. European companies with "Made in Europe" branding and tailored, scalable solutions therefore have opportunities in this future market.

Two of these "young European savages" and a US niche provider are the subject of the following analysis.

1. executive summary

1.1 Key findings

This analysis provides a detailed comparison of six leading cybersecurity companies, which are divided into two strategically distinct groups: the niche leaders and the established players. The first group, consisting of Clavister Holding AB and Advenica AB, is defined by highly specialized business models targeting particularly sensitive industry segments, such as the defense and government sectors. In contrast

Cybercatch Holdings Inc.a US-based company, is used as a comparative case study to highlight the key differences in market positioning, regulatory compliance and growth strategies between US and European providers.

This contrasts with the established European players: secunet Security Networks AG, NCC Group PLC and Yubico AB. These companies have a broader market presence and hold a dominant position in their respective sub-domains. While secunet serves a strategically protected market in Germany as a state-recognized partner, NCC Group and Yubico operate with a global or cross-continental reach and established brands.

A key difference between the two groups lies in their financial maturity. The niche leaders such as Clavister and Cybercatch are typically in a growth phase characterized by high investments and often negative results. In contrast, the established companies either demonstrate a robust, profitable business model, as is the case with secunet, or they are in a strategic transformation process that accepts short-term losses in order to achieve more stable revenues in the long term, such as NCC Group's realignment or Yubico's transition to a subscription-based model. The strategic niches of these companies are becoming increasingly relevant due to macroeconomic and geopolitical trends such as the growing demand for digital sovereignty in Europe.

1.2 Strategic view

For investors, niche leaders offer higher growth potential, but this is associated with increased risk, as their valuations often depend heavily on future assumptions. Established players, on the other hand, generally promise more stable and predictable returns. An investment decision should therefore carefully weigh up the different risk profiles.

For corporate strategists, the business models of niche providers, particularly their specialization in the defence sector or in unserved market segments such as small and medium-sized enterprises (SMEs), could represent attractive takeover targets. The acquisition of such companies could be a strategic opportunity to diversify one's own portfolio or expand into protected markets.

2 The European cyber security market: A strategic context

2.1 Market dynamics and growth drivers

The European cybersecurity market is in a phase of dynamic growth, with projected revenues of USD 107.5 billion by 2030, corresponding to a compound annual growth rate (CAGR) of 11.5%. Another market study forecasts a similar CAGR of 10.81%. This growth is being driven by a number of interrelated factors that are fundamentally changing the demand for security solutions.

A primary catalyst is the increase in cyber-attacks, which is forcing companies to minimize their security risks. Added to this is the rapid proliferation of IoT devices and the accelerated digital transformation in various industries, which massively increase the attack surface and increase the need for robust network security solutions.

The market data shows a clear trend: the services segment is growing the fastest with a CAGR of 13.8%, and cloud-based deployment models are also experiencing strong growth of 15.2% CAGR. This can be seen as a direct response to the increasing complexity of the threat landscape and the glaring lack of qualified cybersecurity experts in Europe. Companies are trying to fill the gap in their in-house expertise by increasingly outsourcing security functions. This structural shift in the market towards managed services and cloud solutions is a key justification for the strategic direction of the companies analyzed here, such as Yubico and Clavister's transition to recurring revenue models or NCC Group's primarily service-based business.

2.2 Regulation and technological catalysts

The regulatory landscape in the European Union plays a decisive role in market dynamics. Directives such as NIS2 and DORA (Digital Operational Resilience Act) are becoming key drivers for cybersecurity investments. They are forcing organizations to implement more stringent security measures and formal compliance. This regulatory dynamic creates a strategic competitive advantage for European companies as the need for local expertise and solutions that meet EU standards for digital sovereignty increases. This can act as a barrier to entry for non-European providers and explains why companies such as Clavister and Advenica are focusing so strongly on their European origins.

Another important technological trend is the integration of artificial intelligence (AI) and machine learning (ML) into cybersecurity solutions. These technologies significantly improve the detection and response capabilities of defense systems by identifying anomalous behavior in real time. Specialists such as Darktrace have established this as their core competence.

Rapid digitalization in sectors such as healthcare, transportation and manufacturing has massively expanded the attack surface. Companies such as the NCC Group, which specialize in OT (Operational Technology) security for the manufacturing industry, directly address these growing and critical sectors. It is these specialized niches that are experiencing disproportionate growth.

