Physics Cyber: The AI-Native Cyber Firm Targeting a US$15M IPO
From France to the world — a former elite global consultant builds an AI cybersecurity powerhouse across Surabaya, Minneapolis and Geneva, and prepares for its next chapter.
In a global cybersecurity market valued at US$25.5 billion in AI-enabled security alone — and growing at nearly 15% per annum toward US$50 billion by 2031 — the window for well-positioned AI-native startups to capture significant share has never been wider. Physics Cyber (PhysicsCyber), a multi-jurisdictional cybersecurity firm operating from Minneapolis, Geneva and Surabaya, is emerging as one of the more intriguing pre-IPO prospects in the Asia-Pacific and North American markets for 2026. At its helm is Erwan Nguyen — a French-born technologist who traded life as one of the world's highest-paid consultants for the founder's path, bringing with him a rare combination of elite client access, multi-continent operating experience, and a conviction that the cybersecurity industry needed to be rebuilt from first principles.
With a target valuation of US$15 million and a differentiated dual-capability model — combining AI-powered cyber defense with controlled AI-driven offensive security tools — Physics Cyber occupies a rare strategic position: it can both protect organisations from the next generation of AI-powered attacks and simulate them. This analysis examines the firm's services, client footprint across four key markets, and the structural tailwinds supporting its growth case.
01 Company Profile: Science Applied to Security
Founded on a deceptively simple principle — that digital security is not an opinion but a discipline governed by the laws of logic and physics — Physics Cyber describes itself as a "global collective of elite security engineers and infrastructure architects." The company operates 24/7 Security Operations Centres (SOCs) and a global server network, providing what it calls "foundational integrity" to protect critical data at enterprise and government scale.
Its geographic footprint across Minneapolis (North America operations), Geneva (European compliance and financial sector clients), and Surabaya (Southeast Asia hub and engineering base) is not accidental. Each location reflects a deliberate market positioning: the US for enterprise and defence contracts, Switzerland for its regulatory credibility with financial institutions and international organisations, and Indonesia for cost-efficient engineering talent and proximity to the fast-growing Southeast Asian cybersecurity market.
What most distinguishes Physics Cyber in a crowded field is its dual capability architecture: a defensive AI stack for threat detection, zero-trust architecture and managed security, and an offensive AI bot platform for red-team simulation, penetration testing and adversarial stress-testing. In 2026, where cybercriminals are deploying AI-native attack tools at scale, the ability to fight fire with fire — to simulate AI-powered attacks before they arrive — is rapidly becoming a board-level priority for enterprise security teams.
02 The Founder: Erwan Nguyen
At the centre of Physics Cyber's story is its founder, Erwan Nguyen — whose name and portrait appear prominently on the company's homepage and whose philosophy of applying scientific rigour to cybersecurity permeates every aspect of the firm's positioning. Nguyen represents the archetype of the globally mobile founder: operating across three time zones and two hemispheres, building a business that is simultaneously local to Southeast Asia and credible to enterprise clients in the US and Europe.
Born and raised in France, Erwan Nguyen built one of the most impressive pre-startup careers of any founder in the global cybersecurity space. Before Physics Cyber, he was counted among the world's highest-paid technology consultants — advising governments, financial institutions and multinational corporations on digital security architecture, infrastructure risk and systems integrity. His consulting work spanned multiple continents, placing him at the intersection of the world's most sensitive and high-stakes digital environments at a time when the threat landscape was rapidly being reshaped by machine learning and state-level cyberattacks.
It was precisely that insider vantage point — seeing how the most powerful organisations in the world were still failing to adequately protect themselves — that compelled Nguyen to stop consulting and start building. He walked away from a career that most would never leave, trading the certainty of elite fees for the uncertainty of the founder's path. The decision reflected a belief that the problem was too important, and the window too narrow, to solve from the outside.
Nguyen founded Physics Cyber on the conviction that cybersecurity is a science, not a service — that the same laws of logic, cause and effect, and measurable behaviour that govern the physical world must be applied to the digital one with equal rigour. Leveraging his deep network across Europe, the United States and Southeast Asia, he built the firm from the ground up across three operating hubs: Minneapolis for North American enterprise and defence clients, Geneva for European financial sector credibility and regulatory alignment, and Surabaya as the engineering heart of the business — a base that combines world-class technical talent with proximity to one of the fastest-growing and most under-protected cybersecurity markets on earth.
