Hello dear Getquin Community,

Over the past few days, I have been working intensively on the topic of cyber security and its fundamental importance in various sectors such as healthcare, technology, energy, armaments & defense, e-commerce, software, insurance, industry, utilities, commodities, banks, fintech, holdings, crypto and blockchain. I took a closer look at the big players, the hidden champions and the essential blade manufacturers in the industry. My aim was to gain as comprehensive a picture as possible of the different levels of this industry.

If I have overlooked any important aspects or have not categorized something correctly, I look forward to your comments and interesting additions @Tenbagger2024
@Multibagger
@Simpson
@Vegasrobaina . Together we can understand the topic even better and learn from each other.

Feel free to leave a 👍. I wish you every success with your investments 🚀

Contribution:

Cybersecurity is evolving from a marginal topic to the foundation of global markets. Whether healthcare, banking, utilities, armaments & defense, energy, industry or the digital infrastructure for artificial intelligence and blockchain, the need for protection mechanisms is increasing everywhere. While the big players such as $PANW (+0,28 %) Palo Alto Networks, $CRWD (+0,69 %) CrowdStrike or $ZS (+1,36 %) Zscaler are in the spotlight, more and more specialized providers are emerging that are essential in their niches and often have disproportionately high growth potential. Hidden champions such as $SECT B (+1,21 %) Sectra in the healthcare sector, $NCNO (-0,77 %) nCino in the banking sector or $ESTC (+1,43 %) Elastic in the data center show that cyber security has long been a diversified ecosystem. In addition, we must not overlook the blade manufacturers, i.e. the companies that provide the technological basis. These include chip manufacturers such as $NVDA (-3,33 %) , $INTC (-1,19 %) Intel or $AMD (-7,23 %) AMD, data center operators such as $EQIX (+0,2 %) Equin$DLR (+0,03 %) Digital Realty as well as software and infrastructure providers such as $ESTC (+1,43 %) Elastic, $DDOG (+2,57 %) Datadog or $ANET (+0,36 %) Arista Networks, without whose technology the security providers' solutions would not be scalable. The capital markets are reacting to this with valuation premiums, as the dependence on secure infrastructures is comparable to electrification in the 20th century. Investors are now faced with the question of whether to favor the established market leaders or invest in smaller companies that fly under the radar but could potentially be the real winners of tomorrow.

🔑Takeaway:

Cybersecurity is not an isolated trend, but a key investment factor across all industries from hospitals to data centers from payments to crypto platforms.

Healthcare

Big players:

$PANW (+0,28 %) Palo Alto Networks (PANW), $FTNT (+2,62 %) Fortinet (FTNT), $CHKP (+0,44 %) Check Point (CHKP), $CRWD (+0,69 %) CrowdStrike (CRWD), $S (+2,57 %) SentinelOne (S), $CYBR (+0,27 %) CyberArk (CYBR), $ZS (+1,36 %) Zscaler (ZS), $NET (+1,08 %) Cloudflare (NET), $AKAM (+0,42 %) Akamai Tech. (AKAM)

- Core provider for firewalls, zero trust, endpoint and web security

Hidden champions:

$SECT B (+1,21 %) Sectra (SECT-B.ST) - secure imaging & healthcare security

$VRNS (+0,38 %) Varonis Systems (VRNS) - protection of sensitive patient data

Imprivata (private, partnerships with listed players) - identity management for clinics

Shovel manufacturer:

$NVDA (-3,33 %) Nvidia (NVDA), $INTC (-1,19 %) Intel (INTC), $AMD (-7,23 %) AMD (AMD) - Chips & computing power for security appliances

$EQIX (+0,2 %) Equinix (EQIX), $DLR (+0,03 %) Digital Realty (DLR) - Data center infrastructure for clinical data

$ESTC (+1,43 %) Elastic (ESTC), $DDOG (+2,57 %) Datadog (DDOG) - basic software for monitoring & analytics

🔑 Takeaway Healthcare

Healthcare data is highly sensitive and clinics are at high risk of ransomware. In addition to large security providers, hidden champions such as Sectra and Varonis are gaining in importance as they secure directly at the interface between patient data and medical devices.

