Søren Laustrup has spent three decades in cybersecurity. His first venture, a knowledge management systems company, closed in 2000. He then devoted two decades to Logpoint, which he bootstrapped for fifteen years before accepting investment rounds in 2017 and 2020, ultimately exiting in 2022/23. Since then, he has backed six companies as an angel investor, with two or three already achieving exits.
Eighteen months ago, Laustrup launched Sovera Security from Copenhagen—an AI-native, sovereign MDR (Managed Detection and Response) provider. The company represents his latest bet on what European enterprises will demand from their security vendors over the coming decade.
The fragmentation crisis: too many disconnected tools
Modern cybersecurity infrastructure suffers from severe tool sprawl. Each new attack surface—endpoints, networks, identity, cloud—has generated its own category of solution: EDR, NDR, IAM, SIEM, SOAR. Each generates its own stream of alerts, and they rarely communicate effectively with one another.
According to Laustrup, "Nobody can manage that. If you have a larger midsize or even a large enterprise, you simply don't have the people with the expertise to manage all of these alerts." The challenge deepens because modern attackers move fluidly across these boundaries—from browser to network to application to cloud—while security teams remain trapped watching siloed signals from disparate vendors.
Sovera addresses this fragmentation not by adding another layer to the stack, but by ingesting signals from whatever tools a company already operates and applying AI natively to synthesize them. "We are AI native from the very ground up," Laustrup explains. "We are not another tool laying on top of what we already have." When Sovera's AI agents encounter questions beyond their scope, they escalate to human analysts—reversing the typical model where humans use AI as a supporting tool. Here, AI performs primary analysis while people serve as the safety net.
The ideal customer profile
Sovera targets companies with existing security maturity: at least one or two established tools such as a SIEM or EDR already in place, operating in regulated environments or managing critical data, with 200 or more employees. "Whether it's governmental or it's private, it doesn't really matter," Laustrup says. The company deliberately positions itself not as a first security purchase but as the integration layer that finally makes existing tools function cohesively.
Sovereignty as a structural commitment
Sovera's defining differentiator is embedded in its name and operations. The company markets itself as Europe's sovereign alternative to US-dominated security infrastructure, though Laustrup emphasizes that sovereignty extends far beyond data residency.
"It's not only where data reside, but it's also where data are processed and looked at," he states. Sovera runs its models within its own Danish data centre with no external connectivity to remote systems. Its SOC and MDR analysts are Danish citizens operating around the clock within Denmark. Because the models operate with tight scoping and guardrails, Laustrup argues Sovera avoids risks associated with more permissive AI deployments: "They cannot break out — they're super hard harnessed and guardrailed in what they can do."
For companies in regulated sectors or managing critical infrastructure, this combination—data locality, analyst locality, and model containment—has shifted from a preference to a procurement requirement. This shift appears reflected in Sovera's early performance: 30 clients and approximately 30 employees within its first eighteen months.
Rethinking MDR reporting: from history to foresight
When asked what most MDR reporting gets wrong, Laustrup is direct: obsession with the past. "What most people are looking at… it's all about the history. What was the MTTR, how many alerts, how much this and that? To me, that's just like yesterday's news."
Sovera instead emphasizes continuous improvement—proactively mapping client infrastructure, surfacing blind spots, and prioritizing remediation based on actual business criticality rather than generic severity scores. "If this system is hacked and is taken offline, or you cannot reach it anymore — does it mean nothing, or does it mean the world to the company?" Laustrup says this question forms the foundation of meaningful value conversations with clients.
Financing without venture capital: maintaining control
Unlike many founders in his position, Laustrup deliberately avoided venture capital. A small circle of trusted private investors, combined with non-dilutive debt financing, gave him complete ownership of Sovera's cap table—a choice shaped by three decades observing how external capital reshapes company incentives.
"You need to understand that even though [investors] don't have the majority of the shares, they are there for the money and nothing else — not because they like you," he says. He acknowledges the trade-offs candidly: VCs pressure founders to burn cash and accelerate growth; private equity firms often position themselves as the "last investor," leaving founders with minimal leverage if cash runs short. "The money will, out of the blue, be super expensive, and you cannot go anywhere because you only have two or three weeks to act on it."
Sovera instead tapped Denmark's state innovation fund, EIFO, which provided debt financing approved within 24 hours without equity dilution. "This gives us control over the company to make sure we do what's best for our team, our customers and at the pace that makes sense."
Advice for other founders
Two recurring themes emerged from Laustrup's guidance:
- Hire selectively from your own network rather than through open recruitment. "If you bring in a guy or girl, you at least won [before] — the company will do everything to make you successful." He seeks a "thriving environment where there are plenty of rooms to make mistakes" where everyone shares a common purpose.
- Revisit strategy weekly, not just operations. "Many companies are losing that — they just go back to operations and do things the same way as they did yesterday, and pray and hope for the best," rather than regularly testing whether execution still aligns with strategy.
When asked to characterize his team in a single word, Laustrup answered without hesitation: "Passion."
Europe's capital gap: what Denmark shows about the continent's future
Laustrup speaks positively about Denmark's early-stage ecosystem while being blunt about its limitations. Incorporation happens quickly—companies can launch in under a week—the system is heavily digitized and predictable, and early-stage capital flows readily. Pre-seed funding backed by state programmes like EIFO and a robust national angel network is, in his words, "easy peasy."
The bottleneck emerges at Series A. "A rounds, more than 15 million euros — you have to look outside," he says. This capital gap is quietly reshaping ownership of Denmark's most promising companies. Laustrup points to fast-growing Danish startups that, within a few years, became majority-owned by American and UK investors rather than domestic ones—a dynamic now debated "even at a very high political level" in Denmark.
He frames this as a European-wide capital problem, not merely a Danish one. Comparing Europe's collective AI infrastructure investment to the resources required to build a single US foundation model lab, he estimates Europe currently possesses "less than 1% of that capacity." A recent European fund announcement of €1.5 billion, he argues, needs to reach €15 billion to meaningfully compete. One underutilized lever: Europe's large pension funds, which remain largely closed to direct early-stage startup investment.
What comes next
Sovera launched publicly in June 2026 and remains in early growth. Laustrup's ambitions clearly reflect his experience building and exiting cybersecurity companies previously. His message to founders: financing structure matters as much as product, hiring discipline compounds over time, and in a market saturated with point solutions, disciplined choices about what not to build rival decisions about what to build.
Source: Startup Reporter
