In Focus

Q&A with Merlin Chatwin, Executive Director

What’s your company’s origin story? What brought your team together?

Open North was founded in 2011 in Montreal as a not-for-profit dedicated to making data and technology serve the common good. Our team comes together around a shared dedication to pursuing open, transparent, and inclusive digital practices that can strengthen democracy, improve public services, and protect communities. Our staff comes from diverse fields, including policy, IT, research, civic engagement, and urban planning. We are united by the belief that technology should be fit-for-purpose, human-centred, and beneficial within a particular context.

Pitch your company to us as if we’re an individual or organization that thinks cybercrime is “someone else’s problem.”

Many people assume cybercrime and digital risks are problems for big tech companies or governments. In reality, they affect everyone. As cities, not-for-profits, and public institutions increasingly rely on data — whether through smart sensors, online portals, or digital decision-making — the risks multiply. A single breach can expose personal data, undermine trust, or even disrupt essential services. For smaller organizations, the cost of inaction can be devastating: reputational damage, liability, or exclusion of vulnerable communities. In a connected world, one weak link puts everyone at risk. Open North helps organizations turn that reality into an opportunity: to strengthen capacity, safeguard communities, and build public confidence in the digital age.

Given that cybersecurity risk is global, where do Canadian companies fit in? What can we do better than anyone else?

Cybersecurity is often framed as a global challenge, but the solutions cannot always be imported wholesale from elsewhere. Each country, and each community within it, exists within unique legal frameworks, policy contexts, cultural dynamics, and governance traditions. That is where Open North provides distinct value. Open North is a Canadian not-for-profit with over a decade of experience working at the intersection of data, governance, and digital transformation. As a Canadian organization, we are deeply attuned to Canada’s policy landscape, priorities, and values. This includes the growing emphasis on digital sovereignty, which ensures data and digital infrastructure are governed in ways that protect the rights, security, and interests of Canadians. Global private-sector providers may offer one-size-fits-all solutions, but these are rarely “fit-for-purpose” in a Canadian civic, not-for-profit, or governmental context. Open North works alongside local partners to co-design solutions that reflect not just technical requirements, but also democratic values, inclusion, and community needs.

What’s the best question you’ve ever been asked about what you do?

“Why do you operate as a not-for-profit?” Being a small not-for-profit is a unique value proposition for Open North. Unlike large firms driven by profit, we offer personalized, mission-driven support. Our team can adapt quickly, tailor engagements to each organization, and provide independent, trusted guidance without commercial incentives shaping the outcome. This allows us to prioritize what truly matters: protecting communities, building trust, and ensuring technology serves the common good. Cybersecurity may be global, but the risks and the solutions are local. Open North helps Canadian organizations navigate this reality with approaches that are context-sensitive, ethical, and sustainable, ensuring resilience in the face of global threats.

What changes have you seen in Canadians’ awareness of cybersecurity in the past five years?

Over the past few years, cybersecurity has gone from background noise to front-page news for Canadians. In 2018, just over half of people said they’d experienced some kind of cyber incident; now, it’s closer to seven in ten. Scams, fraud, and data breaches are much more top of mind, and we’ve all seen stories about ransomware or hacks that make it feel real. Organizations have also changed: more are training staff, buying cyber insurance, and building response plans. What used to feel like a tech issue now feels like something that affects everyday life, from personal safety to business reputation.

What excites you about the work being done in cyber in Canada right now?

What’s exciting about cybersecurity in Canada right now is how it’s becoming more uniquely Canadian. There’s a strong push toward digital sovereignty and ensuring our data, infrastructure, and policies are governed in ways that reflect Canadian values and protect Canadian interests, rather than relying on frameworks imported from elsewhere (primarily the United States). At the same time, we’re seeing efforts to make cybersecurity more accessible to smaller organizations, not just corporations or government departments. That means practical tools, shared resources, and capacity-building that help not-for-profits, municipalities, and community groups protect themselves without massive budgets.

Where and how do you want to see your product or service make an impact in the next five years?

We want our services to spark real change in how Canadians approach data and digital systems. We see impact in communities that feel safer and more confident using technology because the systems they rely on are secure, ethical, and built with their interests at heart. We want to help governments and not-for-profits shift from reacting to cyber risks to leading with resilience and trust. Our hope is that five years from now, cybersecurity and responsible data practices will not feel like side issues but will be seen as core to democratic life and community well-being. If Canada is recognized as a place where digital transformation is trusted, inclusive, and resilient, then Open North will have made the kind of impact we believe in.

Learn more about Open North/Nord Ouvert, or get in touch, here.

Q&A with Pierre-Louis Bourbon, Growth Hacker

What’s your company’s origin story? What brought your team together?

Privacy-Safe was created when our founders realized that most Canadian small and medium-sized businesses struggled with new privacy and data protection requirements. For many, compliance feels out of reach: too complex, too expensive, or “something only big companies worry about.” Our team of data governance and cybersecurity specialists came together to build a SaaS platform that makes compliance clear, affordable, and actionable.