Technology, Data centers & AI, Telecommunications

Major players:

$ZS (+1,36 %) Zscaler (ZS), $S (+2,57 %) SentinelOne (S), $CHKP (+0,44 %) Check Point (CHKP)

- Protection for cloud and AI environments

Hidden champions:

$ESTC (+1,43 %) Elastic (ESTC) - Security Analytics

$ANET (+0,36 %) Arista Networks (ANET)

- Network switches for data centers

Blade manufacturers:

$EQIX (+0,2 %) Equinix (EQIX), $DLR (+0,03 %) Digital Realty (DLR)

- Data center infrastructure

$NVDA (-3,33 %) Nvidia (NVDA), $INTC (-1,19 %) Intel (INTC), $MRVL (-1,39 %) Marvell Tech. (MRVL)

- Chips & computing power for AI and security

Special players telecommunications

$AKAM (+0,42 %) Akamai Tech. (AKAM) & Cloudflare (NET) - secure traffic and mobile data

$RDWR (+0 %) Radware (RDWR) - DDoS protection for telcos

$CSCO (-2,53 %) Cisco (CSCO) - network security for carriers

$CLAV Clavister Holding AB (CLAV) - through SD-WAN and carrier security

🔑 Takeaway Technology, Data Centers & AI

Data centers and AI platforms are the backbone of the digital economy. Zero Trust and cloud security from Zscaler or SentinelOne meet shovel manufacturers such as Equinix or Nvidia, who are indispensable with infrastructure and chips.

Energy

Major players:

$FTNT (+2,62 %) Fortinet (FTNT, NASDAQ) - OT/ICS security for power grids and power plants

$PANW (+0,28 %) Palo Alto Networks (PANW, NASDAQ) - Zero Trust & network protection for energy suppliers

$CHKP (+0,44 %) Check Point (CHKP, NASDAQ) - Critical infrastructure protection, gas and oil industry

Hidden Champions:

Dragos (private, IPO candidate) - leader in OT security, specialized in energy infrastructures

$RDWR (+0 %) Radware (RDWR, NASDAQ) - DDoS defense for energy networks

$NCC (-1,18 %) NCC Group (NCC.L, London) - penetration tests & audits for utilities

$CLAV Clavister Holding AB (CLAV) - OT/ICS and infrastructure security

Shovel manufacturer:

$SBGSY (+0 %) Schneider Electric (SBGSY, OTC) - OT/ICS hardware with security components

$ENR (-2,06 %) Siemens Energy (ENR, Frankfurt) - Energy infrastructure with embedded security solutions

$AVGO (+8,33 %) Broadcom (AVGO, NASDAQ) - Security chips for networks in energy environments

E-Commerce

Major players:

$NET (+1,08 %) Cloudflare (NET, NYSE) - DDoS and API protection for online stores & payment platforms

$AKAM (+0,42 %) Akamai (AKAM, NASDAQ) - Application security & bot management in e-commerce

$FFIV (-0,09 %) F5 Networks (FFIV, NASDAQ) - API & payment security for digital platforms

Hidden Champions:

$RSKD (+0,77 %) Riskified (RSKD, NYSE) - Fraud prevention in online retail

$VRNS (+0,38 %) Varonis Systems (VRNS, NASDAQ) - Protection of customer data

$CYBR (+0,27 %) CyberArk (CYBR, NASDAQ) - Identity & access protection for payment processes

Shovel manufacturer:

$V (-2,85 %) Visa (V, NYSE) & $MA (-2,53 %) Mastercard (MA, NYSE) - not classic cybersecurity, but operator of secure payment networks

$ESTC (+1,43 %) (ESTC, NYSE) - fraud analytics for e-commerce platforms

$DDOG (+2,57 %) Datadog (DDOG, NASDAQ) - monitoring & security analytics for retail infrastructure

🔑 Takeaway:

Energy is particularly vulnerable due to OT/ICS systems, which is where specialists like Dragos come in.