3 Comparison of niche company profiles

3.1 Clavister Holding AB: Specialist for critical applications

3.1.1 Business model and product portfolio

Clavister is a Swedish cybersecurity provider specializing in next-generation firewalls, identity and access management (IAM) and cloud services. The company protects customers with mission-critical applications operating in the defense, energy, telecommunications and public sectors. Moving to a SaaS-based recurring revenue business model is a key part of the company's strategy to create a lower investment threshold for customers.

3.1.2 Strategic positioning

Clavister's strategic positioning as "Cybersecurity made in Europe" is of great importance in the current geopolitical uncertainties. The company is benefiting from the growing demand for digital sovereignty solutions. The acquisition of Omen Technologies and the partnership with Saab announced in July 2025 underline the commitment to the defense sector. These partnerships and strategic acquisitions not only strengthen the company's offering, but are also a direct response to market requirements and evidence of the increasing relevance of the "Made in Europe" strategy.

3.1.3 Financial development and outlook

The latest financial results show strong growth: incoming orders rose by 52% and net sales by 22% in the second quarter of 2025. This is a direct effect of the strategic focus on the defense and government sector. Despite the strong growth, the company continues to report losses, with a negative EBIT of SEK -4.8 million and a net loss of SEK -15.9 million. The business model, which focuses on growth with losses, is typical for a company in an investment phase. The strategy seems to be to quickly gain market share in strategically important sectors before profitability is achieved in a later cycle.

3.2 Advenica AB: High security for governments and infrastructure

3.2.1 Business model and product portfolio

Advenica, another Swedish provider, specializes in high-security solutions for information security. The product portfolio is designed to protect sensitive data and networks against intrusions. It includes unique hardware solutions such as data diodes, which enable a unidirectional flow of information, and data guards, which secure the controlled two-way flow. In addition, the company also offers highly secure VPN systems.

3.2.2 Strategic positioning

Advenica's core niche is the national security, government and critical infrastructure market, where the highest standards of trust and government certifications are crucial. The company benefits from the growing importance of cyber security in these sectors and delivers highly secure, customized solutions for sensitive applications.

3.2.3 Financial development and market differentiation

With recent annual sales of around SEK 200 million, the company is profitable. Despite its profitability, analysts are trading the share at a valuation discount compared to European competitors. This can be attributed to the challenges in scaling the business model. The business model is strongly characterized by high research and development costs as well as customer-specific, physical hardware solutions. While other companies are switching to scalable, software-based models, Advenica's business model remains tied to a physical product. The extreme security focus on one-way data transfer is a direct contrast to the convenient, cloud-based solutions offered by other companies. While this serves a specific niche demand, it also limits the market potential.

3.3 Cybercatch Holdings Inc.: US comparative case

3.3.1 Business model and product portfolio

Cybercatch is a San Diego, California-based provider of an AI-powered Software-as-a-Service (SaaS) platform targeting small and medium-sized enterprises (SMEs) in the US and Canada. The solution aims to ensure continuous cybersecurity compliance and risk mitigation through automated testing and vulnerability remediation. The portfolio includes modules such as CyberBenchmark and CyberVirtualCISO, which help organizations address the root cause of cyberattacks, namely security vulnerabilities.

3.3.2 Strategic positioning

The company has chosen a very specific, often underserved niche: simplifying cyber security for SMEs. This segment is often neglected by larger providers, who often focus on enterprise customers. The focus is on protecting SMEs from existential threats such as ransomware by offering a user-friendly, automated platform.

3.3.3 Financial performance

Cybercatch's financial data shows an extreme growth valuation. The company has a very low turnover of USD 353,000 based on the last twelve months (TTM), while its market capitalization is USD 94.2 million. This enormous discrepancy between current sales and company valuation is a classic feature of highly speculative, early-stage SaaS companies. The valuation is not based on current fundamentals, but on the assumed future potential to monetize a huge and untapped market segment with a scalable software solution.

4. profiles of the peer companies

4.1 secunet Security Networks AG: The German market leader

4.1.1 Business model and government partnerships

secunet is Germany's leading cyber security provider and serves as the IT security partner of the Federal Republic of Germany. The company offers a comprehensive portfolio of its own products and specialized consulting services aimed at protecting highly sensitive data in public authorities and companies.

4.1.2 Product range and customer base

The product range includes hardware and software solutions as well as strategic advice aimed at protecting digital infrastructures in a resilient and customized manner. The customer base spans various sectors, including public authorities, ministries, border controls, police, defense, healthcare, industry and utilities.

