Other
Nov 2024The Series C announcement disclosed a $1 billion valuation. This creates high growth and execution expectations, although it is not itself a negative operating signal.
SourceCompany research
Public company, workplace, funding, and market signals
Updated Aug 16, 2026
Overview
Halcyon is a privately held cybersecurity company founded by veterans of Boldend, Cylance, Accuvant, and IBM X-Force. It develops ransomware-specific protection and recovery technology intended to prevent encryption, data exfiltration, extortion, and operational downtime.
Primary product
Halcyon Anti-Ransomware Platform: a ransomware-focused security layer with endpoint prevention, behavioral and AI detection, EDR-evasion protection, encryption-key capture, automated decryption/recovery, data-exfiltration protection, and 24/7 ransomware detection and response services.
Founded
2021
Headquarters
San Diego, California, United States
Team size
201–500
Work style
Remote
Industry
Cybersecurity
Sub-industry
Anti-ransomware, endpoint security, cyber resilience, and data-exfiltration protection
Offices
San Diego, California, United States
Austin, Texas, United States
Business model
B2B enterprise software
Subscription cybersecurity platform
Security services and ransomware response
Channel and MSSP partnerships
Funding
Stage
Series C / late-stage venture-backed
Total raised
$190M
Latest round
Series C · Nov 2024
Latest amount
$100M
Nov 2024 · Evolution Equity Partners
Jul 2024 · Cisco Investments
Dec 2023 · Bain Capital Ventures
Apr 2023 · SYN Ventures
People & investors
Leadership
Co-Founder; CEO in company funding and media materials; later identified as Chief Scientist in public professional-profile data
Ryan Smith
CTO & Co-Founder
COO & Interim CEO listed on Halcyon's company leadership page
Chief Product and Engineering Officer
Jeff Williams
Chief Growth Officer
President; appointment reported by Halcyon with a 2026 publication date, excluded from funding/current-state conclusions because it is future-dated relative to the core research set
Cynthia Kaiser
SVP, Ransomware Research Center
VP, Global Talent Acquisition
Work & culture
Halcyon presents itself as a remote-native, globally distributed team focused on eliminating ransomware as a business risk. Its stated operating philosophy emphasizes attacker-led research, resilience when prevention fails, collaboration across security disciplines, and minimizing deployment friction for enterprise security teams. Independent employee-review signals are mixed and should be treated cautiously.
Work style
Remote
Compensation
The company advertises competitive compensation, equity, and matched retirement benefits. A public Staff Engineer, Endpoint Agent listing showed a base salary range of $220,000–$275,000 plus a 10% bonus target and possible equity. Sponsorship policy was not found in reliable public sources.
Benefits
100% remote global workforce
100% employer-paid medical, dental, and vision premiums for employees and dependents, according to the careers page
Equity eligibility depending on position
401(k) or matched retirement plan
Unlimited or flexible PTO
Paid sick time and holidays
Paid parental leave
Short- and long-term disability insurance
Life and AD&D insurance
Medical and dependent-care FSA options
Product & market
Pricing
Not publicly listed; enterprise quote/demo-led sales model. Halcyon markets the platform to mid-market and enterprise customers and directs prospects to request a demo.