E-commerce needs fraud prevention in addition to traditional web security, which is why players such as Riskified are occupying a niche.

Armaments & Defense

Major players:

$NOC (-0,4 %) Northrop Grumman (NOC, NYSE) - leader in cyberdefense for military & intelligence agencies, also developing offensive cyber capabilities

$BAESY (+2,5 %) BAE Systems (BAESY, OTC) - strong cyber intelligence division, protects critical military and government networks

$RTX (-1,4 %) Raytheon Technologies (RTX, NYSE) - defense company with growing cybersecurity portfolio for military communications & satellites

Hidden Champions:

$PLTR (-2,66 %) Palantir Technologies (PLTR, NYSE) - Data and analytics platform with strong cybersecurity component, often for defense ministries

$CACI (+2,51 %) CACI International (CACI, NYSE) - specializes in cyber intelligence, network protection and military IT services

$LDOS (-0,34 %) Leidos Holdings (LDOS, NYSE) - IT and cybersecurity service provider for US defense and NATO

$CLAV Clavister Holding AB (CLAV) - used by government and military organizations

$ADVE Advenica (ADVE) - Specialized security, relevant for government agencies and national infrastructure

Shovel manufacturer:

$LHX (-0,47 %) L3Harris Technologies (LHX, NYSE) - Provides communications and cyber hardware for military networks

$GD (-1,21 %) General Dynamics (GD, NYSE) - with its IT division GDIT also a provider of cyber defense infrastructure

$KTOS (+0,88 %) Kratos Defense (KTOS, NASDAQ) - specializes in drones, satellite systems and cyber hardening of defense communications

🔑 Takeaway:

In the defense sector, the boundaries between traditional defense and cybersecurity are blurring. Alongside the large defense contractors, hidden champions such as Palantir, CACI and Leidos are emerging to provide pure cyber and data expertise. Shovel manufacturers such as L3Harris and Kratos secure the technical infrastructure.

Software & insurance

Big players:

$OKTA (+1,3 %) Okta (OKTA), $CYBR (+0,27 %) CyberArk (CYBR), $CRWD (+0,69 %) CrowdStrike (CRWD)

- Identity, endpoint and cloud security

Hidden champions:

$VRNS (+0,38 %) Varonis (VRNS) - Data security

SailPoint (private, formerly NYSE) - Identity Governance

$FROG (-0 %) JFrog (FROG) - DevSecOps & Supply-Chain-Security

$CYBE (+0,53 %) CyberCatch Holdings, Inc (CYBE) - Provides AI-based cybersecurity SaaS

$GEN (-0,79 %) Gen Digital (GEN) - one of the largest consumer cybersecurity providers worldwide (Norton, Avast, LifeLock), strong in identity protection and data protection for consumers & small businesses

Shovel manufacturer:

$MSFT (-3,17 %) (MSFT), $GOOG (+0,47 %) Alphabet (GOOGL), $AMZN (-1,95 %) Amazon (AMZN)

- Cloud security base

$FFIV (-0,09 %) F5 Networks (FFIV) - API protection for SaaS & insurance platforms

🔑 Takeaway Software & Insurance

Data and identity protection take center stage. Major players such as Okta and CyberArk secure access, while hidden champions such as Varonis and JFrog provide specialist solutions. Cloud providers such as Microsoft and Amazon are both platform operators and security suppliers.

Industry, supply & raw materials

Major players:

$FTNT (+2,62 %) Fortinet (FTNT), $CSCO (-2,53 %) Cisco (CSCO), $PANW (+0,28 %) Palo Alto Networks (PANW)

- Network protection for critical infrastructures

Hidden champions:

$RDWR (+0 %) Radware (RDWR) - DDoS protection

$NCC (-1,18 %) NCC Group (NCC.L) - OT-Security & Penetration Tests

$SECT B (+1,21 %) Sectra (SECT-B.ST) - secure infrastructure in the OT/healthcare intersection

$CLAV Holding AB CLAV) - OT/ICS and infrastructure security

$ADVE Advenica (ADVE) - Specialized security, relevant for public authorities and national infrastructure

Shovel manufacturer:

$AVGO (+8,33 %) Broadcom (AVGO) - Security chips

Juniper Networks (JNPR) - Network backbones

$ANET (+0,36 %) Arista Networks (ANET) - high-end switches

🔑 Takeaway Industry, Supply & Raw Materials

OT/ICS systems in production, energy and raw materials are attractive targets. Fortinet and Palo Alto dominate, but hidden champions such as Radware and the NCC Group offer special expertise for attacks on industrial control systems.

