Italian Duo Merges to Forge European Human-Centric Cyber Shield

ROME & LECCO, Italy – January 27, 2026 – In a significant move to consolidate European cybersecurity capabilities, Italian firms Libraesva and Cyber Guru have announced a strategic combination to create a new continental leader focused on the most unpredictable element in digital defense: people.

The merger brings together Libraesva's Gartner-recognized email security platform with Cyber Guru's AI-driven security awareness training. The new entity aims to provide an integrated, end-to-end solution against a rising tide of sophisticated attacks that target human behavior, from phishing and social engineering to business email compromise.

This combination is not just a business transaction; it's a strategic response to a market dominated by US-based titans and a direct play to build a European cybersecurity champion capable of addressing regional needs for data sovereignty and compliance.

A New Front in Cyber Defense

The cybersecurity landscape is undergoing a fundamental shift. For years, the focus was on building higher digital walls—firewalls, antivirus software, and network intrusion systems. Today, attackers have learned it is often easier to walk through the front door by tricking an employee than to break down the fortress walls. Industry analysts have taken note, with firms like Forrester predicting that the human element will be involved in 90% of data breaches.

This is the reality the newly formed Libraesva-Cyber Guru entity is built to address. By integrating advanced email threat detection directly in the inbox with continuous, adaptive training, the company intends to create a feedback loop that both blocks immediate threats and strengthens long-term human resilience.

"This strategic combination is a major step in building a strong and credible European cybersecurity group," said Paolo Frizzi, CEO of Libraesva, in the announcement. "By bringing together our email security expertise with Cyber Guru’s human risk capabilities, we are creating a fully integrated platform that protects organisations where attacks most often start: in the inbox and with people."

The approach aligns with the latest industry thinking, which has evolved from simple security awareness training (SAT) to more comprehensive frameworks like Security Behavior and Culture Programs (SBCP) and Human Risk Management (HRM). The goal is no longer just to make employees aware of threats but to measurably change their behavior and cultivate a security-conscious culture. As Gianni Baroni, CEO of Cyber Guru, stated, "We enable organisations to defend against attacks that target people, not just technology."

Challenging the Titans in a Growing Market

The combined company enters a fiercely competitive but rapidly expanding market. The European cybersecurity sector is projected to grow from roughly USD 57 billion in 2024 to over USD 95 billion by 2029, spurred by relentless cyber-attacks and stringent regulations like GDPR. Within this, the email security and security awareness training markets are hotbeds of activity.

The email security space is dominated by giants like Proofpoint, which holds a significant market share, and other major players like Mimecast, Abnormal Security, and Fortinet. Similarly, the security awareness training market is led by KnowBe4, a company that serves over 70,000 organizations worldwide. These established leaders have vast resources and extensive global reach.

Against this backdrop, the Italian duo is carving out a distinct identity as a European powerhouse. With a combined base of over 3,500 customers and a network of 500 partners, they have a solid foundation. Libraesva's inclusion in the Gartner® Magic Quadrant™ for Email Security provides crucial third-party validation of its technology, giving it credibility to compete on a global stage. The company's emphasis on privacy-first solutions and local language models is also a key differentiator, particularly for European customers navigating complex data sovereignty requirements.

By offering a single, integrated platform, the new entity aims to solve a major pain point for IT departments: vendor sprawl. CISOs are increasingly looking to consolidate their security stack to reduce complexity, improve integration, and lower total cost of ownership. The promise of a unified solution for email security and human risk management could be a compelling proposition, especially for small to medium-sized businesses (SMBs) and managed service providers (MSPs).

The Path Forward: Integration and Regulation

The announcement marks the beginning of a complex process. The transaction's success hinges on the seamless integration of two distinct technologies, company cultures, and go-to-market strategies. The goal is to create a platform that is more than the sum of its parts, offering unified analytics and a cohesive user experience that genuinely simplifies cyber defense for customers.

The deal is expected to close in the coming months, pending what the companies describe as "customary closing conditions and regulatory approvals." Given that both firms are based in Italy, the transaction will likely be reviewed by the Italian Antitrust Authority (AGCM). Depending on the combined entity's turnover, it could also fall under the purview of the European Commission's merger control, though the focus on creating a "European champion" might be viewed favorably by regulators keen on fostering a stronger domestic tech industry.

For customers and partners, the merger promises a more comprehensive and powerful security portfolio. The combined entity's challenge will be to execute on this promise, delivering a truly unified defense that hardens both technology and people against the persistent and evolving threats of the digital age.