4.1.3 Financial stability and market position

secunet is characterized by its financial robustness and stability. In the first half of 2025, revenue increased by 19% to 171.7 million euros, which is attributable to demand from both the public and private sectors. EBIT improved significantly from EUR 1.4 million to EUR 7.2 million and the EBIT margin rose from 1.0% to 4.2%. The high profitability and strong market position are directly attributable to the close and official partnership with the German state, which creates a unique strategic advantage and protected market access. This is the main reason for the financial stability, which is not available to the same extent at smaller, higher-risk niche companies.

4.2 NCC Group PLC: Global services group

4.2.1 Business model and service ecosystem

The NCC Group is a global service provider for cyber and software resilience. The business model is described as "people-powered, tech-enabled", which emphasizes its focus on intellectual capital and human expertise. Its broad service ecosystem includes technical services such as penetration testing, incident response and threat intelligence, as well as consulting services such as risk management and compliance consulting. The company also specializes in managed services such as Managed Extended Detection & Response (MXDR).

4.2.2 Strategic focus and financial performance

The company is undergoing a strategic realignment, which has led to a slight decline in sales in the cyber security division. The aim of this realignment is to focus on strategic customer relationships. Despite the slight decline in cybersecurity revenue in the first half of 2025, NCC Group was able to increase its profitability, with an increase in operating profit of 70.9% to £20 million.

4.2.3 Differentiation through depth of service

In contrast to product-specific companies, the NCC Group's competitive advantage lies in the depth of its services and human expertise. The company's scalability is directly linked to its ability to hire and retain qualified experts, which is a persistent challenge in the context of the industry-wide skills shortage. The NCC Group differentiates itself by offering specialized consulting services that go beyond a pure product offering and extend into areas such as OT security and mergers & acquisitions due diligence.

4.3 Yubico AB: Pioneer in identity security

4.3.1 Business model and hardware solutions

Yubico is a Swedish company that specializes in the development and sale of hardware-based solutions for strong authentication, the so-called YubiKeys. The traditional business model was based on the one-off sale of hardware.

4.3.2 Strategic realignment

The company has initiated a strategic change to convert its business model from hardware sales to a subscription-based model known as "YubiKey-as-a-Service". This realignment is aimed at generating recurring revenue and increasing the scalability of the business model.

4.3.3 Key financial figures and market outlook

This transition had a short-term impact on the company's finances. In the second quarter of 2025, net revenue fell by almost 19% year-on-year, mainly due to postponed major orders and the transition to a subscription-based sales model. As a result, the EBIT margin fell from 21.3% to 4.2%. This transition is an exemplary case study of strategic evolution in the cybersecurity industry. The company is willing to sacrifice short-term profitability to combine the scalability benefits of a SaaS model with its core expertise in hardware development to create higher and more stable long-term shareholder value.

5 Comparative analysis: European vs. US niche strategies

This analysis of Clavister and Advenica versus Cybercatch highlights fundamental differences in their business models that are a direct result of their geographic focus.

5.1 Market positioning

• Clavister and Advenica: These Swedish companies position themselves as high-security European providers whose main niches are defense, critical infrastructure and the public sector. Their focus is on providing specialized hardware and software solutions that meet stringent national and EU-wide security requirements. Clavister explicitly emphasizes its identity as "Cybersecurity made in Europe".
• Cybercatch: In contrast, Cybercatch focuses entirely on the North American market, particularly small and medium-sized enterprises (SMEs) in the US and Canada. The company addresses the security gaps in this often underserved segment with a scalable SaaS solution. Its niche positioning is therefore not primarily characterized by government high-security requirements, but by serving a specific, commercial customer segment.

5.2 Conformity with EU directives

• Clavister and Advenica: The two companies benefit directly from EU regulations such as the NIS2 Directive and the Digital Operational Resilience Act (DORA). These regulations are driving demand for local and trusted providers, giving companies with a strong "Made in Europe" positioning a competitive advantage.12 Advenica is even one of a few companies whose VPN products have received EU SECRET certification. Compliance with these directives is a central part of their business strategy.
• Cybercatch: As a U.S. company, Cybercatch is primarily focused on meeting compliance requirements in North America, such as the U.S. and Canadian cybersecurity mandates. The EU directives are not of primary relevance to its business model. Instead, its focus is on compliance with regulations for specific US sectors, such as defense contractors.