Pitch your company to us as if we’re an individual or organization that thinks cybercrime is “someone else’s problem.”

To those who think cybercrime is “someone else’s problem,” we often say: ignoring data protection is like leaving your front door unlocked and assuming no one will ever walk in. Every organization, no matter its size, collects personal data from customers, employees, or partners. That information is valuable—and increasingly targeted. The real risk is not just regulatory fines, but the loss of trust that keeps businesses alive. Privacy-Safe helps organizations transform privacy from a burden into a strength, protecting customer relationships and turning compliance into a driver of long-term growth.

Given that cybersecurity risk is global, where do Canadian companies fit in? What can we do better than anyone else?

Cybersecurity risks are global, and Canadian companies are not immune. We fit in by finding practical ways to make security and privacy manageable, especially for small and medium-sized businesses that don’t always have large teams or budgets. What Canada can do well is combine strong regulation with a culture of collaboration. We see startups, researchers, and established companies working together to share knowledge and tools. This creates an environment where solutions can be both technically sound and easy to adopt. Rather than trying to do everything better than others, our strength lies in making cybersecurity accessible, trustworthy, and aligned with the real needs of organizations. That’s an area where Canadian companies can have a meaningful impact.

What’s the best question you’ve ever been asked about what you do?

One of the best questions we’ve been asked is: “Why should a small business care about privacy and compliance when they have so many other priorities?” It’s a fair question, because many SMEs operate with limited resources and compliance can feel like just another burden. Our answer is that protecting data isn’t only about avoiding fines or meeting regulations. It’s about safeguarding the trust that keeps customers coming back. A single incident can damage a reputation that took years to build. By taking privacy seriously, even in small steps, businesses show their clients that they are reliable and responsible. That trust becomes a real competitive advantage in today’s digital economy.

What excites you about the work being done in cyber in Canada right now?

What excites us most about cybersecurity in Canada right now is the spirit of collaboration. We see startups, universities, public institutions, and established companies working together to tackle common challenges. There’s a growing focus on making cybersecurity and privacy solutions accessible to large organizations and small and medium-sized businesses that often need them the most. We’re also encouraged by the emphasis on responsible innovation: developing tools that don’t just react to threats but help organizations build trust and resilience over time. It feels like Canada is moving from treating cybersecurity as a technical specialty, to making it part of how we do business as a country. This is both timely and necessary. Learn more about Privacy-Safe, or get in touch, here.

Q&A with Jiri Fiala, Founder/CEO

Pitch your company to us as if we’re an individual or organization that thinks cybercrime is “someone else’s problem.”

The problem we solve is that exact one: too many organisations think cybercrime is “someone else’s problem.” It’s a belief that holds until the day it does not, which is: the day regulators, customers, or partners are at your door. Cybercrime is never isolated; one breach ripples through entire ecosystems. PrivID makes breaches irrelevant. Even if someone breaks in, the data they get is mathematically useless. That means no public leaks, regulatory fines, or fallout spreading through your supply chain. You cannot stop malicious attempts, but with PrivID you can make sure attackers walk away empty-handed.

Given that cybersecurity risk is global, where do Canadian companies fit in? What can we do better than anyone else?

Canadian companies are trusted globally. We have strong research talent and operate in a regulatory environment that often forces us to build to the highest standards. This combination means we can punch above our weight, especially in areas where trust and compliance are non-negotiable. What Canada does better than anyone else is turning that trust into exportable technology. Instead of just following American or European models, Canadian firms can build solutions that are both globally interoperable and locally sovereign. Cybersecurity is no longer just about walls and firewalls; it is about cryptography, data autonomy, and resilience at scale. PrivID proves that Canadian teams can pioneer technologies (such as our Zero-Knowledge Proofs and Fully Homomorphic Encryption) and make them practical for defence, finance, and critical infrastructure worldwide. We show the world that Canadian innovation is not just polite — it’s unbreakable.

What’s the best question you’ve ever been asked about what you do?

The best question I’ve been asked came from the CEO of a major European technology company: “can this actually work in healthcare research and defence, including NATO?” This question cuts straight to where the stakes are highest: in lives, national security, and research that shapes the future.

What changes have you seen in Canadians’ awareness of cybersecurity in the past five years?

Over the past five years, Canadians’ cybersecurity awareness has grown, but this has primarily been in reaction to attacks, rather than by design. High-profile breaches, ransomware attacks on municipalities, and constant news about data leaks have made people understand that cybersecurity is not just an IT problem; it is a business and personal risk. That said, Canada is still in catch-up mode compared to Europe, where regulation and enforcement have driven faster maturity. In Canada, awareness is there, but depth is often missing. People know cybercrime exists, but not how it actually impacts their supply chains, their data, or their compliance obligations.

