Against a backdrop of trade wars (US-China) and military conflicts (Ukraine-Russia), ever-increasing threats and increasingly well-orchestrated attacks, and in an almost monopolistic cyber-economic landscape, can Europe today create the conditions for effective, sovereign cyber-security? Despite highly advanced technologies, increasing funding and a favourable regulatory environment, the European cyber sector faces a number of challenges if it is to create champions capable of scaling up quickly. These include, first and foremost, legal harmonisation at EU level and changes to the rules on competition and public procurement – the creation of a Buy European Act – to provide European cyber companies with orders and contracts. Without doing without American solutions, or copying their model, can we develop a form of sovereignty or strategic autonomy in cyber matters?