LECS - Cyber Evolution

What LECS - Cyber Evolution does

LECS is the technology brand of Cyber Evolution S.r.l., an Italian innovative SME founded in 2017 and headquartered in Ascoli Piceno with an operative office at OGR Tech in Turin. The company develops a patented Network Detection and Response (NDR) platform built on three proprietary AI engines: Specto for real-time, agentless deep-packet surveillance and behavioral detection across IT, OT, and IoT traffic; Tiresia for predictive threat forecasting that improves over time through machine learning; and Raises for autonomous incident response, including physical isolation of compromised segments via air-gap energy. The platform is delivered in three tiers (Business for SMEs, Professional for distributed mid-market networks, and Corporate for critical infrastructures supporting thousands of nodes), with modular add-ons covering endpoint agents, OT/embedded environments, virtualized deployments, and native SOC/SIEM integration. Deployment is described as plug-and-play in approximately ten minutes with zero downtime and zero false positives, and the product supports both on-cloud and on-premises operation, including operation under poor connectivity.

The business model is exclusively indirect B2B. LECS distributes through a four-tier channel partner program (Bronze, Silver, Gold, Platinum) of resellers, system integrators, MSSPs, and regional distributors (notably ICOS as the Italian official distributor and Softprom for certain regions) across 24 countries and three continents. Revenue is generated via annual and multi-year subscriptions on the platform tiers, supplemented by hardware appliance sales and NFR units for partner enablement. The customer base spans healthcare and pharma, manufacturing and Industry 4.0, GDO/retail, naval and maritime, hospitality, and public administration, with explicit positioning around NIS2, GDPR, and DORA regulatory compliance and certifications including ISO 27001, ISO 27017, ISO 27018, ISO 9001, and the Italian ACN QC1 accreditation.

The company is founder-led (CEO Tonino Celani, CTO Roberto Camerinesi, COO Marco Camerinesi, CFO Pio Paoloni), venture-backed by Forward Factory (CDP network), Industrio Ventures, and NanaBianca, and completed a €1.5M crowdfunding round on MamaCrowd between December 2024 and January 2025 that reached its maximum target. As of the latest data, headcount stands at 15, a new 800 sqm R&D center (Polo LECS Research Lab) is under development in Ascoli Piceno, and the company is actively pursuing European and South American expansion beyond its Italian base.

Name

LECS - Cyber Evolution

Legal name

Cyber Evolution S.r.l.

Website

https://lecs.io

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

LECS is an Italian NDR platform vendor that sells agentless, AI-powered network detection and response for IT, OT, and IoT environments exclusively through a global channel partner network spanning 24 countries.

Ownership category

akta.pro rank

Product category

Network Detection and Response (NDR) Cybersecurity

NAICS

Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Computer Communications Equipment (3576)

akta.pro primary industry

Network Detection & Response (NDR) (HDADABAI)

akta.pro secondary industries

OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF), Threat Detection & Response (EDR/XDR/NDR) for Healthcare Environments (HLACAJAF), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)

Keywords

• Network detection response
• Cybersecurity platform
• OT IoT security
• AI threat detection
• Network monitoring

Headquarters

HQ city

Ascoli Piceno

HQ country

Italy

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Supply Chain, Marketing or Sales, Infrastructure, Operations

Revenue model

1. NDR Platform Subscription: Annual or multi-year subscription model for the LECS NDR platform. The platform is offered in three tiers (Business, Professional, Corporate) providing increasing levels of performance and node capacity for small organizations to critical infrastructures with thousands of nodes.
2. Hardware Appliance Sales: Sale of dedicated hardware appliances for on-premises deployment. The solution is available as dedicated hardware or in virtualized environment, supporting centralized management of thousands of nodes.
3. Partner Program Revenue: Indirect B2B revenue model through channel partners, resellers, and system integrators. Merchants earn margins through a tiered program (Bronze, Silver, Gold, Platinum) with deal protection and volume-based discounts.
4. NFR Units: Not For Resale units offered to partners at preferential terms for internal testing, log analysis demonstration, and threat detection showcase before proceeding with customer PoCs.