Where and how do you want to see your product or service make an impact in the next five years?

In the next five years, we see PrivID becoming the cybersecurity backbone for the sectors where trust and resilience are non-negotiable: defence, healthcare, finance, and government. These are the domains where a breach can cost lives, destabilise economies, or undermine national security, and they require more than the legacy tools still being relied upon today. Our goals are global. We are building technology that can protect sensitive research in Europe, safeguard critical infrastructure in North America, and secure government systems and financial networks in emerging markets. Cybersecurity risk does not stop at borders, and neither will we.

Learn more about PrivID, Inc. or get in touch, here.

Q&A with Francis Pun, Co-founder and CEO

What’s your company’s origin story? What brought your team together?

Nexodata was formed in a serendipitous collision between our unique expertise in ransomware protection and funding from prominent Canadian deep-tech angels and advisors. We’re a recent immigrant team that is on-shoring our research process, while launching our game-changing product in Canada. Our CTO is from Pakistan, our Solution Architect is from Ukraine, and our CEO is a first-generation immigrant who spent 25+ years in international assignments with top multinational technology firms.

Pitch your company to us as if we’re an individual or organization that thinks cybercrime is “someone else’s problem.”

Ransomware is growing significantly and strikes without notice, hitting corporations and individuals. At Nexodata, we hit the heart of the problem with a cryptographic data loss prevention solution that serves as the last line of defence against ransomware attacks for our customers. Our solution provides peace of mind to 2 key cybersecurity decision makers at an organization: the CISO and the CIO. The CISO is concerned about both cybersecurity resiliency and disaster recovery readiness. We address both by mitigating the downtime effects of a cyberattack against the most attacked infrastructure (the data backups). The CIO is concerned about system and resource demands to maintain efficient operations. Nexodata offers 25% efficiency and the constant monitoring of an organization’s mission-critical data repositories.

Given that cybersecurity risk is global, where do Canadian companies fit in? What can we do better than anyone else?

At Nexodata, we value Canada for its 3 Cs: Culture, Customers and Costs. Cultural value is found in both Canadian talent, and in the support of innovation. Our customer base is building appropriately without becoming overwhelming. Finally, the efficiency to market is highly advantageous at our current growth stage. It is this Goldilocks-zone of factors that we believe is crucial for driving excellence in Canadian cyber.

What excites you about the work being done in cyber in Canada right now?

Awareness in Canada has grown in multiple directions lately. Most prominently, it has become industry-specific, and industry peer-awareness has increased. The risk is hitting closer to home. The prominence of the topic is exciting, whether it is a negative news article or plans to address the topic. Bringing the whole ecosystem together to drive a bigger picture, and to capture more executive mindshare, is really inspiring to us.

Where and how do you want to see your product or service make an impact in the next five years?

We have an exciting roadmap to solve critical issues with ransomware protection, including quantum-resiliency. Because of our software integration ability, we see Nexodata scaling to be the last line of ransomware defence for enterprises across a host of industries, including dual-use opportunities with governments and defence forces.  

Learn more about Nexodata, or get in touch, here.

In the face of rising U.S. tariffs and increasing global cyber threats, the Catalyst partnered with In-Sec-M to launch a Canadian-focused directory for cyber companies called Buy Canadian Cyber. The initiative is already a great success: we’ve listed over 200 Canadian cybersecurity companies in the Buy Canadian Cyber directory, making it easier than ever for businesses to find and procure trusted, homegrown cyber solutions. In talking to several companies listed at Buy Canadian Cyber, we’ve noticed a few common themes emerging as these thought leaders address the cyber landscape and the evolving scope of risk in Canada and worldwide.

How the risk is accelerating

Daly Brown, co-founder and CEO of Metropolitan Technologies, notes that “critical infrastructure, and the operational technology essential to its functioning, are high-value targets because attacks on them can cause life-threatening and/or costly effects.” Brown also notes that in 2024, there was a 146% rise in cyberattacks causing physical impairment to operations. He adds, however, that the critical infrastructure market has traditionally been “very risk-averse, and penetrating the market has been historically difficult. Many infrastructure operators have existing systems they’ve relied upon for decades and have been reluctant to adopt newer technologies.” All is not lost. Brown believes that the digital transformation of industry “is reaching a tipping point. Operators are acknowledging the benefits of increasing connectivity within their infrastructure.” Kate Mitchell, head of marketing for F12.net, agrees: “Cybersecurity isn’t just a technical challenge in Canada; it’s a business responsibility. Canadian businesses are under increasing pressure to meet regulatory expectations, defend critical infrastructure, and maintain operational continuity.” But in a uniquely Canadian response to the threat, Mitchell sees a lot of hope. “We approach [the responsibility] differently than our global peers. There’s less noise and more accountability; less selling fear and more solving real problems.”