Banks, Fintech & Holdings

Big players:

$CRWD (+0,69 %) CrowdStrike (CRWD), $PANW (+0,28 %) Palo Alto Networks (PANW), $ZS (+1,36 %) Zscaler (ZS)

- Core protection for banks & digital platforms

Hidden champions:

$NCNO (-0,77 %) nCino (NCNO) - Cloud Banking Security

$NCC (-1,18 %) NCC Group (NCC.L) - Audits & Compliance

$CYBE (+0,53 %) CyberCatch Holdings, Inc (CYBE) - Provides AI-based cybersecurity SaaS

$GEN (-0,79 %) Gen Digital (GEN) - through fraud prevention and identity topics

Shovel Manufacturer:

$FFIV (-0,09 %) F5 Networks (FFIV) - API security for payments

$AKAM (+0,42 %) Akamai Tech. (AKAM) - Web & Payment Security

$ESTC (+1,43 %) Elastic (ESTC) - Fraud Analytics

🔑 Takeaway Banks, Fintech & Holdings

High regulatory pressure makes cybersecurity a mandatory field. In addition to established providers, banks are relying on hidden champions such as nCino or Darktrace for cloud banking and anomaly detection. Shovel manufacturers such as F5 or Akamai secure payment APIs and banking portals.

Crypto & blockchain

Big players:

$PANW (+0,28 %) Palo Alto Networks (PANW), $FTNT (+2,62 %) Fortinet (FTNT), $CRWD (+0,69 %) CrowdStrike (CRWD)

- Core protection for exchanges, wallets and blockchain infrastructure

Hidden champions:

$BBAI (+0,92 %) BigBear.ai (BBAI) - Blockchain Fraud Detection

$RIOT (-0,62 %) Riot Platforms (RIOT) - Mining with a focus on security

Shovel manufacturer:

$NVDA (-3,33 %) Nvidia (NVDA), AMD (AMD) - Chips & Mining Hardware

$NET (+1,08 %) Cloudflare (NET), $AKAM (+0,42 %) Akamai Tech. (AKAM)

- Network protection for wallets & exchanges

🔑 Takeaway crypto & blockchain

Crypto ecosystems are heavily affected by attacks on exchanges, wallets and smart contracts. While traditional security players provide protection, niche providers such as BigBear.ai and Riskified are emerging that specialize specifically in fraud and blockchain risks.

Source: Own analysis, image material: schwarz-digits

Executive Summary

Analysis of the European cyber security market reveals a limited but strategically interesting selection of listed companies focusing on specialized niches. The search for public players in this segment is challenging, as innovative European market leaders such as Darktrace and Sophos have been acquired and delisted by well-funded US private equity firms in recent years.

This report identifies and analyzes three relevant, publicly traded European niche companies: the secunet Security Networks AG (Germany), the NCC Group plc (United Kingdom) and Yubico AB (Sweden). Each of these companies occupies a unique position in the market, which is characterized by specific business models and the regulatory and technological framework conditions in Europe. secunet benefits from its position as a reliable partner for government high-security solutions, the NCC Group from its diversification into professional services and software escrow, and Yubico from its pioneering role in the field of hardware-based authentication.

Market growth in Europe is largely driven by increasing cyberattacks, which are also fueled by geopolitical tensions, and by strong regulatory impulses such as the EU directives NIS2 and DORA. This creates a specific demand that differs from the primarily innovation-driven markets in the US.