Nguyen's vision is distinctly dual-natured. Where most cybersecurity founders build either an offensive or a defensive capability, he has built both — understanding that in 2026, the only credible way to defend against AI-driven attacks is to understand, simulate and pre-empt them. This philosophy, forged through years at the highest levels of global consulting, has shaped Physics Cyber's entire product architecture.
03 Mission Statement
To make the digital world unshakeable — by applying the laws of logic, physics and scientific precision to cyber defense, and by engineering environments where threats do not merely fail, but cannot exist.
Physics Cyber's mission is grounded in three operating principles drawn directly from its founder's philosophy. First, scientific precision: every security decision must be grounded in provable logic, measurable outcomes and rigorous testing — not assumptions or checkbox compliance. Second, proactive over reactive: the firm does not wait for attacks to arrive; it builds the environments and runs the simulations that prevent them from succeeding. Third, accessibility at scale: advanced cybersecurity should not be the exclusive preserve of Fortune 500 companies — Physics Cyber's tiered managed services model is designed to bring enterprise-grade protection to emerging businesses in Indonesia and Southeast Asia, where the threat surface is growing fastest and the protection gap is widest.
04 Services: Dual-Stack AI Architecture
Physics Cyber's service catalogue is organised across three pillars: active cyber defense, compliance and audit, and offensive security tooling. Taken together, they form a full-spectrum managed security offering that goes well beyond the point solutions offered by many regional competitors.
🛡 AI Cyber Defense
AI-powered threat detection and behavioral anomaly analysis across endpoints, networks and cloud. The platform learns normal operating patterns and flags deviations autonomously, enabling machine-speed incident response that outpaces human analyst timelines.
⚔ AI Offensive Bot Platform
Physics Cyber's most distinctive capability — an AI-driven offensive agent designed to simulate adversarial attack scenarios at scale. Used for authorised red-team engagements, penetration simulation and vulnerability stress-testing, it replicates the behaviour of state-level and criminal AI attack toolchains.
🌐 Web & Phishing Security
End-to-end protection against phishing campaigns, malicious domains, and web-layer attacks. Includes real-time URL reputation scoring, employee simulation phishing and brand impersonation monitoring.
☁ Cloud Network Security
Zero-trust cloud architecture design, cloud misconfiguration auditing, and continuous monitoring across public, private and hybrid cloud environments. Integrates with AWS, Azure and GCP natively.
🔐 ISO 27001 & SOC 2 Compliance
Pre-certification audit services, gap analysis and ISMS design for ISO 27001 and SOC 2 Type II compliance. Critical for clients in financial services, healthcare and government procurement pipelines across all four of Physics Cyber's markets.
🔎 Ethical Hacking & Pen Testing
Human-led and AI-assisted penetration testing using industry-standard tools (Gobuster, Nmap, Shodan) augmented by Physics Cyber's own proprietary offensive bot stack. Provides attack-surface mapping, exploit chain analysis and remediation reporting.
🖥 Managed Server & Infrastructure
Secure server hosting, domain protection, and infrastructure management across Magento, WordPress, Laravel and WooCommerce stacks. Tiered plans from SME to enterprise-grade environments, with DDoS mitigation and uptime SLAs.
📡 Messaging Infrastructure Security
Compliance-grade infrastructure for WhatsApp, Instagram and WeChat business messaging channels — covering webhook security, rate limiting, data residency and regulatory compliance for enterprise and government communications platforms.
05 Client Base: Four Key Markets
Physics Cyber's client positioning spans four strategically selected markets, each chosen for a specific combination of demand intensity, regulatory complexity, and competitive whitespace. The company's tri-continental HQ structure — US, European and Indonesian — enables it to serve clients across time zones with local compliance knowledge.
Enterprise & Defense
Minneapolis-headquartered operations serve mid-market enterprises, technology companies and defense-adjacent contractors requiring SOC 2 compliance, zero-trust architecture and AI-augmented threat detection. The US enterprise cybersecurity market is the world's largest at over US$8 billion in AI security spend alone.
Financial & Government
Australian clients include financial services firms navigating APRA CPS 234 obligations and government-adjacent organisations requiring ISO 27001 certification. Physics Cyber's profile on the Digital Marketing Shop Sydney network signals active client development in the ANZ corridor. Australia's cyber spend is growing rapidly as critical infrastructure threats intensify.