It’s not just big businesses at risk anymore

Deepak Kumar, director of VerveDelight, says that the days of believing cybercrime is a “big company” problem are over. “If you think cybercrime won’t affect you, think again,” he says. “Hackers don’t discriminate by size or sector — they look for vulnerability. From phishing emails and ransomware to social engineering and data theft, cyber threats are silently targeting small businesses, schools, nonprofits, and local governments every day.” Laird Wilton, co-founder of Carbide, agrees. “Today’s threats don’t wait for your company to become a household name,” he says. “Small and medium-sized businesses and startups are targeted because they hold sensitive data and connect to larger enterprise ecosystems.” Lorissa Dong, marketing director of Myntex, goes even further, saying that even people who consider themselves “careful with their phones” need to be wary of personal cyber attacks. Dong cautions Canadians from assuming that “mobile threats only succeed when users make mistakes.” She elaborates: “People may use strong passwords, avoid sketchy apps, manage permissions, and perform good cyber-hygiene, but… today’s mobile threats don’t always look like malware or phishing links. Nation-states and private vendors now use commercial spyware, zero-click exploits, and silent data extraction tools that bypass user behaviour entirely.” “You won’t see them coming,” Dong says, “and you won’t know they were there.”

How the Canadian mindset about cyber is changing

F12’s Kate Mitchell says, “For years, IT was treated like a utility — kept in the basement, underfunded, and only noticed when something broke. That’s changing. AI has kicked the door wide open. Suddenly, boards want to understand exposure, risk, and governance. They’re asking real questions about how data flows, who has access, and what happens when something goes wrong.” The mindset shift excites Mitchell. “It’s not just about stopping threats anymore,” she says. “It’s about building smarter, faster, more secure businesses.” Myntex’s Lorissa Dong agrees. “We’re energized by how quickly Canada is embracing cybersecurity as a national priority,” she says. “Canada's National Cyber Security Strategy is a bold step forward, pairing public-private collaboration with real investment in innovation, talent, and resilience.” What excites Dong is Canada’s shift “toward sovereign, Canadian-built solutions. As mobile threats escalate, we’re seeing growing demand for secure, zero-trust platforms that don’t depend on foreign infrastructure or third-party clouds.”

How Canadian companies are meeting the challenge

Carbide’s Laird Wilton is enthusiastic about how our national character is meeting this moment. “Canada punches well above its weight in the global cybersecurity landscape, and that’s no accident,” he says. “Canadian companies bring together world-class technical talent, a strong culture of innovation, and a regulatory environment that is adapting to modern challenges in privacy and responsible data stewardship. Our diverse, globally connected workforce offers unique perspectives, driving Canada’s cybersecurity approach.” VerveDelight’s Deepak Kumar adds that Canada’s “strong privacy laws, multicultural talent pool, and collaborative ecosystem that bridges government, academia, and industry positions us to lead in building secure, inclusive, and human-centric cyber solutions.” “What’s truly inspiring is how Canadian organizations are blending innovation with ethics,” Kumar finishes. “Canadian providers are developing solutions that are both effective and trustworthy. This balanced, people-first approach positions Canada as a global leader in shaping the future of cybersecurity.”

Q&A with Lorissa Dong, Myntex’s Marketing Director

What’s your company’s origin story? What brought your team together?

Myntex began in 2011 with two Canadians, Geoff Green and Chantel Duplantie, with $500 in hand, a couple of second-hand servers, and an air conditioner from Canadian Tire. Their mission: make mobile privacy accessible to everyone. From offering Symantec-licensed PGP email to building a thriving Canadian-European reseller network, they refused to accept that privacy should be a privilege. When the market shifted in 2014, the team pivoted to Android-based white-label solutions, and endured a DDoS attack, industry resistance, and long hours across multiple time zones. But they saw what others refused to: mobile threats were evolving faster than most were prepared for. In 2017, Myntex launched ChatMail®, their own encrypted communications platform, built entirely in Canada and backed by their own private data center in Calgary, complete with ballistic protection. That was just the beginning. In 2023, they introduced Renati®, the world’s most secure mobile OS and MDM platform, engineered to outpace even the most advanced cyber threats.  

Given that cybersecurity risk is global, where do Canadian companies fit in? What can we do better than anyone else?

Canada may not always be seen as a cybersecurity powerhouse, but that’s exactly what makes us different. While the world races to patch vulnerabilities and chase headlines, Canadian companies like Myntex quietly build for what’s next. Myntex has created a fully sovereign, Canadian-made mobile communications platform that’s purpose-built to operate in high-risk environments. With our hardened mobile OS (Renati®), secure messaging app (ChatMail®), embedded device management, and portable Mobile Communications Unit (MCU), we’ve redefined secure mobility. No cloud dependency. No third-party telemetry. Just resilient, sovereign infrastructure. What sets us apart is our ability to bridge innovation with integrity. We’re not tied to geopolitics or big-tech influence, we build for allies who demand privacy, sovereignty, and control. Our solutions protect mobile edge communications and are designed for integration with next-gen protocols, including post-quantum cryptography. Cyber risk is not going away, and is in fact getting more unstable. Canadian-built systems like ours are meticulously engineered, trusted, and forensically validated to provide robust protection against physical extraction. We don’t just meet the challenge; we prepare for what’s coming next.  

