British cybersecurity firm Goldilock Secure crowned grand winner of SLINGSHOT competition

Key Concepts

• Goldilock Secure: A British cybersecurity firm that won Slingshot 2025.
• Slingshot 2025: A global startup competition organized by Enterprise Singapore.
• Firebreak: Goldilock Secure's physical connection controller that allows remote disconnection of network segments.
• Physical Disconnect: The core technology of Goldilock Secure, which relies on the laws of physics rather than code to prevent cyberattacks.
• Cybersecurity: The practice of protecting systems, networks, and programs from digital attacks.
• Industrial Control Systems (ICS): Systems used to monitor and control industrial processes.
• Startup Ecosystem: The network of organizations and individuals that support startup companies.
• Product Market Fit: The degree to which a product satisfies strong market demand.
• Unicorn: A privately held startup company valued at over $1 billion.

Goldilock Secure's Victory at Slingshot 2025 and its Cybersecurity Solution

Goldilock Secure, a British cybersecurity firm, has been awarded the grand prize at Slingshot 2025, outperforming nearly 7,000 startups from over 150 markets. The company's innovative solution enables users to physically disconnect parts of their networks to protect them from cyberattacks. Slingshot, now in its ninth year, is an annual competition organized by Enterprise Singapore during the Singapore Week of Innovation and Technology.

Goldilock Secure's Technology: The "Firebreak"

Stephen Kines, co-founder of Goldilock Secure, explained the core problem addressed by their technology: the "proliferation of connectedness," which is exacerbated by AI. He highlighted the alarming statistic of 600 million cyberattacks, which not only target data theft but also compromise critical infrastructure like energy networks, water systems, and transportation, leading to potential loss of life.

The fundamental principle behind Goldilock Secure's solution is "pulling the plug," a concept that is impractical in large, complex networks. To overcome this, they developed a "physical connection controller" named Firebreak. This device allows for the remote disconnection and reconnection of network segments.

Key features of Firebreak:

• Default Disconnected State: The system remains disconnected by default, giving users ultimate control over their network.
• Remote Control: Users can remotely connect or disconnect network segments.
• Internet-Independent Trigger: The trigger mechanism for connecting and disconnecting does not rely on the internet, which is described as their "secret sauce" and the basis of their patents.
• Physical Disconnect: This approach bypasses the limitations of code-based cybersecurity, which can always be outmaneuvered by another coder. Goldilock Secure leverages the "laws of physics" for robust protection.
• Simplicity and Robustness: Despite its underlying complexity, the system is designed for ease of use. Kines mentioned that their CTO's grandmother was able to set one up in seven minutes. The technology is engineered to be robust enough for critical infrastructure like energy and water networks, serving as a "first and last line of defense."

The effectiveness and uniqueness of Goldilock Secure's technology have been validated by NATO over two years, leading to its designation as a "sole source product" within the 32 NATO countries. This means procurement in these countries would not require public bidding, underscoring its singular capability.

Slingshot 2025 Competition and Singapore's Startup Ecosystem

Cindy Nyam, Director of Startup Ecosystem and Community at Enterprise Singapore, discussed the evolution of the Slingshot competition. This year saw a record number of applications, with the top 12 startups showcasing intellectual property from leading innovation hubs in Japan, the US, and the UK.

Beyond Goldilock Secure, other notable winners included:

• Second Place: Loop Dx (health and biomat domain) with a rapid diagnostic test for sepsis and immune dysfunction.
• Third Place: Nala Genetics (health and biomat domain) focusing on predictive genetics testing.

Nyam emphasized Singapore's growing prominence as a global startup hub. She outlined the criteria for attracting startups to the Singapore ecosystem, which align with the qualities exhibited by Slingshot participants:

1. Innovative Solution: A clear market differentiator.
2. Product Market Fit: A strong understanding of market demand.
3. Pathway to Profitability and Scaling: A viable plan for growth.
4. Solving Large Global Economic Problems: Addressing significant challenges.
5. Talented Team: A capable team to drive development from lab to market and beyond.

Goldilock Secure exemplifies these criteria, and their decision to invest in and expand their presence in Singapore is a testament to the country's potential.

Goldilock Secure's Expansion Plans and Future Challenges

Stephen Kines elaborated on Goldilock Secure's strategic decision to establish a presence in Singapore. They are developing their next generation of technology, aiming to embed it in every industrial control system, vehicle, and home. Singapore's talent pool is a key factor in their recruitment efforts, with support from a local agency. A significant announcement regarding their expansion is scheduled for November 14th.

Singapore is also viewed as a crucial "launchpad for Southeast Asia," offering access to a significant market. The Slingshot program has provided Goldilock Secure with invaluable insights into the Singaporean market through extended engagement.

Regarding future challenges, Kines identified the ongoing need for investment. He noted that innovators often face resistance and must challenge existing perceptions, such as the prevailing belief that "code is the way" to solve cybersecurity issues. Goldilock Secure's approach, which emphasizes physical security, is seen as a paradigm shift. The challenge lies in shifting the market's mindset from a constant state of connection to one of controlled connectivity and taking back control of network interactions, especially in the era of AI proliferation.

Kines views Goldilock Secure's physical connection controller as a platform, aligning with the ambition of becoming a "unicorn" by working collaboratively within the ecosystem.

Conclusion

Goldilock Secure's victory at Slingshot 2025 highlights the growing importance of innovative cybersecurity solutions that go beyond traditional software-based approaches. Their "Firebreak" technology, which leverages physical disconnection, offers a robust and simple method for protecting critical networks. Singapore's dynamic startup ecosystem and strategic location provide a fertile ground for companies like Goldilock Secure to expand and address global challenges. The company's focus on physical security and its potential to redefine cybersecurity paradigms position it for significant future growth.