IndraMind buys into Spanish sovereign cyber firm

Indra Group has agreed, through its cybersecurity and artificial intelligence (AI) subsidiary IndraMind, to acquire a 30% stake in a Madrid cybersecurity company founded in 1989, with a contractual path to full control, in a deal announced on 30 September 2026.

The target protects information systems and networks for strategic areas of national interest, and it counts among the leading technology firms in its sector with 100% Spanish capital.

IndraMind sells an end-to-end digital security value chain, running from risk identification and prevention through operational detection, response and recovery services, alongside a catalogue of digital identity solutions. The stake fills a specific protection gap in that chain for the strategic clients the target already serves.

Spain's sovereign procurement rules keep certain defence and home affairs contracts out of reach for foreign-owned firms, so a company with fully Spanish shareholders can bid on work that foreign-owned rivals cannot access.

IndraMind launched as the first Spanish technological initiative developing sovereign AI in a cyber-resilient environment, with turnover above 300 million euros. Trade figures credit the target with more than 400 experts and over 120 million euros of 2025 revenue, figures that do not come from audited accounts.

Those contracts sit in defence, border and critical infrastructure work. Full control would therefore build a single Spanish-capital cybersecurity group approaching half a billion euros in annual revenue, with no foreign-ownership constraint on classified national-security mandates.

The deal reads most clearly against Indra's other portfolio move this year, the May 2026 sale of a non-core technology-consulting subsidiary to a private equity buyer for approximately 125 million to 150 million euros.

Under Ángel Simón, the group has framed defence and cybersecurity as its core business, and the focus released by that divestment is now being redeployed from services into sovereign-capability assets such as this one.

Indra has used acquisitions this way before, buying SIA in January 2020 at an undisclosed price to build the leading cybersecurity services firm in Spain and Portugal, with more than a thousand specialists covering identity management, threat management and data protection.

The only mandatory clearance publicly identified is merger control by the Comisión Nacional de los Mercados y la Competencia (CNMC), and no CNMC filing date, case number or expected clearance date has yet been published.

Spain's foreign-investment screening under Article 7bis of Ley 19/2003, extended for intra-EU deals until 31 December 2026, does not appear to apply to a transaction between two Spanish parties.

The supervisory backdrop remains unsettled, because Spain has still not transposed the EU's Network and Information Security Directive (NIS2), a delay that drew European Commission infringement proceedings in November 2024.

That transposition would create a Centro Nacional de Ciberseguridad as the centralised supervisory authority, and its entry into force during 2026 has been described as uncertain, leaving buyers and suppliers to plan around a regulator that does not yet exist.

For S2 Grupo, a directly comparable Spanish-capital firm in the same market, the deal means competing for sovereign mandates against a rival backed by an IBEX 35 balance sheet and a broader security catalogue.

Telefónica Tech, which sits alongside Indra in a joint cybersecurity operations centre project, now works next to a partner that is consolidating the domestic supply of protection for defence and critical infrastructure buyers.

For those public buyers, the pool of eligible Spanish-capital suppliers grows larger in capability while the number of independent bidders shrinks, which strengthens Indra's hand in future tenders.

The deal value was not disclosed, not even in Indra's own press release, so investors cannot yet judge what IndraMind paid for 30% or what the path to full control will cost. The CNMC timetable and the price of that final step are the figures to watch next.