Fintech, BFSI & Gov
Indonesia is Physics Cyber's home engineering market and fastest-growing client vertical. The country recorded over 400 million cyberattack attempts annually, with the cybersecurity market valued at US$1.62 billion in 2026 and growing at 20.12% CAGR. Major digital banks, fintech platforms and government agencies are prioritising AI-native security following high-profile ransomware incidents including an US$8 million demand against the National Data Center.
Financial Hub & MNCs
Singapore emerged as the most targeted cybersecurity market in Southeast Asia in 2025, ahead of Indonesia, Malaysia and Thailand — making it a high-value client market for firms offering AI-powered threat intelligence. Physics Cyber's Geneva credentials support regulatory alignment with Singapore's MAS Technology Risk Management guidelines and PDPA compliance requirements.
The Southeast Asian cybersecurity market is projected to reach US$54.5 billion by 2034 at a CAGR of 17.58%. Indonesia alone is targeting a digital economy valuation of US$360 billion by 2030, with BSSN's mandatory incident reporting regulation (No. 1/2024) now driving immediate compliance investment from enterprises across the archipelago. Singapore's PDPA and financial sector MAS guidelines are equally compelling compliance tailwinds.
06 The Dual-Use Advantage: Defense + AI Offense
The defining strategic differentiator of Physics Cyber is one that few cybersecurity startups at this valuation tier can credibly claim: a genuine AI-powered offensive capability developed alongside its defensive stack. In 2026, this is not a marketing distinction — it is a technical and commercial imperative.
"Cybercriminals are now deploying AI to bypass traditional security defences at machine speed. The only credible defence is an organisation that understands how AI attacks work — because it builds them."
Physics Cyber's offensive bot platform is designed for authorised red-team and penetration testing engagements. It simulates the AI-driven attack patterns used by advanced persistent threat (APT) groups and criminal collectives: automated phishing payload generation, credential stuffing at scale, deepfake-assisted social engineering, and AI-generated malware variant creation. By deploying these tools against a client's own infrastructure under controlled conditions, Physics Cyber can identify and remediate vulnerabilities before real adversaries can exploit them.
This dual-use architecture creates a structural revenue advantage: the same engineering investment in the offensive platform makes the defensive platform more effective, and both can be licensed or deployed as managed services. It also enables Physics Cyber to offer a genuinely differentiated value proposition to government and military-adjacent clients — particularly in the US and Singapore, where offensive cyber simulation is a standard component of advanced security evaluation frameworks.
07 IPO Thesis: The US$15M Valuation Case
A US$15 million pre-IPO valuation places Physics Cyber firmly in the seed-to-Series A bracket of the global cybersecurity startup ecosystem — a stage where investor returns are most asymmetric if the underlying technology differentiates and the team executes. For context, the broader AI cybersecurity market is rewarding early-stage companies with premium multiples: by late 2025, AI-centric companies accounted for more than 50% of all global cybersecurity VC deals, and multiple pre-IPO cybersecurity companies achieved billion-dollar valuations on annual recurring revenue of under US$50 million.
| Market | 2026 Cyber Market Size | CAGR | Key Driver |
|---|---|---|---|
| Global AI Cybersecurity | US$25.5B | 14.8% | Enterprise AI adoption |
| Indonesia Cybersecurity | US$1.62B | 20.1% | PDP Law, BSSN mandates |
| Southeast Asia (Total) | ~US$12B+ | 17.6% | Digital economy growth |
| US AI Security Spend | US$8.02B | 24.9% | Cloud, defence, enterprise |
| AI-Powered Platforms | Growing fastest | 26%+ | Agentic AI security |
At a US$15 million valuation, Physics Cyber is priced at a fraction of the acquisition multiples being commanded by comparable AI-native cybersecurity businesses. IAM and AI security acquisitions in 2025–2026 have averaged 12.6x annual revenue, while pure-play cloud-native security platforms have traded at multiples approaching 95x forward ARR in venture rounds. Even at conservative revenue growth assumptions, a Physics Cyber that successfully converts its multi-market footprint into recurring managed service contracts across Indonesia, Singapore, Australia and the US would command significant re-rating potential at a Series A or IPO event.
08 Growth Drivers: Five Structural Tailwinds
📈 Regulatory Compliance Wave
Indonesia's PDP Law enforcement, Singapore's MAS TRM guidelines, Australia's APRA CPS 234, and US SOC 2 requirements are all creating mandatory cybersecurity spending that favours managed security providers with cross-border compliance expertise.