Pricing tiers

Go-to-market motion3 records

Distribution channels5 records

Marketing channels6 records

Core offering

LECS develops and sells a Network Detection and Response (NDR) cybersecurity platform that combines deep packet inspection with three proprietary AI engines (Specto, Tiresia, Raises) to deliver agentless, plug-and-play threat detection, prediction, and autonomous response for IT, OT, and IoT networks. The platform is offered as dedicated hardware appliances or virtualized deployments, available on-premises or on-cloud, and sold via subscription tiers (Business, Professional, Corporate) targeting SMEs through to critical infrastructure operators.

Product overview

LECS is a unified Network Detection and Response (NDR) cybersecurity platform built around three proprietary AI engines: Specto for real-time detection and management, Tiresia for threat forecasting, and Raises for autonomous incident response. The platform is delivered in three tiers—Business (for SMEs), Professional (for medium enterprises with distributed IT/OT networks), and Corporate (for critical infrastructures)—and offers modular add-ons including Agent endpoint protection, OT/Embedded for operational technology, Virtual for virtualized environments, and SOC Integration for security operations center connectivity. The platform operates both On-Cloud and On-Premises, featuring patented plug-and-play deployment, agentless architecture, and resilience during connectivity disruptions.

Differentiator

Problem solved

Functional benefit

Products and services

• LECS Platform Network Detection and Response (NDR) platform with patented AI technology providing agentless, plug-and-play cybersecurity for IT, OT, and IoT networks. Combines Specto (detection), Tiresia (threat prediction), and Raises (autonomous response) and is delivered via dedicated hardware appliances or virtualized environments for SMEs, enterprises, and critical infrastructure operators.
• LECS Business Entry-level subscription tier of the LECS NDR platform designed for small organizations and management systems. Provides plug-and-play deployment that activates in approximately 10 minutes without complex configuration or specialized on-site staff.
• LECS Professional High-performance subscription tier built for medium-sized enterprises and distributed IT/OT networks with data-intensive environments. Provides unified monitoring and automation protocol analysis with greater node capacity than the Business tier.
• LECS Corporate On-premises subscription tier for critical and highly complex infrastructures, supporting centralized management of thousands of nodes with resilience even in low-connectivity conditions. Designed for organizations with the most stringent security and scalability requirements.
• LECS Agent Endpoint protection module of the LECS platform, providing enhanced endpoint visibility and protection across IT, OT, and IoT environments.
• LECS OT/Embedded Specialized protection module of the LECS platform built for operational technology, embedded systems, industrial machinery, and IoT devices, including Industry 4.0 environments.
• LECS Virtual Virtualized deployment option of the LECS platform for organizations that prefer virtualized environments over dedicated hardware appliances.
• LECS SOC Integration Native integration module providing unified, high-signal data delivered in a clear format to SOC teams and SIEM platforms, with log notarization via DLT/blockchain for evidentiary value.

Quantifiable outcome

• 0% false positive detection rate
• +4 more outcomes

Named customers1 record

Segments7 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability6 records

Feature8 records

Partnerships

13 partnerships are on record, tiered core and minor.

