AI National Security and a Country Moving at Two Speeds

When Google Cloud Day Bulgaria debuted in 2024, it read as a coming-of-age moment: confirmation that the country's cloud-native scene had grown serious enough to merit its own stop on the regional map. Three editions in, the May 20 gathering at the Sofia Event Center has become a fixed point on the calendar, and this year it arrived with news that traveled well past the nearly 800 engineers, architects, and enterprise leaders in the room.

A national cybershield

On stage, Bulgaria's Information Services, the state-owned national system integrator, and Google Cloud unveiled one of the first deployments of Google Cloud's Cybershield in the European Union: a centralized, AI-powered defense system for the Bulgarian state. The project, quietly underway since earlier this year, is built around a federated Security Operations Center (SOC) that gives a single, coordinated view of threats across government and is designed to eventually fold in 54 ministries and agencies.

The architecture is the whole point. For years, each Bulgarian institution largely defended itself, a decentralized arrangement that left repeated openings for attackers. The new model consolidates security telemetry and intelligence into one place, pairing Google Cloud Security Operations for planet-scale analytics with Google Threat Intelligence and Mandiant's frontline insight, and layering in specialized analyst capabilities to chase down complex intrusions. The intended effect is a move from a reactive posture to a proactive one,  compressing the mean time to detect and respond to an attack. The build is backed by EU funding, framed explicitly as part of the bloc's push to harden its eastern border.

"Our partnership with Google Cloud is the result of an eight-year relationship built on trust and technical excellence," said Simeon Kartselyanski, Cyber Security Manager at Information Services and head of the Bulgarian National Cyber Security Operations Center. He cast the project as "a model for how EU nations can utilize centralized capabilities to stay ahead of persistent adversaries."

Google Cloud's director for Central and Eastern Europe, Boris Georgiev, put it more bluntly. The aim, he said, is to "transform Bulgarian national security from a manual craft into an automated science, fighting AI-powered threats with superior AI-powered defenses." That logic threaded through the technical program too: the deep-technical track opened with a Google session on agentic triage and investigation inside the SOC, the same automation applied to the daily grind of analyst work.

The floor: Gemini Enterprise, developer velocity, and a car shipping platform

If Cybershield set the strategic frame, the customer sessions showed what the technology does once it leaves the keynote stage. Telecom operator Yettel walked through how it is putting Gemini Enterprise to work across the business. JetBrains, the developer-tools company with deep regional roots, argued for AI as a genuine lever on developer velocity rather than a demo-day novelty.

A deeper case study came from Ship.Cars, a US-market vehicle-shipping platform that moves thousands of cars across the country every day and had watched its database growth outrun its infrastructure. 

Working with Sofia-based Europe Cloud, a Google Cloud Partner of the Year for 2023, Ship.Cars rebuilt its stack on Compute Engine, Cloud SQL, Kubernetes, Cloud Storage, and Pub/Sub, guided by weekly consulting sessions. Presented jointly by Ship.Cars' senior DevOps engineer Svetozar Kolew and Europe Cloud's DevOps team lead Kaloyan Siriyski, the payoff was the unglamorous sort that decides whether a company can keep scaling: steadier performance, a tighter security posture, and engineers freed from firefighting capacity.

"We don't just help businesses move to the cloud," Siriyski said of the work. "We help them build something better on top of it."

The number behind the optimism

For all the on-stage momentum, Georgiev was candid elsewhere about the gap underneath it. Speaking to Bloomberg TV Bulgaria, he attached hard figures to Bulgaria's split-screen AI moment: only about 9% of companies in the country currently use AI,  well below Western European levels, even as roughly 22.5% of Bulgarian individuals already do. Demand from people, in other words, is running ahead of adoption by the businesses meant to serve them.

The reasons, he suggested, are part structural and part cultural. Eastern Europe has historically picked up new technology later than the US, and within companies, the holdouts are predictable - finance, legal, and procurement, where caution is the reflex. But the leading edge is moving quickly: regulated sectors, especially banks and telecoms, alongside digital-first firms selling into global markets, are migrating to the cloud and using AI to understand and personalize how they serve customers. Once that mindset spreads from a single department to the whole organization, Georgiev argued, Bulgaria and the wider region should see the same adoption surge already visible further west.

His pick for where Bulgaria's edge might come from is specific: INSAIT, the Sofia-based AI institute Google has supported from the outset. Keep investing in it and keep drawing companies around it, he said, and it could become one of Bulgaria's defining advantages in Europe, a dividend not only for the education system but for the economy.

What the day actually showed

Strip away the keynote gloss, and Google Cloud Day Bulgaria 2026 documented a country pulling in two directions at once. On cybersecurity, Bulgaria has positioned itself near the front of the EU pack, converting an eight-year integrator relationship into one of the bloc's first national Cybershield deployments. On enterprise AI, it is still a laggard, albeit one with a fast-moving leading edge and a population already more AI-fluent than its companies.

The throughline the organizers kept returning to sovereignty, control, and the freedom to build on a global foundation without giving up your data is precisely the argument the region has been waiting to hear. Whether Bulgarian businesses act on it as decisively as the Bulgarian state just did is the question the fourth edition will have to answer.