The financial and strategic analysis shows that the companies are going through different phases of development. While secunet demonstrates robust and profitable growth, Yubico is in a challenging transition from a one-time sales to a recurring subscription model. The NCC Group is faced with the task of successfully implementing its strategic transformation to increase profitability. This dynamic provides a nuanced picture for investors exposed to the European cybersecurity sector.

Chapter 1: The European cybersecurity ecosystem - framework conditions and market dynamics

1.1 Market trends and growth drivers

The European cybersecurity market is in a phase of significant growth. The market size has been estimated at USD 63.12 billion in 2025 and is expected to grow to USD 105.45 billion by 2030, representing a compound annual growth rate (CAGR) of 10.81%.1 Other estimates see similar growth rates.2 This growth is driven by a number of interrelated factors resulting from both the changing threat landscape and the regulatory environment.

A key catalyst is the increasing frequency and sophistication of cyberattacks. In 2024, ransomware attacks on European organizations increased by 30%.1 These threats are often exacerbated by geopolitical tensions, as demonstrated by the Russia-Ukraine conflict, which has led to the weaponization of cyberattacks by state-sponsored actors.1 This escalating threat landscape is not just a passive phenomenon, but a direct cause of the growing demand for robust cybersecurity solutions. Businesses and public sector organizations are realizing that robust cyber defenses are no longer an optional IT expense, but a fundamental operational necessity.1 The causal chain is clear: geopolitical tensions are leading to an increase in sophisticated attacks, which in turn is leading to increased and mandatory investment in cyber defenses.

Within the market, the services segment is experiencing the fastest growth, with an expected CAGR of 13.8% by 2030.1 This indicates a shift from pure product sales to comprehensive solutions such as Managed Detection and Response (MDR), consulting services and outsourcing of day-to-day security operations. This trend is fueled by a significant shortage of qualified cybersecurity professionals in Europe, estimated at over 299,000 unfilled positions.1

1.2 Regulatory landscape and its impact

The dynamics of the European market are fundamentally different from those in the US, where demand is often driven by technological innovations such as zero trust or cloud solutions.4 In Europe, the main drivers of cybersecurity spending are the EU NIS2 and DORA (Digital Operational Resilience Act) directives.1 These regulations force companies, particularly in the financial sector (BFSI), to adhere to strict security standards and formalize the monitoring of service providers and the conduct of emergency drills.1

Strict compliance with these requirements is not just a cost factor for European cybersecurity companies, but a decisive competitive advantage. Companies that are positioned as reliable partners for managing governance, risk and compliance (GRC) requirements can build a stable and sustainable business model from this development. This creates a kind of "regulatory moat" that makes access more difficult for less specialized or international competitors and creates a specific market niche for EU-based and compliant providers.1

1.3 Definition of "niche" and selection criteria

For the purposes of this report, a "niche company" is defined as a company that focuses on a specific market segment or specialized technology that differentiates it from the broader offerings of global technology giants such as Cisco, IBM or Broadcom.2 The research therefore focuses on companies whose business models specialize in high-security government solutions, professional services or hardware authentication.

It is important to clarify the status of two former European market leaders that are no longer listed on the stock exchange:

• Darktrace: The UK company, a pioneer in AI-powered cybersecurity with its "self-learning AI" 10, was acquired by US private equity firm Thoma Bravo for USD 5.3 billion in October 2024 and delisted from the London Stock Exchange.12
• Sophos: Another well-known British provider specializing in endpoint security was also acquired by Thoma Bravo back in March 2020 and delisted from the stock exchange.14

The repeated takeover of prominent European players by the same US investment firm illustrates a key market dynamic: innovative European technology companies are attractive takeover targets for well-funded investors, which reduces the number of publicly traded companies in the European technology sector. This report focuses on the remaining independent players listed on European stock exchanges.