What’s the best question you’ve ever been asked about what you do?

“I’m careful with my phone, why would I need what you do?” It's a fair question, but it assumes that mobile threats only succeed when users make mistakes. People may use strong passwords, avoid sketchy apps, manage permissions, and perform good cyber-hygiene, but if you’re a high-profile individual or if you work in a high-risk environment, those precautions are likely not enough. Today’s mobile threats don’t always look like malware or phishing links. Nation-states and private vendors now use commercial spyware, zero-click exploits, and silent data extraction tools that bypass user behaviour entirely. You won’t see them coming and you won’t know they were there. That’s why Myntex built a secure, sovereign mobile ecosystem, with proactive security protocols to ensure that even if the threat evolves, your device stays one step ahead. The biggest risk isn’t what you do wrong — it’s assuming that you’re not at risk at all.  

What changes have you seen in Canadians’ awareness of cybersecurity in the past five years?

Canadians are waking up to the fact that cybersecurity isn’t just an IT issue. It’s personal, organizational, and national. High-profile breaches and spyware scandals are taking over the news headlines, especially exploits on mobile devices. We’ve seen growing interest in proactive protection, particularly in law, journalism and public safety. There’s also a clear shift toward Canadian-made, sovereign solutions. People want transparency, fewer foreign dependencies, and real control over their data.  

What excites you about the work being done in cyber in Canada right now?

We’re energized by how quickly Canada is embracing cybersecurity as a national priority. Canada's National Cyber Security Strategy is a bold step forward, pairing public-private collaboration with real investment in innovation, talent, and resilience. What excites us most is the shift toward sovereign, Canadian-built solutions. As mobile threats escalate, we’re seeing growing demand for secure, zero-trust platforms that don’t depend on foreign infrastructure or third-party clouds. Canada’s focus on protecting critical infrastructure and fostering homegrown tech aligns perfectly with what we do.   Where and how do you want to see your product or service make an impact in the next five years? In the next five years, we see Myntex becoming the backbone of secure mobile communications across both civilian and defense sectors. As natural disasters, geopolitical instability, and cyber threats escalate, the need for portable, sovereign communications is mission-critical. In the civilian space, we aim to support emergency response teams, critical infrastructure operators, and remote industrial sites with rapidly deployable, zero-trust platforms that deliver ROI through resilience and operational continuity. As more organizations adopt post-quantum and zero-trust standards, we’re well-positioned to lead that shift. In defense, our solution is built for NATO-aligned environments, supporting mission assurance, contested communications, and integration with tactical radios and satellite systems. We want Renati OS and ChatMail to become the trusted standard for secure mobile deployments in high-risk, infrastructure-denied conditions.  

Learn more about Myntex, or get in touch, here.

Q&A with Kate Mitchell, F12’s Head of Marketing

What’s your company’s origin story? What brought your team together?

The F12 key used to do nothing. We changed that. F12 started in a basement — not as a product of venture funding or hype, but out of a real-world need: businesses struggling to keep IT working, secure, and scalable. Our founder, Alex Webb, didn’t set out to build a national leader in cybersecurity and managed IT. He set out to solve problems, one client at a time. That spirit hasn’t changed; what has changed is the threat landscape. In the early 2000s, F12 pioneered managed services in Canada, long before it was the norm. Today, we bring that same foresight to cybersecurity. We built F12 so Canadian businesses don’t have to scramble when the alert hits. Instead, they can press one button — the real F12 key — and know they have a partner who’s already two steps ahead.  

Given that cybersecurity risk is global, where do Canadian companies fit in? What can we do better than anyone else?

Cybersecurity isn’t just a technical challenge in Canada; it’s a business responsibility. Canadian businesses are under increasing pressure to meet regulatory expectations, defend critical infrastructure, and maintain operational continuity. But we approach it differently than our global peers. There’s less noise, and more accountability; less selling fear, and more solving real problems. At F12, we see Canadian firms excelling in two ways: First, we operationalise cybersecurity by embedding it into IT delivery, not bolting it on. Second, we take a more transparent, client-first approach. That’s why we call out MDR misuse in the industry — because cybersecurity isn’t just tools, it’s trust. The global threat is real. But Canada’s strength is quiet leadership and resilience built on doing the work, rather than just talking about it.  

What’s the best question you’ve ever been asked about what you do?

"So... are you like Geek Squad for grown-ups?" Honestly, it caught me off guard — but it also opened the door for a real conversation. Because no, we’re not here to fix your Wi-Fi and install your printer. We’re here to keep your business alive when ransomware hits at 2am; to make sure your compliance auditor doesn't have a panic attack; and to help your internal IT team sleep through the night without checking alerts every 10 minutes. We're not Geek Squad. We're the grown-ups they call when things really go sideways.  

