What SandGrain does

SandGrain B.V. is a Dutch deep-tech company founded in 2019 and headquartered at High Tech Campus 9 in Eindhoven, Netherlands. The company develops CyberRock, an IoT security platform built around two integrated components: the SGT1001 CyberRock-Token — a patented, immutable hardware security IC with a hard-coded globally unique identity and symmetric HMAC key generation, manufactured on X-FAB's 180nm XP018 foundry process and formally released in February 2026 after reliability tests in January 2026 — and the CyberRock-Cloud, a SaaS platform that handles provisioning, real-time device authentication, attested firmware updates, secure boot, and encrypted communication through the CyberRock secure enclave. The platform uses a certificate-free architecture and post-quantum resilient symmetric algorithms aligned with NIST IR 8547, positioning it for compliance with the EU Cyber Resilience Act and NIS2 Directive.

The company targets three primary verticals — industrial IoT, critical infrastructure, and aerospace & defense — addressing use cases including IoT trust services, counterfeit and IP protection, asset management, circularity, digital product passports, parts provenance, and anti-tamper with secure commands. Its revenue model combines hardware sales of token ICs to OEM manufacturers with subscription-based SaaS revenue from CyberRock-Cloud and a free developer portal (SandGrain Portal) for SDK and API distribution; pricing is quote-based and not publicly disclosed. Distribution runs through direct enterprise sales, OEM integration (with X-FAB as the foundry partner), and self-serve developer resources.

SandGrain has raised approximately €16.8 million in cumulative funding: €1.3 million in seed from DeeptechXL in April 2023, a €2 million seed extension from DeeptechXL in February 2024, and a €13.5 million Series A in December 2025 led by Innovation Industries with participation from BOM, Invest-NL, and existing shareholders. The team is compact (~18 named individuals), was recognized as a Hello Tomorrow Deep Tech Pioneer in 2024 from 4,600 applicants across 120 countries, and has secured strategic visibility through partnerships with X-FAB (chip manufacturing) and Sopra Steria (co-marketing at Eurosatory 2026 in Paris for Trusted Vision AI for Defence).

Name

SandGrain

Legal name

SandGrain B.V.

Website

https://sandgrain.eu

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

1–10 employees

Short description

SandGrain is a Dutch deep-tech company providing hardware-rooted, post-quantum resilient IoT security through its CyberRock platform, combining a patented immutable security IC (SGT1001) with a SaaS cloud. It serves industrial IoT, critical infrastructure, and aerospace & defense customers.

Ownership category

akta.pro rank

Product category

IoT Security Platform

NAICS

Computer Storage Device Manufacturing (334112), Computer Systems Design and Related Services (54151), Computer Systems Design Services (541512)

SIC

Computer Communications Equipment (3576), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Secure Elements & Trusted Execution Processors (TPM/TEE/Crypto MCUs) (HDAHAJAK)

akta.pro secondary industries

Confidential Computing & Hardware-backed Protection (TEE/HSM) (HDADAFAJ), Secrets Management & Cloud Key Management (KMS, Vaults) (HDADADAK), Key Management, Encryption & Secrets Management (KMS/HSM/Vault) (HDABAHAG)

Keywords

• Iot security
• Hardware authentication tokens
• Secure cloud platform
• Post-quantum cryptography
• Device identity management

Headquarters

HQ city

Delft

HQ country

Netherlands

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Supply Chain, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Hardware Security Tokens: Sale of immutable CyberRock-Token ICs (SGT1001) that are embedded into IoT devices during manufacturing. Each token provides hardware-rooted device identity.
2. CyberRock-Cloud Platform (SaaS): Subscription-based secure cloud platform providing device authentication, firmware updates, secure boot, and lifecycle management services. Includes provisioning, authentication, and compliance management.
3. Developer Portal and SDKs: SandGrain Portal provides documentation, APIs, SDKs for integration. While portal access is free, the developer resources facilitate paid platform integration.

Go-to-market motion2 records

Distribution channels3 records

Marketing channels5 records

Core offering

SandGrain provides the CyberRock IoT security platform, which combines a patented immutable hardware security token (the SGT1001 IC) manufactured by X-FAB with a secure SaaS cloud platform (CyberRock-Cloud). The solution delivers hardware-rooted device identity, post-quantum resilient authentication via symmetric challenge-response algorithms, and lifecycle management services (real-time device authentication, attested firmware updates, secure boot, and encrypted communication) to OEMs and operators of industrial IoT, critical infrastructure, and aerospace and defense systems.

Product overview

SandGrain's CyberRock is a unified IoT security platform consisting of three key components: the CyberRock-Token (SGT1001), an immutable hardware security IC manufactured by X-Fab; the CyberRock-Cloud, a secure SaaS platform for provisioning, authentication, and lifecycle management; and the CyberRock platform itself which integrates these components. The solution provides hardware-anchored, post-quantum resilient security for IoT devices without requiring certificates or provisioning overhead. Additional access to documentation, APIs, and SDKs is provided through the SandGrain Portal.