The niche companies that are analyzed in detail later in the report:

secunet Security Networks AG; $YSN (-1,01 %)

Germany

High security solutions for the public sector

NCC Group plc; $NCC (-1,18 %)

United Kingdom

Professional services & software escrow

Yubico AB; $ACQ SPAC (+2,11 %)

Sweden

Hardware-based authentication

Chapter 2: Analysis of listed niche companies in Europe

2.1 secunet Security Networks AG (Germany)

Company profile & niche:

secunet is a leading German cyber security company and is considered the IT security partner of the Federal Republic of Germany. The company serves a critical niche by providing highly secure software and hardware solutions for customers with particularly sensitive data, including government agencies, ministries, police and defense sectors. The company's success is based not only on its technological solutions, but also on its status as a reliable national partner. The geopolitical situation and the increasing need for sovereign, trustworthy solutions that do not come from foreign providers create a gap in the market that global, often US-based companies cannot fill. This protects secunet from direct international competition in its core segment.

Financial performance & outlook:

The company recorded a strong financial performance in the first half of 2025. Revenue increased by 19% to € 171.7 million and EBIT improved remarkably from € 1.4 million to € 7.2 million.16 This momentum is a strong indicator of the robust business strategy and high demand in the target market. The company has maintained its forecast for the year with sales of EUR 425 million and an EBIT margin of between 9.5% and 11.5%.16

Share performance:

The market's confidence in the business model is reflected in the share performance. In the last 52 weeks, the secunet share achieved a return of 89.0%, outperforming the benchmark index by 62.0%.

2.2 NCC Group plc (United Kingdom)

Company profile & niche:

NCC Group plc is a UK-based global cyber security and software resilience company listed on the London Stock Exchange. NCC Group's niche lies in the provision of comprehensive professional services such as penetration testing, incident response and compliance consultancy, complemented by its software escrow business. This enables companies to protect their software assets and minimize legal risks.

Financial performance & strategic change:

The report for the first half of the 2025 financial year shows a mixed financial picture. While revenue in the Software Escrow segment (Escode) increased by 1.8% on a constant currency basis, the core business area of cyber security recorded a decline of 5%. The company is undergoing a strategic change to move away from a pure volume strategy in the cyber security segment and instead focus on "strategic customer relationships". The management expects that this change will lead to a slight decline in sales in the short term, but should improve profitability and the quality of customer relationships in the long term. The decline in sales is therefore a direct, short-term result of the strategic realignment and not necessarily an indicator of declining demand.

2.3 Yubico AB (Sweden)

Company profile & niche:

Yubico AB is a pioneer in the field of hardware-based authentication and is listed on Nasdaq Stockholm. The company's YubiKey products offer a physical form of multi-factor authentication (MFA), which is considered one of the most secure methods of securing digital identities. The company's niche lies in providing highly secure, easy-to-use hardware solutions for businesses and consumers.

Financial performance & business model transition:

The quarterly report for Q2 2025 shows a complex financial situation that marks the company in a crucial transition. Net sales decreased by almost 19% year-on-year to SEK 499 million. At the same time, bookings for the newly launched subscription model (YubiKey-as-a-Service) increased by 41%. This apparent discrepancy can be attributed to the strategic transformation of the business model. Yubico is moving away from one-off hardware sales towards a recurring subscription business. This change inevitably leads to a short-term decline in revenue, as income is now spread over the term of the subscriptions. The true strength of the company therefore lies not in its declining quarterly revenue, but in the strong growth of its subscription-based revenue base, which provides a more stable and valuable foundation for future business development.

Chapter 3: Status of former European market leaders - acquisitions and the consequences for the market

3.1 Darktrace (United Kingdom)

Darktrace was an innovative player in the European cybersecurity market, listed on the London Stock Exchange. The business model was based on an AI-powered "Enterprise Immune System" technology that uses machine learning to learn the normal "behavioral pattern" of a network to detect unknown threats in real time. This pioneering work positioned Darktrace as a key player in the European technology market.

In April 2024, Darktrace announced that it had agreed to be acquired by US private equity firm Thoma Bravo in a deal valued at USD 5.3 billion. The acquisition was completed in October 2024 and the company was delisted from the stock exchange. The acquisition of one of Europe's most innovative and fastest-growing companies demonstrates a key market dynamic: successful and leading European technology companies are attractive acquisition targets for well-funded US investors seeking access to cutting-edge technologies and new markets. This reduces the number of available investment opportunities in the European public tech sector.