What changes have you seen in Canadians’ awareness of cybersecurity in the past five years?

Awareness is up. But action? Still lagging. Most Canadian business leaders now know cybersecurity is a real risk. They’ve seen the headlines: ransomware at hospitals, swatting at law firms, outages crippling national supply chains. But knowing the threat isn’t the same as being ready for it. That’s the gap we’re still seeing across the board. Too many businesses are still betting on luck, waiting for budget cycles, or assuming their MSP has it handled. Meanwhile, attackers aren’t waiting. They’re faster, smarter, and increasingly automated. Awareness without execution isn’t strategy, it’s exposure.  

What excites you about the work being done in cyber in Canada right now?

Cybersecurity is finally getting the attention it deserves. For years, IT was treated like a utility — kept in the basement, underfunded, and only noticed when something broke. That’s changing. AI has kicked the door wide open. Suddenly, boards want to understand exposure, risk, and governance. They’re asking real questions about how data flows, who has access, and what happens when (not if) something goes wrong. That shift — where cybersecurity is now tied to innovation, compliance, and resilience — is what excites us. It’s not just about stopping threats anymore. It’s about building smarter, faster, more secure businesses. That momentum is long overdue. And it’s why we’re all in.  

Where and how do you want to see your product or service make an impact in the next five years?

In five years, we want F12 to redefine what “good” looks like in Canadian IT and cybersecurity. Today, too many businesses settle for support that’s reactive, fragmented, and impossible to measure. That’s no longer acceptable. The stakes are too high, AI is accelerating both innovation and threat velocity. Compliance pressures are rising. Downtime is more costly than ever. Our goal is to give Canadian businesses something better: measurable confidence. That means replacing vague service level agreements with outcome-driven commitments. It means turning co-managed IT into a true partnership, not a handoff. And it means helping business leaders translate risk and performance into boardroom language. In short: we’re not chasing market share. We’re building market standards. In five years, cybersecurity won’t be a bolt-on. It’ll be the backbone. We intend to be the most trusted name behind it.

Learn more about F12.net, or get in touch, here.

Q&A with Deepak Kumar, VerveDelight’s Director

Pitch your company to us as if we’re an individual or organization that thinks cybercrime is “someone else’s problem.”

VerveDelight (Canada) was founded by a diverse team of cybersecurity experts, educators, and AI innovators who saw a critical gap in how cybersecurity was delivered to small and mid-sized organizations across Canada. Our origin lies in a shared mission: to make cybersecurity accessible, proactive, and human-centered. Too often, we witnessed organizations fall victim to avoidable threats simply because they lacked the resources or understanding to protect themselves. This drove us to create AION Guard, an AI-powered cybersecurity platform designed for simplicity and scale, along with hands-on training programs that equip individuals and teams with the skills to defend their digital environments. If you think cybercrime won’t affect you, think again. Hackers don’t discriminate by size or sector — they look for vulnerability. From phishing emails and ransomware to social engineering and data theft, cyber threats are silently targeting small businesses, schools, nonprofits, and local governments every day. We help organizations take control, without needing a full-time IT team or a massive budget.  

Given that cybersecurity risk is global, where do Canadian companies fit in? What can we do better than anyone else?

Canadian companies bring a unique blend of trust, innovation, and ethical leadership to the global cybersecurity landscape. With strong privacy laws, a multicultural talent pool, and a collaborative ecosystem that bridges government, academia, and industry, Canada is well-positioned to lead in building secure, inclusive, and human-centric cyber solutions. What sets us apart is our ability to prioritize digital trust and accessibility: making cybersecurity understandable and actionable for organizations of all sizes. We don’t just create technology; we build resilient communities. Canada can excel in exporting this values-driven approach to cybersecurity, showing the world that safety, innovation, and equity can go hand in hand.  

What’s the best question you’ve ever been asked about what you do?

The best question we’ve ever been asked is: “How do you make people care about cybersecurity before they become a victim?” It challenged us to rethink how we communicate and deliver value — not through fear, but through empowerment. This has shaped our approach to building tools and training that are simple, relatable, and actionable. By focusing on education, real-world simulations, and community engagement, we help individuals and organizations understand that digital safety is part of everyday life — not just something to worry about after an attack.  

What changes have you seen in Canadians’ awareness of cybersecurity in the past five years?

Over the past five years, Canadians’ awareness of cybersecurity has grown significantly, from a niche concern of IT departments to a mainstream issue affecting individuals, businesses, and communities alike. High-profile breaches, ransomware attacks, and scams have pushed cybersecurity into daily conversations, making people more conscious of their digital footprint and the importance of protecting personal and organizational data. We’ve seen a shift from passive awareness to active interest, with more businesses seeking certifications like CyberSecure Canada, and more individuals participating in cyber education and training programs. While awareness has increased, there’s still a gap between knowing the risks and taking concrete action — something we continue to address through education, accessible tools, and community outreach.  