Differentiator

Problem solved

Functional benefit

Brands

• CyberRock: IoT security platform that embeds secure-by-design principles into every IoT node, delivering lifecycle assurance and compliance through immutable hardware tokens and secure cloud infrastructure.
• CyberRock-Cloud
• SandGrain Portal

Products and services

• CyberRock Platform The CyberRock platform is a scalable IoT security solution that combines the patented CyberRock-Token hardware IC with the CyberRock-Cloud SaaS platform to deliver hardware-rooted device identity, post-quantum resilient authentication, and certificate-free lifecycle management for industrial IoT, critical infrastructure, and aerospace and defense customers.
• CyberRock-Token (SGT1001) The CyberRock-Token (SGT1001) is a patented, immutable hardware security IC with a hard-coded, globally unique ID and symmetric HMAC key generation capabilities, designed for OEM integration into IoT devices during manufacturing with ultra-low power consumption suitable for battery-powered devices.
• CyberRock-Cloud CyberRock-Cloud is a secure SaaS platform that simplifies provisioning and lifecycle management of IoT ecosystems, enabling real-time device authentication, attested firmware updates, secure boot, and encrypted communication through symmetric key validation via the CyberRock Enclave, and integrating with customers' existing device management platforms.

Quantifiable outcome

• Reduces in-house cybersecurity expertise requirements while maintaining high security standards
• +2 more outcomes

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

One partnership is on record.

• X-FABcoreTechnology or Integration · 24 February 2026SandGrain partnered with specialty foundry X-FAB to manufacture the CyberRock SGT1001 Token using X-FAB's 180nm XP018 foundry platform. This collaboration enables first-time-right success and fast time-to-market for SandGrain's secure IoT solution within a secure, traceable European ecosystem. The partnership combines SandGrain's authentication technology with X-FAB's manufacturing capabilities.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Infineon Technologies: Global semiconductor leader offering the OPTIGA Trust family of secure elements, TPMs, and hardware security controllers for IoT authentication. Directly comparable to SandGrain's SGT1001 token in target use case (hardware-rooted device identity), but operates at vastly greater scale across multiple end markets.
• Renesas Electronics: Provides secure MCUs and hardware authentication solutions (including RX-based and RA-based secure elements) for industrial IoT. Competes with SandGrain's offer of hardware-rooted trust for connected devices and benefits from strong industrial customer reach.
• NXP Semiconductors: Major secure-element and authentication IC vendor (A1006, EdgeLock SE050) with deep penetration into industrial, automotive, and IoT markets. Competes with SandGrain in providing hardware-rooted identity for connected devices and benefits from entrenched OEM relationships.
• STMicroelectronics: Supplies STSAFE-A secure elements and related authentication ICs for industrial and consumer IoT, plus a broad secure MCU portfolio. Comparable to SandGrain's SGT1001 in function and serves overlapping customers in industrial IoT and asset authentication.
• Microchip Technology: Offers the CryptoAuthentication and CryptoAutomotive families of secure ICs for device authentication, anti-counterfeit, and secure boot. Functionally overlaps with SandGrain's token-based authentication approach and targets the same industrial and embedded segments.
• Maxim Integrated (Analog Devices): Markets the DeepCover secure authenticators and secure microcontrollers for embedded device protection. Comparable to SandGrain's SGT1001 for hardware-rooted authentication and serves industrial and medical IoT segments.

Emerging players

• Crypto4A Technologies: Provides quantum-safe hardware security modules (HSMs) and key management platforms with a focus on post-quantum resilience. Overlaps with SandGrain's post-quantum positioning and the broader hardware-backed security narrative, though focused more on enterprise/data-center HSMs than IoT endpoints.
• Device Authority: Offers device identity and key management-as-a-service for IoT ecosystems, including automated provisioning and certificate management. Comparable to the CyberRock-Cloud layer of SandGrain's offering and a partial overlap on the lifecycle management value proposition.

Direct peers

• Kudelski IoT (Kudelski Group): Provides keySTREAM and related IoT security and lifecycle management services, including secure provisioning, firmware updates, and certificate/device identity management for connected products. Closely comparable to SandGrain's combination of hardware-rooted identity plus a cloud-based device management platform.
• WISeKey: Combines secure semiconductors with managed PKI and digital identity services for IoT and connected devices. Overlaps with SandGrain's hardware token plus cloud security model and addresses similar industrial, defense, and critical-infrastructure customers.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/sandgrain-b-v/?viewAsMember=true

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles12 records

Funding overview

Funding rounds3 records

Investors4 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about SandGrain