3.2 Sophos (United Kingdom)

Sophos was a prominent provider of endpoint security and cyber resilience solutions and was also listed on the London Stock Exchange. The company was acquired by Thoma Bravo in March 2020 and delisted. Since the acquisition, Sophos has continued its expansion strategy as a private company, as demonstrated by the acquisition of US company Secureworks for USD 859 million in 2025. The repeated acquisition of well-known European players by the same US investor underlines the dynamics of the shakeout and the erosion of the European stock market segment in this sector.

Chapter 4: Comparative analysis and outlook for investors

4.1 Comparison of strengths, weaknesses and market positioning

Each of the companies analyzed has a unique profile that is derived directly from its niche positioning.

• secunet: The company is strongly anchored in the public sector and critical infrastructure. Its dependence on German government business provides stability and a "regulatory moat" that protects it from international competitors, but could limit the pace of growth on a global scale.
• NCC Group: The company's strength lies in its diversification into professional services and software escrow. However, the current strategic shift carries the risk of short-term financial losses before the potential long-term benefits materialize in the form of improved margins and customer relationships.
• Yubico: As a pioneer in hardware-based authentication, the company has a strong brand name and a technological leadership position. The biggest challenge is to successfully manage the transition to a subscription-based business model, which will lead to revenue pressure in the short term but promises a more stable and better valued revenue stream in the long term.

4.2 Conclusion and outlook for investors

The choice of listed niche companies in the European cyber security sector is limited, but the remaining players offer interesting profiles. Dynamic market consolidation, driven by takeovers by US investors, is eroding the European public tech landscape, making the remaining companies particularly relevant for investors looking to invest directly in European technology.

secunet represents a robust and proven investment opportunity that benefits from stable business with the German state and EU regulatory requirements. The company has proven its ability to deliver profitable growth. Yubico, on the other hand, offers an investment opportunity with higher risk and greater potential. The short-term decline in sales is an inevitable consequence of the strategically important transition to a recurring revenue model. In the long term, this change could create a much more stable and valuable base. The NCC Group must prove that its strategic turnaround is successful in order to regain investor confidence and improve profitability.

For investors, a differentiated view is essential, taking into account the respective niche positioning, the strategic direction and the specific risks and opportunities of each company.

List of relevant but non-European cyber security companies

The global cybersecurity market is dominated by a number of large companies, mostly listed on US stock exchanges. Although these companies are not the subject of this report, they are relevant to understanding the broader market environment:

• Palo Alto Networks Inc (WKN: A1JZ0Q): Leading provider of network security platforms.
• Fortinet Inc (WKN: A0YEFE): Network security specialist.
• CrowdStrike Holdings Inc (WKN: A2PK2R): Market leader in cloud-based endpoint protection.
• Zscaler Inc (WKN: A2PSFR): Market leader in zero trust and cloud security.
• Cyber-Ark Software Ltd (WKN: A12CPP): Specialist in enterprise IT security and a leader in identity security.
• Okta Inc (WKN: A2DNKR): Pioneer in identity and access management.
• Check Point Software Ltd (WKN: 901638): Provider of cloud-based security platforms.8
• Datadog Inc (WKN: A2PSFR): Monitoring service for cloud applications.

References

Europe Cybersecurity Market Size, Share, Analysis, Trends - Mordor Intelligence, accessed September 1, 2025, https://www.mordorintelligence.com/industry-reports/europe-cybersecurity-market

Europe Cyber Security Market Size & Outlook, 2024-2030, accessed September 1, 2025, https://www.grandviewresearch.com/horizon/outlook/cyber-security-market/europe

Europe Cybersecurity Market Size, Competitors & Forecast, accessed September 1, 2025, https://www.researchandmarkets.com/report/europe-it-security-market

Cybersecurity Stocks: The Best Picks for 2025 - Investing.com, accessed September 1, 2025, https://de.investing.com/academy/stock-picks/cybersecurity-aktien-2025/