What excites you about the work being done in cyber in Canada right now?

What excites us most about the work being done in cyber in Canada right now is the growing spirit of collaboration and inclusivity across the ecosystem. From national initiatives like CyberSecure Canada to cutting-edge research coming out of universities and the rise of cybersecurity startups, there’s a strong momentum to not only strengthen defences but also build a cyber-aware society. We’re seeing more efforts to support SMEs, empower underrepresented communities, and integrate AI and automation into threat detection and response. What’s truly inspiring is how Canadian organizations are blending innovation with ethics—developing solutions that are both effective and trustworthy. This balanced, people-first approach positions Canada as a global leader in shaping the future of cybersecurity.  

Where and how do you want to see your product or service make an impact in the next five years?

Our goal is to enable over 5,000 SMEs, schools, nonprofits, and local institutions to build proactive, AI-driven cyber defence systems that are both affordable and easy to use. We envision becoming a trusted partner in rural and underserved regions, where access to cybersecurity resources is often limited. Additionally, we aim to strengthen the national talent pipeline by training thousands of students and professionals in real-world cyber skills, helping build a digitally resilient workforce.  

Learn more about VerveDelight, or get in touch, here.

Q&A with Daly Brown, Metropolitan’s Co-Founder and CEO

What’s your company’s origin story? What brought your team together?

Both myself and my co-founder have a background in aerospace and defence, where we worked for many years building mission-critical applications for airborne platforms. We left that industry and founded Metropolitan Technologies to build reliable and secure commercial products based on our experience. Our first idea was to build smart city products with a focus on equity and privacy. After searching for a software platform to build on, we didn’t find one that met our standards for security, privacy, and reliability, so we decided to build our own. It became apparent to us that the market opportunities for our platform were greater, so we pivoted to concentrate on building the platform and expand beyond cities to the broader critical infrastructure/industrial security market.  

Given that cybersecurity risk is global, where do Canadian companies fit in? What can we do better than anyone else?

Canada has a rich ecosystem around research partnerships, public funding, and capital efficiency. These are important ingredients for deep tech companies building next generation technologies as it makes R&D affordable. Cybersecurity is a complicated topic and requires sophisticated solutions. Canada can be at the vanguard of the next generation of cybersecurity technologies protecting our critical infrastructure.  

What’s the best question you’ve ever been asked about what you do?

The best question we’ve been asked about our startup is “why now?” The critical infrastructure market is very risk-averse, and penetrating the market has been historically difficult. Many infrastructure operators have existing systems they’ve relied upon for decades, and have been reluctant to adopt newer technologies. However, the digital transformation of industry is reaching a tipping point: operators are acknowledging the benefits of increasing connectivity within their infrastructure. There are two key statistics that really hammer this point home:

1. In 2024, there was a 146% rise in cyberattacks causing physical impairment to operations, according to Waterfall Security's OT Cyber Threat Report.
2. The median recovery costs for two critical infrastructure sectors, energy and water, quadrupled to US$3M in one year, according to a 2024 Sophos survey.

  Our vision is to be the secure digital backbone of the world’s critical infrastructure, and an enabler of the digital transformation of industry. We believe our experience in aerospace and defence, and our secure by design and default approach to building technology, best positions us to capture this market, defend our infrastructure, and meet this moment.  

What changes have you seen in Canadians’ awareness of cybersecurity in the past five years?

Cyberattacks on operational technology (OT) were virtually unknown until five years ago, but their volume has been doubling since 2019. This threat is distinct from information technology (IT) vulnerabilities, which cybersecurity measures regularly address. Critical infrastructure, and the operational technology essential to its functioning, are high-value targets because attacks on them can cause threat to life and/or other high-cost effects. Canadians are becoming aware of this threat, and are demanding action by our elected officials to both invest in, and deploy, sovereign capabilities to defend our infrastructure.  

What excites you about the work being done in cyber in Canada right now?

There are tools and techniques to rigorously prove certain safety and security properties of a software system, but they’re underutilized in existing cybersecurity solutions. These tools and techniques — called formal methods — have been used primarily in academic circles, and in limited instances in industry. However, they are some of the best methods we have to eliminate entire classes of vulnerabilities from software systems. Customers should be looking for solutions that were built with formal methods to assure them of the reliability and security of the solutions they are buying. A quick Google search will show examples of how formal methods are being adopted by some of the giants in computing including Amazon, Google, NVIDIA, Anduril… and of course Metropolitan Technologies here in Canada.  

Where and how do you want to see your product or service make an impact in the next five years?

Our mission is to build public trust and demonstrate that society can benefit from smart technology solutions without the associated dangers, and to raise the collective bar of security and privacy of critical infrastructure in Canada. Our platform ensures the responsible use of sensing and surveillance technologies, balancing security and efficiency with privacy and human rights.  

