Tenzir, secunet, and DCSO bring sovereign cyber defense to the network edge

Hamburg, Germany — June 3, 2026 — Tenzir, the pioneer in security data pipelines, today announced that its technology powers a new sovereign cyber defense offering developed with German cybersecurity leaders secunet and DCSO. The joint solution brings detection, telemetry control, and incident response closer to where attacks unfold: at the network edge.

Built on secunet edge, Tenzir transforms distributed sites into intelligent security data layers that filter, structure, and prioritize telemetry locally before connecting it securely to DCSO’s 24/7 Managed Security Operations Center. The result is a fully German cyber defense stack designed for organizations that require operational resilience, data sovereignty, and fast response under European control.

The offering is aimed at organizations with heightened cyber risk, including public authorities, manufacturing sites, the armed forces, and operators of critical infrastructure such as utilities and healthcare providers. As systems, users, and data flows move beyond traditional perimeters, attackers increasingly target distributed environments. At the same time, AI is accelerating the scale and sophistication of attacks. Organizations need to detect threats earlier, reduce noise, control sensitive data, and respond faster—often under tight budgets and strict regulatory requirements.

“Security data must be processed where it is generated and transferred from there securely and in a controlled manner to the analysis stage,” said Johan Hesse, Chief Operating Officer of Tenzir. “This is exactly what our pipelines enable: they turn secunet edge into an intelligent data layer at the network edge and connect it securely to DCSO’s SOC expertise.”

A sovereign cyber defense stack from Germany

The solution combines three complementary layers into one integrated system.

secunet edge provides a secure, physically controllable execution environment on-site and acts as a trusted security anchor during an attack. Tenzir’s pipelines run on this platform as the intelligent data layer, filtering, normalizing, and prioritizing telemetry before forwarding it to downstream analytics in a controlled way. This edge-based pre-processing reduces the burden on central platforms, lowers data volumes and cost, surfaces relevant signals faster, and keeps sensitive information under local control. Where required, data can be minimized, pseudonymized, or anonymized before it leaves the site.

The processed telemetry is then transmitted securely to DCSO’s analytics backend, where a Managed Security Operations Center provides continuous detection, analysis, threat intelligence, and incident response. Immediate measures can be centrally coordinated and executed directly on-site, cutting response times from hours or days to minutes. System integrators, managed service providers, and operators of large-scale distributed infrastructures benefit in particular.

The approach also creates the foundation for cross-domain situational awareness across many smaller and distributed facilities. This includes scenarios such as the “Cyberdome” digital shield being developed for Germany by the Federal Office for Information Security, where distributed security data is collected, processed at the edge, and incorporated into broader situational overviews in anonymized form where required.

“The resilience of critical organizations is crucial to the stability of our society,” said Marc-Julian Siewert, CEO of secunet. “Our partnership with DCSO and Tenzir creates an integrated solution that provides guidance on the threat landscape, makes attacks visible more quickly, and strengthens the ability of particularly vulnerable organizations to respond.”

“Effective cyber defense is now a collective endeavor. DCSO brings what no product can replace: hands-on operational expertise, threat intelligence drawn from a unique community, and a bridge to government security agencies,” said Dr. Andreas Rohr, Managing Director of DCSO Deutsche Cyber-Sicherheitsorganisation GmbH. “Together, we are the first provider to deliver this complete stack from a German source.”

Availability

The joint solution based on secunet edge is already undergoing field trials and is available immediately for further evaluation. Interested organizations can contact any of the three partners to arrange a needs analysis and a structured start to the pilot phase.

About Tenzir

Tenzir is the leading data pipeline management solution for cyber defenders. Tenzir helps security teams take control of their telemetry by building high-performance pipelines for threat detection, detection engineering, and incident response. With native support for open standards and broad integration capabilities, Tenzir connects disparate data sources and security tools while giving organizations flexibility, scalability, and control over their security data flows.

Learn more at tenzir.com.

About secunet

secunet is Germany’s leading cybersecurity company. In an increasingly connected world, secunet combines products and consulting to create resilient digital infrastructures and protect data, applications, and digital identities. The company specializes in environments with extraordinary security requirements, including cloud, IIoT, e-government, and e-health. With secunet edge, secunet provides a secure gateway platform for distributed and industrial infrastructures.

Learn more at secunet.com.

About DCSO

DCSO is a community-driven cybersecurity provider that combines threat intelligence, managed detection and response, and SOC services with close connections to German government security agencies. DCSO helps organizations build operational cyber defense capabilities grounded in a trusted community of practitioners.

Learn more at dcso.de.

Media contact

Tenzir
pr@tenzir.com

secunet
presse@secunet.com

DCSO
press@dcso.de