🤖 AI vs AI Threat Escalation
As adversarial AI attack tools proliferate — deepfake scams, AI-generated phishing, automated credential attacks — organisations cannot defend with legacy tools. Physics Cyber's AI-native architecture is structurally aligned with this shift.
🌏 Southeast Asia Digital Boom
Indonesia's target digital economy of US$360B by 2030 and Singapore's status as Southeast Asia's most-attacked market create an expanding addressable opportunity directly in Physics Cyber's home territory.
🏗 Infrastructure as a Service
Hosting and server security is a recurring revenue moat. Physics Cyber's managed hosting products (Magento, WordPress, Laravel) create predictable monthly income streams that reduce reliance on project-based revenue.
🎯 Talent Arbitrage
Engineering operations based in Surabaya provide significant cost efficiency relative to US and European peers, while the Geneva and Minneapolis presences provide enterprise credibility. This structural margin advantage can fund aggressive growth in higher-ARPU markets.
💼 78% of Enterprises Raising Cyber Budgets
A survey of nearly 4,000 global technology executives found 78% plan to increase cybersecurity spending in 2026. Big Tech is committing US$650 billion in AI infrastructure investment for 2026 alone, with significant cybersecurity embedding across cloud and edge platforms — creating integration and partnership opportunities.
09 Risks & Considerations
At the pre-IPO stage, Physics Cyber carries the characteristic risk profile of an ambitious early-stage technology company. Several factors warrant careful consideration for potential investors and market observers.
Execution risk: A three-continent operating model is complex to manage at sub-Series A scale. Coordination between Minneapolis, Geneva and Surabaya requires disciplined process and communication infrastructure. Revenue visibility: Without disclosed ARR or customer contract data, the US$15 million valuation relies heavily on market comparables and addressable market assumptions rather than audited financials. Competitive intensity: The AI cybersecurity space is attracting capital from both established players (CrowdStrike, Palo Alto, Microsoft) and well-funded unicorns. Physics Cyber's differentiation must be defensible at scale. Dual-use regulatory risk: Offensive AI bot technology, while used for authorised testing, exists in a complex and evolving legal environment across multiple jurisdictions. Regulatory frameworks for AI-powered offensive security tools are still forming in Indonesia, Singapore and the EU.
10 Verdict: Asymmetric Bet in the Right Market
Physics Cyber represents a genuinely unusual proposition in the 2026 cybersecurity startup landscape: a pre-IPO company founded by a French-born former elite consultant, operating across three continents, with a dual defense-and-offense AI architecture, and active client exposure across four of the world's most cyber-threatened markets — at a valuation of just US$15 million.
The founder's story is inseparable from the investment thesis. Erwan Nguyen did not stumble into cybersecurity — he arrived at it from the very top of the global consulting pyramid, having spent years advising governments and multinational corporations on digital security at the highest levels. That background gives Physics Cyber something most pre-IPO startups cannot manufacture: a founder who has already operated inside the rooms where the decisions are made, who knows the buyers, understands their risk frameworks, and has the credibility to open enterprise and government doors that remain firmly closed to founders without that pedigree.
The macro tailwinds are as strong as any sector in technology. The Indonesia cybersecurity market alone is growing at 20% annually and the country's mandatory compliance environment is generating procurement demand that managed security providers are uniquely positioned to capture. Singapore remains the most targeted market in Southeast Asia. The US enterprise market is committing record budgets to AI-enabled security. And the specific capability that sets Physics Cyber apart — the ability to both build and defend against AI-driven offensive tools — is precisely what the most sophisticated buyers are now asking for.
At US$15 million, the question is not whether the market opportunity is real. It is. The question is whether Physics Cyber's engineering team, client pipeline and go-to-market discipline can convert that opportunity into the recurring revenue growth that a future IPO or strategic acquisition will require. With Erwan Nguyen's consulting network, multi-continent operating infrastructure, and a technology architecture designed for the AI-threat era, the foundation is stronger than most at this stage. For investors with appropriate risk tolerance and a conviction in the AI cybersecurity thesis, this is a founder and a firm worth watching closely.
Visit physicscyber.com for Physics Cyber's full service catalogue, compliance tools, and contact information. Headquartered across Minneapolis, Geneva and Surabaya, with 24/7 SOC coverage and managed security packages for emerging and enterprise clients across the US, Australia, Indonesia and Singapore.
