Reykur has been selected for Season 8 of Tech4Trust. The season opened with Trust Valley Days in Lausanne on 23 and 24 September and runs for nine months, closing with a Demo Day on 10 June 2027. We are one of around thirty startups in this year's cohort.
We are a small team and this is a big deal for us, so we wanted to write it down properly rather than just post a logo.
#What Tech4Trust is
Tech4Trust is the accelerator run by Trust Valley, the Vaud and Geneva initiative for cybersecurity and digital trust. It has been running since 2019, backed by EPFL Innovation Park and the Canton of Vaud, and it is specifically for startups in our corner of the world: security, privacy, trust, and the infrastructure behind them. Since it started, 185 startups have gone through it.
Each season takes 28 to 32 companies, from pre-seed to Series A, chosen by an advisory board of people who run security at large organisations or invest in it. The program is equity-free and there are no fees. What we get is nine months of mentoring, workshops, roadshows, and access to a partner network of over 400 corporates, investors and universities. Partners include EPFL, PwC, Fortinet, Kudelski and SICPA, which is roughly the list of organisations we would most like to be in a room with.
#Why we applied
The problem we work on is old and stubborn. Around half of serious vulnerabilities are design flaws: decisions made in a ticket, a diagram or a planning doc, long before any code exists. No scanner will ever find them, because there is no code to scan. They surface months later in a pen test, or in production, when they cost roughly thirty times as much to fix.
The way the industry has tried to catch them is threat modeling, and threat modeling works. The trouble is that it is done by hand, in a workshop, once, and then the model sits in a wiki while the system keeps changing underneath it. With one security engineer for every hundred-plus developers, nobody has the hours to redo it for every feature.
Reykur makes threat modeling continuous. We connect to the artifacts teams already produce, the tickets, the design docs, the infrastructure code and the pull requests, and keep a living model of the system that flags design-level flaws as they are introduced, not after they ship. We call this continuous product security, because the goal is not a better workshop. It is security that keeps pace with how teams actually build.
We are building it from Zurich, with design partners already running it on real systems, and a founding team that met through the Swiss DEF CON community. Tech4Trust puts us in front of the security teams and corporate partners who live with this problem every day, and that is exactly where we want to be.
#What we plan to do with it
Three things.
Run more pilots. The corporate partners in this program have the architecture, the compliance pressure and the developer-to-security ratio that make continuous threat modeling worth doing. We want Reykur running on their systems, catching flaws at the design stage, and we want the evidence that comes with it.
Open doors faster. The mentors and partners behind the program have direct lines into the scaleups and mid-to-large technology companies we are built for. On our own, getting to the right person can take months. Through the program, we expect to be having those conversations this autumn.
Be part of the community. Trust Valley has spent seven years building the most serious cybersecurity network in the country, across the Lake Geneva region and beyond. We are proud to be counted in it, and we will show up for it.
#Thank you
To the Trust Valley team and the advisory board, thank you for the confidence. To the other startups in the cohort, we look forward to the next nine months alongside you. And if you run a security or platform team and want to see what continuous threat modeling looks like on your own system, get in touch. We would like to talk.