Differentiators
- —Purpose-built specifically for ransomware rather than a general-purpose endpoint-security product
- —Designed to complement, not replace, existing EDR, SIEM, SOAR, backup, and identity tools
- —Encryption-key capture and automated decryption provide a recovery path even when conventional backups are unavailable
- —Protection spans pre-execution, execution, EDR evasion, encryption, data exfiltration, and extortion
- —24/7 ransomware detection and response services
- —Ransomware warranty and recovery support are used as commercial differentiators
- —Lightweight Windows and Linux agent with open API and broad security-stack integrations
- —Attacker-led research and a dedicated Ransomware Research Center
Technology
AI and machine-learning models trained on ransomware samples
Behavioral detection and prevention engines
Endpoint agent for Windows and Linux
Encryption-key capture and automated decryption
Kernel Guard / vulnerable-driver protection
Data Exfiltration Protection
Universal API integrations
Microsoft Defender integration
CrowdStrike Falcon integration
SentinelOne Singularity integration
Palo Alto Cortex XDR integration
Splunk integration
Microsoft Sentinel integration
Google SecOps integration
Sumo Logic integration
Veeam, Cohesity, Acronis, and Commvault compatibility
Publicly reported engineering stack signals: Python, React, gRPC, Apache Kafka, Protobuf, Docker, Terraform, Linux kernel, YARA, Datadog, Grafana, GitHub, GitLab, AWS services, and Salesforce
Customers
Global 2000 and enterprise organizations
OceanAir Federal Credit Union
Delaware Valley University
Industrial Refrigeration Pros
CACC Cargolinx
A large financial/reinsurance group, unnamed in the case study
A leading national healthcare insurer, unnamed in the case study
A large industrial manufacturer, unnamed in the case study
A large North American law firm, unnamed in the case-study collection
Competitors
CrowdStrike
SentinelOne
Palo Alto Networks Cortex XDR
Microsoft Defender for Endpoint
Sophos
BlackBerry Cylance
Trellix
Trend Micro
Rubrik and other cyber-recovery vendors
General endpoint-security and ransomware-resilience platforms
Scale & contact
Estimated revenue
$30M–$40M annually, based on third-party company-profile estimates; Halcyon has not publicly reported audited revenue
Signals & risks
Other
May 2026Several LinkedIn posts indexed by Exa describe a company-wide layoff or broader restructuring in May–June 2026. These reports are employee-generated, future-dated relative to the main research set, and were not corroborated by an official Halcyon announcement.
SourceLatest news
Halcyon · Aug 2025
Halcyon appointed Mitchell Plonski as President of Federal and Julie Starnes as VP of Federal to address U.S. federal agencies and the Defense Industrial Base.
Computer Weekly · Aug 2025
Halcyon and Sophos announced a threat-intelligence-sharing collaboration involving indicators of compromise, adversary behaviors, and attack patterns.
Halcyon · Jun 2025
Former FBI Cyber Division Deputy Assistant Director Cynthia Kaiser joined as SVP of the Ransomware Research Center to expand public-private threat-intelligence collaboration.
Business Wire · Apr 2025
The company announced Kernel Guard protection aimed at attacks using vulnerable legitimate drivers to disable security software.
Halcyon / Business Wire · Nov 2024
Halcyon announced a $100M Series C led by Evolution Equity Partners, bringing reported total funding to $190M and valuing the company at $1B.
Jobs and careers at Halcyon
9 jobs at Halcyon
Senior Information Security Specialist
Remote
G&A: Security - CISO
Remote, US; United States
6d ago
Remote
Full-time
Senior Deal Desk Lead
Remote
Sales: Revenue Operations
Remote, US; United States
1mo ago
Remote
Full-time
Senior Product Manager, Endpoint
Remote
Product
Remote, US; United States
1mo ago
Remote
Full-time
Enterprise Account Executive, Northeast
On-site
Sales: Enterprise Sales
New York, New York; United States
1mo ago
On-site
Full-time
Don't see the exact role you're looking for? Join our Commercial Sales Talent Pool
Remote
Sales: Commercial Sales
Remote, US; United States
2mo ago
Remote
Full-time
Don't see the exact role you're looking for? Join our Enterprise Sales Talent Pool
Remote
Sales: Enterprise Sales
Remote, US; United States
2mo ago
Remote
Full-time
Enterprise Account Executive
On-site
Sales: Enterprise Sales
Chicago, IL; United States
3mo ago
On-site
Full-time
Enterprise Account Executive, Ohio Valley
On-site
Sales: Enterprise Sales
United States
3mo ago
On-site
Full-time
Enterprise Account Executive, Pacific Northwest
On-site
Sales: Enterprise Sales
Northwest, US; United States
3mo ago
On-site
Full-time