Curiosity, craft, and zero compromises – Meet Andreas Gjelset, Co‑Founder of Cyloq

Andreas Gjelset is one of the co‑founders of Cyloq. Together with Sam Eizad, he started the company in 2022 with a clear idea: challenge industry complacency and deliver offensive security testing that actually reduces risk.

It’s no coincidence that Andreas ended up in this role. He has always been driven by curiosity, taking things apart, understanding how structures and systems work, and finding smarter ways to refine them. This mindset, combined with an interest in IT, led him first to programming, then to defensive security, and eventually to offensive security.

But far too often, he encountered security tests that didn’t go deep enough. Reports that looked polished but said nothing. Tests that confirmed what everyone already knew instead of uncovering what actually posed a threat. That’s when the idea for Cyloq was born, a cybersecurity company built on rigor, integrity, and real results.

“It’s extremely important to us that we can stand behind every single line in a report. We don’t do cookie-cutter deliveries. Every engagement is unique, and we put our soul into every test. Our work should make a difference, it should actually reduce risk.”

Strengthening security cultures

Even after more than 20 years in the IT industry, he’s still driven by the same curiosity and a deep sense of purpose.

“The adrenaline rush of finding something others have missed is unbeatable. The pace is high and no two days are alike. There’s always something new to learn. The work you put in makes a difference, and that’s rewarding. I know that the work we do directly strengthens our clients’ security culture.”

Even though security tests matter, long-term resilience is built through culture. There needs to be an understanding of risks and a willingness to secure the organization properly. Having insurance isn’t enough. By then, the damage has already been done. You need preventative thinking.

“You can’t hand cybersecurity over to the IT department and assume the job is done. It’s a business issue that shapes risk, delivery capability, and regulatory compliance. Once you understand that connection, it becomes easier to make informed decisions. The point is to identify risks early, build security into the process, and avoid treating it as an afterthought.”

Driven to make a real impact

At Cyloq, they’ve turned down projects where clients asked them to “not look too closely.”

“We’re meticulous because we care. If we were to ‘just take a quick look,’ we couldn’t stand behind the results. We actually want to help companies become more resilient and more motivated to strengthen their security.”

Sam and Andreas have built a team of like‑minded specialists at Cyloq, driven, competitive, detail‑oriented, and methodical. A team that puts their heart into every test.

“Our goal is clear. We want to be the first choice in the Nordics for organizations that want security testing that genuinely makes a difference – with measurable risk reduction.”

‍