Company
A European security company that tells you the truth
Cryvanta builds AI-native offence and defence for organisations that have to answer to European regulators. Founders, operating team and board in one room — and a habit of describing our work and status exactly as they are.
- Founded
- Nordic · EU
- Roster
- 6 current · 1 prospective
- Offence
- Available now
- Defence
- Early access
Why we exist
Security is being reshaped by AI. Europe shouldn't rent it.
The same models that let a small team run an AI-driven pentest can run an AI-native SOC. That shift is happening whether or not it happens in Europe — and most of the tools driving it send your data and your reasoning to someone else's cloud.
Cryvanta is our answer: AI that finds your gaps and AI that watches them, built so both can stay inside the EU, on the model you choose. Our offensive service tests your defences; our platform learns from those tests. Each makes the other sharper.
Principles
How we work, in four lines
Honesty over hype
We compare ourselves in real terms — lines of code, feature counts, years of work — not with slogans. If something isn't ready, we say so. It's the whole reason a customer can trust the parts that are.
Sovereignty by default
European organisations shouldn't have to choose between good security and keeping their data at home. We build so they don't have to.
Autonomy with brakes
We want the machine to do the tireless work at machine speed — and to stop, visibly, before anything a human would want to sign off on.
Small team, sharp scope
We're not trying to out-feature the incumbents. We're building the specific things a Nordic, EU-regulated organisation actually needs.
The team
The people behind Cryvanta
Founders, the operating team and board members — with prospective additions labelled plainly rather than presented as completed hires.
Offence
01
Robin Österdal
Founder & CEO
Leads Cryvanta PenTest. Thinks like an attacker, tests what can actually be exploited, and explains the result without hiding behind a scanner report. The offensive side that keeps the defensive side honest.
- PenTest engagements
- Attack tooling
- Findings → detections
Defence
02
Malthe Bang Norengaard
Co-founder & CTO
As a student he helped uncover security flaws in exam-monitoring software used across Danish schools, and the vendor fixed them. The same attention now goes into everything Cryvanta runs on: the endpoint sensor, the detection and correlation pipeline, the AI analyst that reasons over them, and the infrastructure holding it together — with a bias toward making it work in a real estate rather than in a demo.
- Endpoint sensor & detection
- The AI analyst
- Platform & infrastructure
Board
03
Henrik Andersson
Board member · Company & Customer Delivery
Nearly 30 years in Swedish IT consulting, the last 15 as senior partner at Top of Minds — there from the founding year. Built it into a data and analytics firm serving ICA, Åhlens, Svenska Spel and Länsförsäkringar, reaching SEK 114m in revenue at a 14% operating margin, then through the acquisition by Nasdaq Helsinki-listed Digia. He has done what Cryvanta is setting out to do, from first client to acquisition.
- Data & analytics
- Consulting at scale
- Acquisition experience
Board
04
Tobias Österdal
Board member · Business & Growth
Vice President of Europe at White Pearl Technology Group, a listed Swedish tech group. 25+ years leading and scaling technology organisations, including acting CEO, COO and deputy CEO roles. Has built the structure companies need before they need it. Makes sure growth never outruns what’s holding it up.
- Scaling operations
- M&A execution
- Board governance
Board
05
Linus Ingemarsson
Board member · AI
Co-founder of Alice Labs. 100+ AI implementations delivered and 500+ professionals trained across finance, industry, healthcare and the public sector. Builds AI that reaches production, EU AI Act-native from day one. Makes sure the AI in the product earns its place.
- AI strategy
- Production AI
- EU AI Act
Board
06
Niklas Solvang
Board member · Engineering
Technical Product Manager at Apport Systems. 25 years building software in production, 14 of them going from senior developer to head of development. Systems that run warehouses where downtime isn’t an option. Asks the one question that matters: does the architecture hold?
- Software architecture
- Data at scale
- Agentic AI
Prospective
07Benjamin Ekström
Prospective team member · Customer delivery
Included here as a prospective team member, not a current employee. If the hire is completed, the intended focus is practical customer delivery and keeping work moving without a layer of ticketing-system distance.
“A security vendor that oversells is a security vendor you can't trust when it matters. We'd rather tell you the pentest is real today and the SOC is early access — and let you decide — than round everything up to done.”
Work with us
Whether you want a pentest, a seat in the SOC early-access programme, or just a direct conversation about AI and sovereignty — we're glad to talk.