5.3 Growth

• Clavister and Advenica: The growth of these companies is closely linked to the political and regulatory environment in Europe. Their growth strategy is based on establishing themselves as preferred providers for high-security government projects. This leads to robust order growth, as demonstrated by Clavister's 52% increase in order intake in the second quarter of 2025. Advenica's growth is also tied to its ability to succeed in the highly regulated critical infrastructure market.
• Cybercatch: Cybercatch's growth is mainly driven by the scalability of its SaaS model, which serves a large and untapped market segment. The company's valuation is based on the expected future growth potential in this sector, not on profitability from current revenues. The growth momentum is therefore more comparable to the typical development of a highly speculative early-stage technology company aiming for exponential expansion in the US market.

6 Conclusion and strategic outlook

6.1 Synthesis of the findings

The analysis has shown that niche companies can survive in a market dominated by larger players by differentiating themselves through technological specialization, geographic focus or by serving underserved market segments. Advenica and Clavister are capitalizing on the growing demand for digital sovereignty in Europe to establish themselves in strategic sectors, while Cybercatch is targeting an underserved SME segment in North America. Their business models are typical of growth companies operating in investment phases.

The established players leverage their scale, established customer relationships, as is the case with secunet, and global reach, as is the case with Yubico and NCC Group, to maintain their competitive advantage. Their financial maturity and stability are a direct result of these established positions. The different business models - hardware, service and SaaS - largely determine the strategic challenges and opportunities for each company. The companies that successfully transition to recurring revenue models are likely to achieve a higher valuation in the long term as they promise better predictability and more stable margins.

6.2 Outlook

The cyber security industry is likely to consolidate further, as evidenced by the recent takeovers of Sophos by Thoma Bravo and Darktrace by the same investor. The niche companies examined here, particularly those with scalable business models, could become attractive takeover targets. Larger players could seek to expand their portfolio or expand into specific markets, such as the European defense sector or the North American SME market.

The demand for digital sovereignty in Europe will be a continued strategic relevance for providers with EU origins, such as Clavister and Advenica. Their focus on highly secure and mission-critical solutions ideally positions them to benefit from regulatory and geopolitical currents in the region. The shift towards recurring revenues will continue to be a key trend that will significantly influence the future valuation and growth potential of companies in the industry.

References

Financial year - 2021 - Clavister, accessed September 1, 2025, https://www.clavister.com/wp-content/uploads/2022/04/Clavister-Annual-Report-2021_EN_.pdf

Advenica AB - SOFF, accessed on September 1, 2025, https://soff.se/en/medlem/advenica-ab/

CyberCatch 2025 Company Profile: Stock Performance & Earnings - PitchBook, accessed September 1, 2025, https://pitchbook.com/profiles/company/512989-48

CyberCatch Holdings Inc Company Profile & Introduction - Futubull, accessed September 1, 2025, https://www.futunn.com/en/stock/CYBE-CA/company

Relevant information for our investors - secunet Security Networks AG, accessed on September 1, 2025, https://www.secunet.com/en/about-us/investors

NCC Group plc - AnnualReports.com, accessed September 1, 2025, https://www.annualreports.com/Company/ncc-group-plc

Business model - Yubico Investor Relations, accessed September 1, 2025, https://investors.yubico.com/en/what-we-do/business-model/

Clavister Q2 2025: Net Sales grew by 22 % - Nasdaq, accessed September 1, 2025, https://view.news.eu.nasdaq.com/view?id=bee2728146b03ecc1707c8b647ea3381b&lang=en&src=micro

Secunet Security Networks AG Reports Half-Year Growth and Maintains Yearly Forecast, accessed September 1, 2025, https://www.webdisclosure.com/article/secunet-security-networks-ag-reports-half-year-growth-and-maintains-yearly-forecast-B09ZNgGeKnC

NCC Group plc Unaudited interim results for the period ended March 31, 2025, accessed September 1, 2025, https://www.nccgroupplc.com/media/nqfb2xsl/ncc_group_rns_h1_fy25.pdf

Yubico AB Investor Relations - Alpha Spread, accessed on September 1, 2025, https://www.alphaspread.com/security/sto/yubico/investor-relations

Financial year - 2022 - Clavister, accessed September 1, 2025, https://www.clavister.com/wp-content/uploads/2023/06/Clavister-Arsredovisning-2022_EN.pdf

Advenica - Amazon S3, accessed on September 1, 2025, https://s3-eu-west-1.amazonaws.com/rdey-cms-prod/app/uploads/2023/06/advenica-initialrapport-2023-06-12-final.pdf

Europe Cyber Security Market Size & Outlook, 2024-2030, accessed September 1, 2025, https://www.grandviewresearch.com/horizon/outlook/cyber-security-market/europe