Best Cybersecurity Stocks & Funds of 2025 | The Motley Fool, accessed September 1, 2025, https://www.fool.com/investing/stock-market/market-sectors/information-technology/cybersecurity-stocks/

ENISA NIS360 2024 report: A comprehensive look at cybersecurity maturity and criticality of NIS2 sectors, accessed September 1, 2025, https://www.enisa.europa.eu/news/enisa-nis360-2024-report

Relevant information for our investors - secunet Security Networks AG, accessed September 1, 2025, https://www.secunet.com/en/about-us/investors

Cybersecurity | Cybersecurity Stocks | finanzen.net, accessed September 1, 2025, https://www.finanzen.net/anlagetrends/cybersecurity

The best cybersecurity stocks - justETF, accessed September 1, 2025, https://www.justetf.com/en/how-to-stocks/cyber-security-stocks/

Top AI Cyber Security Company | About Darktrace, accessed September 1, 2025, https://www.darktrace.com/company

Cyber AI: Augment your security team and stop novel threats - Darktrace, accessed September 1, 2025, https://www.darktrace.com/cyber-ai

Darktrace announces formal completion of its acquisition by Thoma Bravo, accessed September 1, 2025, https://www.darktrace.com/news/darktrace-announces-formal-completion-of-its-acquisition-by-thoma-bravo

Darktrace | Jefferies.com, accessed September 1, 2025, https://www.jefferies.com/emea-case-studies/darktrace/

Sophos - Wikipedia, accessed September 1, 2025, https://en.wikipedia.org/wiki/Sophos

Sophos Completes Secureworks Acquisition, accessed September 1, 2025, https://www.sophos.com/en-us/press/press-releases/2025/02/sophos-completes-secureworks-acquisition

Secunet Security Networks AG Reports Half-Year Growth and Maintains Yearly Forecast, accessed on September 1, 2025, https://www.webdisclosure.com/article/secunet-security-networks-ag-reports-half-year-growth-and-maintains-yearly-forecast-B09ZNgGeKnC

Secunet Security Networks Share: Real-time Price & Analysis (727650 | YSN), accessed on September 1, 2025, https://aktie.traderfox.com/visualizations/DE0007276503/LS/secunet-security-networks-ag

NCC Group plc - AnnualReports.com, accessed September 1, 2025, https://www.annualreports.com/Company/ncc-group-plc

Network Penetration Testing Services - NCC Group, accessed September 1, 2025, https://www.nccgroup.com/technical-assurance/network-infrastructure-architecture-container-security/network-penetration-testing-services/

Penetration Testing Services | NCC Group, accessed September 1, 2025, https://www.nccgroup.com/technical-assurance/penetration-testing-services/

NCC Group plc Unaudited interim results for the period ended March 31, 2025, accessed September 1, 2025, https://www.nccgroupplc.com/media/nqfb2xsl/ncc_group_rns_h1_fy25.pdf

The share - Yubico Investor Relations, accessed September 1, 2025, https://investors.yubico.com/en/investors/the-share/

Revenue model - Yubico Investor Relations, accessed September 1, 2025, https://investors.yubico.com/en/what-we-do/revenue-model/

Business model - Yubico Investor Relations, accessed September 1, 2025, https://investors.yubico.com/en/what-we-do/business-model/

Yubico AB Investor Relations - Alpha Spread, accessed September 1, 2025, https://www.alphaspread.com/security/sto/yubico/investor-relations

Darktrace: Pioneering AI in the Cyber Security Space - Summit Partners, accessed September 1, 2025, https://www.summitpartners.com/resources/darktrace-pioneering-ai-in-the-cyber-security-space

Darktrace to See Continued Revenue Momentum, Slower Customer Acquisition Rate, accessed September 1, 2025, https://visiblealpha.com/data-snapshot/darktrace-to-see-continued-revenue-momentum-slower-customer-acquisition-rate/

Sophos Group PLC (LON:SOPH) - Share Price - Intelligent Investor, accessed September 1, 2025, https://www.intelligentinvestor.com.au/shares/lon-soph/sophos-group-plc/share-price

Just watch. Could be something.