SEPPmail AG, a Swiss-German email security company, acquired CyberPilot ApS, a security awareness training company based in Aarhus, Denmark. CyberPilot published the official SEPPmail press release on its blog on 13 August 2026.
Signing and closing have both been completed. The two sides agreed not to disclose the purchase price, and no other financial terms were published.
CyberPilot will keep running as an independent unit inside the SEPPmail Group, and its current management will join the group's management board. Existing customers of both companies keep their contracts, contacts and support for now, according to the release.
What CyberPilot built
CyberPilot was founded in 2016 and works only on the human side of IT security. It sells continuous security awareness training and phishing simulations in more than 20 languages, along with a course catalogue and tools for measuring security culture. The training teaches staff how attacks unfold and which mistakes are common, and the simulations measure how well an organisation's employees respond to a realistic phishing email.
The company employs about 50 people and works with more than 1,000 organisations across Europe, according to the release and to Swiss trade outlet IT Reseller. SEPPmail said CyberPilot's products are simple to administer, which makes them suitable for mid-sized organisations. CyberPilot said it applies artificial intelligence where it saves work but leaves control with the administrator.
Rasmus Vinge, CyberPilot's chief executive and co-founder, said the company was built for learning impact rather than for the length of its feature list, and that the prospect of a European email security platform persuaded the team to join SEPPmail and its investor LEA Partners.
“We built CyberPilot for impact from the very beginning, not for feature count.”
Why SEPPmail is buying
SEPPmail has operated for more than 20 years from offices in Switzerland and Germany. Its products cover email signing and encryption under the S/MIME and PGP standards, GINA and managed domain encryption for exchanging encrypted mail with partners who have no encryption of their own, large file transfer, and a spam and malware filter in its seppmail.cloud service. Those tools work largely without user action.
The company described CyberPilot as the first time it has moved beyond technical protection to address what it calls human risk. Marcus Zeidler, who became SEPPmail's chief executive in May 2026 according to IT Reseller, said the technical side had been covered for years and the remaining factor was people.
Zeidler also said the choice of a European seller was deliberate. He cited growing unease among customers about providers based outside Europe and said data sovereignty had become a supply chain requirement for many of them. The release said providers from outside Europe were never considered.
LEA Partners and a platform strategy
SEPPmail is backed by LEA Partners, a Karlsruhe investment firm with more than €2 billion (about $2.3 billion) in committed capital that says it has supported more than 140 technology companies since 2002. Law firm Rödl announced in January 2026 that it had advised SEPPmail on its strategic partnership with LEA Partners. Rödl said at the time that SEPPmail had more than 3,400 customers.
The release called CyberPilot the second acquisition in building a sovereign European email security platform. In December 2025, Netzwoche reported that SEPPmail was taking over most of the Swiss business of Lyon-based email provider Alinto, including the majority of its Swiss customers.
Kurt Weise, a partner at LEA Partners, said a fully sovereign European email security platform does not yet exist and that SEPPmail had the customer base, channel and technology to build one. SEPPmail said it would add further disciplines over the coming years and would keep choosing European technology partners.
What happens to customers and partners
SEPPmail sells only through resellers and distributors, and CyberPilot's products will follow the same model in German-speaking countries. Before that roll-out, the two companies plan to adapt localisation, packaging and features for the DACH market and to train sales and support staff. Availability for distributors and partners is planned for late 2026.
The next confirmed product step is a central administration console from which customers can manage every part of the platform. In the medium term, SEPPmail said it plans to take the combined offering into further European markets.
In a note to its own customers, CyberPilot said it would keep developing the products they use and asked them to send questions to their existing contacts.