Europe Cyber Security Market Size | Industry Report, 2030 - Grand View Research, accessed September 1, 2025, https://www.grandviewresearch.com/industry-analysis/europe-cyber-security-market-report

Europe Cybersecurity Market Size, Share, Analysis, Trends - Mordor Intelligence, accessed September 1, 2025, https://www.mordorintelligence.com/industry-reports/europe-cybersecurity-market

Europe Cybersecurity Market Size, Competitors & Forecast, accessed September 1, 2025, https://www.researchandmarkets.com/report/europe-it-security-market

Cybersecurity Market Size Statistics, Growth Forecasts 2032 - Global Market Insights, accessed September 1, 2025, https://www.gminsights.com/de/industry-analysis/cybersecurity-market

ENISA NIS360 2024 report: A comprehensive look at cybersecurity maturity and criticality of NIS2 sectors, accessed September 1, 2025, https://www.enisa.europa.eu/news/enisa-nis360-2024-report

New Partner in Germany Sees Strong Cloud and VPN Growth With Clavister, accessed September 1, 2025, https://www.clavister.com/new-partner-in-germany-sees-strong-cloud-and-vpn-growth-with-clavister/

Market Size, Share, Analysis | Global Report 2032 - Fortune Business Insights, accessed September 1, 2025, https://www.fortunebusinessinsights.com/de/industrie-berichte/markt-f-r-cybersicherheit-101165

Cybersecurity Stocks: The Best Picks for 2025 - Investing.com, accessed September 1, 2025, https://de.investing.com/academy/stock-picks/cybersecurity-aktien-2025/

Cyber AI Analyst | Darktrace, accessed September 1, 2025, https://www.darktrace.com/cyber-ai-analyst

Cybercatch Holdings Inc, CYBE:CVE profile - FT.com - Markets data, accessed September 1, 2025, https://markets.ft.com/data/equities/tearsheet/profile?s=CYBE:CVE

Cyber AI: Augment your security team and stop novel threats - Darktrace, accessed September 1, 2025, https://www.darktrace.com/cyber-ai

Darktrace: Pioneering AI in the Cyber Security Space - Summit Partners, accessed September 1, 2025, https://www.summitpartners.com/resources/darktrace-pioneering-ai-in-the-cyber-security-space

Strategy, Risk & Compliance | NCC Group, accessed September 1, 2025, https://www.nccgroup.com/consulting-implementation/strategy-risk-compliance/

Clavister Cloud Services, accessed September 1, 2025, https://www.clavister.com/products/cloud-services/

Clavister AB: Clavister Q2 2025: Net Sales grew by 22 % - Financial News, accessed September 1, 2025, https://www.finanznachrichten.de/nachrichten-2025-08/66234871-clavister-ab-clavister-q2-2025-net-sales-grew-by-22-399.htm

Products & Solutions - Advenica, accessed September 1, 2025, https://advenica.com/products-and-solutions/

Advenica AB (STO:ADVE) Stock Price & Overview, accessed September 1, 2025, https://stockanalysis.com/quote/sto/ADVE/

SMALL AND MEDIUM-SIZED BUSINESSES RANSOMWARE SURVEY - CyberCatch, accessed September 1, 2025, https://cybercatch.com/wp-content/uploads/2022/04/CyberCatch-SMB-Ransomware-Survey-SMBRS-2022.pdf

SMBRS Download - CyberCatch, accessed September 1, 2025, https://cybercatch.com/smbrs-download/

Network Penetration Testing Services - NCC Group, accessed September 1, 2025, https://www.nccgroup.com/technical-assurance/network-infrastructure-architecture-container-security/network-penetration-testing-services/

Penetration Testing Services | NCC Group, accessed September 1, 2025, https://www.nccgroup.com/technical-assurance/penetration-testing-services/

Revenue model - Yubico Investor Relations, accessed September 1, 2025, https://investors.yubico.com/en/what-we-do/revenue-model/

Darktrace announces formal completion of its acquisition by Thoma Bravo, accessed September 1, 2025, https://www.darktrace.com/news/darktrace-announces-formal-completion-of-its-acquisition-by-thoma-bravo

Darktrace | Jefferies.com, accessed September 1, 2025, https://www.jefferies.com/emea-case-studies/darktrace/

Sophos - Wikipedia, accessed September 1, 2025, https://en.wikipedia.org/wiki/Sophos

CyberCatch summary data - CyberDB, accessed September 1, 2025, https://www.cyberdb.co/vendor/cybercatch/