Learn more about Metropolitan Technologies, or get in touch, here.

Q&A with Hunter Zhu, BlueImpact’s CEO

Pitch your company to us as if we’re an individual or organization that thinks cybercrime is “someone else’s problem.”

Our team brings over 25 years of experience in information security, and has supported the protection of hundreds of Canadian organizations. We believe every organization should continuously assess its risk landscape and implement appropriate safeguards to protect critical assets — an area in which we excel.

Given that cybersecurity risk is global, where do Canadian companies fit in? What can we do better than anyone else?

With government support and industry collaboration, Canadian companies can be more innovative in developing new technologies to address cyber security risks that are only growing ever more sophisticated.

What’s the best question you’ve ever been asked about what you do?

“Can you help address our cybersecurity risks, without breaking the bank?” The answer is yes.

What excites you about the work being done in cyber in Canada right now?

Government funding for cybersecurity investment is becoming more and more available, allowing Canadian companies to improve their cybersecurity resilience.

Where and how do you want to see your product or service make an impact in the next five years?

Healthcare organizations can use our product to improve their privacy and security protection, all while saving money by paying for Canadian solutions instead of shopping out-of-country.

Learn more about BlueImpact RiskIntelligence, or get in touch, here.

Q&A with Tracey Nyholt, TechJutsu’s Founder & CEO

What’s your company’s origin story? What brought your team together?

A while back, we had a financial services client — for whom we had implemented multi-factor authentication for their online and mobile experiences — who asked us, "what about our call center?" That one question led to the birth of our award-winning Caller Verify product, which protects call centers and Help Desks from bad actors, by verifying callers using the organization’s existing MFA.

Given that cybersecurity risk is global, where do Canadian companies fit in? What can we do better than anyone else?

We quietly, reliably innovate, and provide solutions hosted in a stable democracy.

What’s the best question you’ve ever been asked about what you do?

“Are you a ninja?”

What changes have you seen in Canadians’ awareness of cybersecurity in the past five years?

People used to not know what Identity & Access Management was. Now they want to know how to implement it.

What excites you about the work being done in cyber in Canada right now?

There are a lot of good and useful problems to solve, and I have a team of top-shelf problem solvers.

Where and how do you want to see your product or service make an impact in the next five years?

I want to see Caller Verify become a household name. We’re one of a handful of cybersecurity solutions that makes things easy for users, and more secure!

Learn more about TechJutsu, or get in touch, here.

Q&A with Laird Wilton, Carbide's COO & Co-Founder

What’s your company’s origin story? What brought your team together?

Carbide was born out of experience and frustration. Years ago, our co-founders — Darren Gallop and Laird Wilton — lost a six-figure deal because their previous company couldn’t meet enterprise security requirements. That deal-breaker sparked a more profound realization: if security gaps could derail growth for one fast-moving company, how many others were at risk? As we built a stronger security strategy internally, it became clear that early and growth-stage companies needed a better path that was scalable, accessible, and didn’t require building a security team from scratch. So, we founded Securicy (now Carbide) to deliver just that.

Pitch your company to us as if we’re an individual or organization that thinks cybercrime is “someone else’s problem.” 

If you think cybercrime is someone else’s problem, attackers are counting on it. Today’s threats don’t wait for your company to become a household name. Small and medium-sized businesses and startups are targeted because they hold sensitive data and connect to larger enterprise ecosystems. That’s why we built Carbide: a hybrid solution combining intelligent automation with expert guidance to help businesses build security maturity and earn trust, from day one.

Given that cybersecurity risk is global, where do Canadian companies fit in? What can we do better than anyone else?

Canada is seen as a stable, neutral, and dependable partner in a world where trust is currency. That’s a reputation that Canadian cybersecurity firms proudly carry into every client relationship. Canada punches well above its weight in the global cybersecurity landscape, and that’s no accident. Canadian companies bring together world-class technical talent, a strong culture of innovation, and a regulatory environment that is adapting to modern challenges in privacy and responsible data stewardship. Our diverse, globally connected workforce offers unique perspectives, driving Canada’s cybersecurity approach.

What’s the best question you’ve ever been asked about what you do?

The best question we’ve been asked is: “So, what makes you different from a compliance automation tool?” It’s a great question, because it gets to the heart of what makes Carbide unique. Tools can help you tick boxes, but they can’t help you make decisions, navigate gray areas, or win trust with customers who want to know you’re serious about security. We answer by explaining that we’re not just a platform. We combine intelligent automation with hands-on expert guidance. That means we don’t just help you get compliant; we help you stay secure, scale responsibly, and turn security into a competitive advantage.

Where and how do you want to see your product or service make an impact in the next five years?

Over the next five years, we want Carbide to be the reason more companies win deals, rather than lose them because of a weak security posture.  

Learn more about Carbide, or get in touch, here.