The European product company for controlled agentic cybersecurity.
oneSec is building FokusRM as the flagship for cyber and IT risk operations and developing the technology that lets agentic systems use evidence, act within clear bounds, and remain controllable in critical workflows. LawKI remains our established second product vertical in legal.
What already exists today.
- Flagship
FokusRM
Cyber and IT risk operations across risks, controls, third parties, findings, evidence, and reporting.
- Second product vertical
LawKI
Legal intelligence grounded in an organisation’s own precedents, policies, and playbooks.
- Technology direction
Applied agentic AI
Controlled agents with evidence, integrations, observability, and human approvals.
- Company
oneSec FlexCo · Vienna
EU-native and built for European security, privacy, and procurement requirements.
Applied agentic AI, bounded for critical work.
We are not building an autonomous black box. Our technology combines grounded evidence, clearly defined tools, and visible human responsibility into a controllable operating layer for agentic workflows.
- 01
1. Retrieve evidence
Agents work from authorised sources, respect access boundaries, and preserve provenance and version history.
- 02
2. Act within bounds
Tools, permitted actions, policies, and escalation paths define the authority available in each workflow.
- 03
3. Operate visibly
State, actions, outcomes, and human approvals remain observable, auditable, and correctable.
The next generation of security software will operate the work, not merely record it.
Cyber and IT risk teams work across risks, controls, third parties, findings, and evidence. The work is tightly connected, but the systems are often fragmented. Agentic software can close that gap when actions, permissions, and evidence are controlled from the start.
oneSec executes this thesis through products. FokusRM is the primary market entry in cybersecurity. LawKI demonstrates in legal that the same technical discipline transfers to a second precision- and trust-driven domain.
Why cybersecurity and agentic systems are converging now.
Three developments make the market attractive for a focused European product company.
- 01
Cyber risk operations remain fragmented
Teams manage connected decisions across separate registers, control tools, vendor processes, and evidence stores. The operational integration need is immediate.
- 02
Regulation increases the value of durable systems
DORA, NIS2, and related requirements make traceable ownership, evidence, and controls operational procurement criteria.
- 03
Agentic AI requires a control layer
Once software uses tools and takes action, permissions, policy, observability, and human checkpoints become core product capabilities.
Cybersecurity first, with legal retained as active proof.
- Product portfolio
FokusRM · Cybersecurity
Our flagship and current commercial priority for cyber and IT risk operations.
- Product portfolio
LawKI · Legal
Our established second product vertical for grounded legal work with human control.
- Product portfolio
Shared technology layer
Cross-product capabilities for evidence, identity, policy, actions, integrations, and observability.
What we share on request.
We run a structured process with investors who fit the stage and the thesis. After a first conversation, we share material from a data room under NDA.
Company deck
Thesis-led deck with market, go-to-market, team, and milestones.
On requestFinancial snapshot
Traction, pipeline, and model assumptions in structured form.
Data roomProduct and delivery dossier
FokusRM, LawKI, and the shared architecture for controlled agentic systems.
Data roomCompliance and governance pack
Policies, controls, and regulatory alignment.
On request
Short answers before the call.
- What funding stage are you in?
- Early stage. Specifics are shared under NDA in the first conversation.
- Who are the typical customers?
- European enterprises and upper mid-market with demanding cyber and IT risk processes; LawKI serves legal departments and law firms in parallel.
- Why Europe first?
- Because residency, controls, and auditability have become procurement criteria here — and because depth in this market is a hard barrier against horizontal US vendors.
- How do FokusRM and LawKI relate?
- FokusRM is our flagship and current commercial priority. LawKI remains an active product and demonstrates that our technical discipline transfers to a second critical domain.
- What does applied agentic AI mean at oneSec?
- Systems that retrieve evidence, use defined tools, and execute bounded steps with visible permissions, human checkpoints, and complete observability.
Start a focused investor conversation.
Send a short note on fund, stage, investment range, and your perspective on cybersecurity or applied agentic AI. We will respond within one working day.