• Forward Factory (CdP Network)coreStrategic or Co-development Partner · 1 December 2024Strategic partner from the Cassa Depositi e Prestiti network. Forward Factory supports innovation and growth of innovative companies. Was among the first investors to put trust in Cyber Evolution back in 2022, serving as an accelerator for the company's development.
• NanaBiancaminorStrategic or Co-development PartnerInnovation ecosystem partner for the growth of the LECS cybersecurity platform. Part of the ecosystem supporting Italian innovation companies.
• GellifyminorStrategic or Co-development PartnerPartner supporting innovation and growth of the LECS platform through B2B software investment and acceleration.
• ICOScoreChannel Partner/ Reseller/ DistributorOfficial distributor of LECS in Italy. Organizes annual ICOSXperience events (fifth edition in 2025) bringing together business executives, technical and commercial managers to explore technological innovations. Distributed through established partner network serving enterprise customers.
• Agenzia per la Cybersicurezza Nazionale (ACN)coreStrategic or Co-development PartnerItalian national cybersecurity authority that granted LECS QC1 accreditation for cloud services. ACN is the lead enforcement authority for NIS2 compliance and cybersecurity standards in Italy.
• ComtelminorChannel Partner/ Reseller/ DistributorChannel partner in the LECS distribution network.
• Switch Tecnologie e ServiziminorChannel Partner/ Reseller/ DistributorChannel partner providing technology services and solutions.
• SAMU.it Soluzioni InformaticheminorChannel Partner/ Reseller/ DistributorChannel partner specializing in IT solutions.
• 3 Cime TechnologyminorChannel Partner/ Reseller/ DistributorChannel partner in the technology solutions network.
• SoftpromminorChannel Partner/ Reseller/ DistributorRegional distribution partner for certain markets.
• BaseminorChannel Partner/ Reseller/ DistributorChannel partner in the LECS distribution network.
• Italy USA FoundationminorOthersFoundation that awards the America Innovation Award to innovative Italian SMEs. Cyber Evolution – LECS received this recognition in both 2025 and 2026 for innovation and growth.
• NethesisminorGTM or Marketing PartnerActive partner at Digital Heroes Meeting 2025 event. Nethesis brings together its community of Nethesis Partners to explore IT industry news, with LECS presenting enterprise cybersecurity solutions and establishing new partnerships.

Scale indicators9 records

Recent moves8 records

Expansion highlights7 records

Broad incumbents

• Palo Alto Networks (Cortex XDR): Palo Alto Networks' Cortex XDR/NDR offering provides network detection as part of an extended detection and response platform. Comparable broad incumbent with overlapping network detection capabilities, primarily targeting large enterprises rather than the SME/OT niche LECS serves.
• Cisco (Secure Network Analytics / Stealthwatch): Cisco's NDR offering (formerly Stealthwatch) provides enterprise-scale network visibility and threat detection as part of a broader security portfolio. Comparable as an established incumbent offering overlapping NDR capabilities to large enterprises, though not specialized in the SME/OT niche LECS targets.
• Fortinet (FortiNDR): Fortinet's FortiNDR (formerly FortiAI) provides AI-based network threat detection as part of the Fortinet Security Fabric. Comparable broad incumbent offering overlapping NDR capabilities integrated with a wider security portfolio.

Direct peers

• Arista Networks (Awake Security): Arista's Awake Security division provides AI-driven NDR for enterprise and ICS/SCADA environments. Comparable to LECS in combining IT and OT visibility with autonomous detection, though with substantially larger engineering and sales resources.
• Vectra AI: AI-driven NDR platform focused on attacker behavior detection across cloud, SaaS, and on-premises networks. Competes head-to-head with LECS in enterprise NDR, with comparable AI-driven detection philosophy and broader SOC integration capabilities.
• ExtraHop: Network detection and response vendor combining deep packet inspection with ML-based threat detection. Direct competitor to LECS in the NDR category, with mature enterprise footprint and Reveal(x) platform covering east-west and north-south traffic.
• Darktrace: UK-based NDR vendor using self-learning AI for network threat detection and autonomous response. Closely comparable in product category (NDR), target market (enterprise and mid-market), and use of behavioral AI — making it the most direct global peer to LECS.
• IronNet Cybersecurity: Network detection platform using behavioral analytics for collective threat defense across IT and OT environments. Comparable in NDR category with similar enterprise/government focus, though operating from a smaller commercial base than tier-1 incumbents.
• Plixer: Network detection and response vendor focused on security analytics, network performance monitoring, and incident investigation. Competes in the same NDR category as LECS, with comparable mid-market and enterprise customer profiles.

Emerging players

• Corelight: NDR platform built on Zeek (open-source) with ML analytics for advanced threat detection. Comparable emerging player with significant overlap in enterprise and government NDR use cases, though with a different architectural foundation (open-source based).

Market position

Strengths4 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• Facebookfacebook.com/Lecs.Cyber.Sec
• LinkedInlinkedin.com/company/lecs-security
• Instagraminstagram.com/lecs_security

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about LECS - Cyber Evolution