The report covers Europe’s cybersecurity industry, investment landscape, and evolving cyber posture, but it also spends considerable time on a more basic question: what actually counts as “offensive cybersecurity” in the first place?

A central theme emerged across the conversation: greater digital sovereignty does not have to mean greater digital isolation.

The report highlights that open-source software faces particularly acute coordination challenges due to fragmented ownership and limited maintainer resources, compared to the more centralized response model in proprietary software.