Former Pentagon hackers turned security tool builders. We're taking back what security tools should be: production-ready, affordable, and actually useful.
Just Doing It™*
Hyperion Gray has always been a bit of a different company. We don't mean that in the corporate synergy way—we mean we literally went and built cool stuff with the Pentagon's money, may have exchanged a little bit of our souls (weren't using them that much anyway), and came out ahead. After a merger to a Company That Shall Not Be Named Due To Legal Thingies, we're back.
Alex (also known as P4X, _hyp3ri0n, and still just Alex because his name hasn't actually changed, but we wanted to show progress) is a newfound Thousandaire—that's like a millionaire but with a couple less zeroes. He's appeared in Forbes about 4 times, not for being rich, but for doing things that made various parties consider legal action. We've always been a collective of brilliant people that grow and scale as needed, then go into cocoons to hibernate until they're needed again. It's looking like we might be needed again.
You're getting ripped off. If you're in security, no doubt you've been through the gamut of looking at vendor tools, being unimpressed, and then getting quoted hundreds of thousands of dollars. Sometimes it's predatory—they know you might need that software to pass audits. Sometimes a company just spent a ton of money making a really terrible product.
We've always been grounded in "high tech stuff that is actually usable." Over the last few years we've worked our asses off to bring you what WAS R&D to just... D. And D we did. Many of our products are nearing completion—real production-ready software, not R&D masquerading as a product.
The theme of this round of Hyperion Gray is simple: we're taking it back.
Whether it be scanning the web for vulnerabilities, disclosing vulnerabilities, threatening to get sued by various parties (for disclosing vulnerabilities), or YOLO-ing out something rad, we've always enjoyed our work. We've got a bit of an edge: very serious in our work, not so serious in ourselves. If that makes us "less corporate friendly" for enterprises, that's totally fine. We'll just give—or maybe even someday sell—something to the common folk (no offense meant, we love all of you peasants).
Our work speaks for itself.
But we'll answer them anyway because we're trying to be slightly less obtuse.
A: It depends on when you ask. We do like to keep things tight, but no we are typically not "just one person". At our largest, we really couldn't even tell you exactly how big we were. Not because we're bad at accounting, but because it depends on your definition of what makes someone a part of Hyperion Gray. In truth most of you aren't Hyperion Gray because you've never received a paycheck from us, done work for us, or had the super sweet experiences that we've had doing "things" for "people" that we don't talk about much, but trust us, you'd be impressed if you knew. We swear.
A: By getting paid. OK fine, real answer: R&D, security work, offensive work. Those that have doubted either of those have gotten rude awakenings that we are, in fact, not full of it. Typically our customers have been intelligence and DoD, but we've worked with FFRDCs, the Federal Government, and some private customers. Though we have specialized in R&D we've dipped our toes in products, pen testing, and a lot of open source work.
A: No. We usually ask "them" to leave that ON the bridge.
A: It's time. For what? Well, you're going to see a lot. Like we said: you're getting ripped off. Over the last few years we've worked our asses off to bring you what WAS R&D to just... D. And D we did. Many of our products are now nearing completion of v1, v0.1, v0.1-beta, and sometimes v0.1-alpha.
Sometimes this scares people—are you selling R&D software off as production? No, we don't do that. Instead we just worked our asses off to make what was R&D actual production-ready software. If you haven't seen any of our git repos, you will shortly.
Production-ready security software that doesn't cost you hundreds of thousands. We're bringing R&D-quality tools to everyone at prices that don't require selling a kidney.
Hyperion Gray Web Services—this isn't your momma's cloud (if your mom owns a cloud she's pretty cool though). Web services specifically designed to get our work centralized and out to you. Coming soon.
Check out our git repos. We're big fans of open source and believe security tools should be accessible to everyone, not just those who can afford enterprise pricing.
Our backgrounds include work with DARPA, DoD, intelligence agencies, and FFRDCs. We know what real security research looks like because we've done it at the highest levels.
Offensive security work, vulnerability research, web crawling, and the super-spooky "dark web." If it involves breaking or building web infrastructure, we've probably done it.
We've presented at DEF CON, ShmooCon, and CarolinaCon. Disclosed vulnerabilities to various parties, who occasionally threatened to sue us. Good times.
"Security should not be just for the upper echelons. We really believe this information should be made freely available"Meet The Darpa-Backed Hackers Building A Google For Every Web Weakness
"Eventually our system will be like an army of robot interns that can find stuff for you on the web, while you do important things like watch cat videos"Memex in Action
Want to hear about our launches? Drop your email below. We'll email maybe once a month, sometimes twice. We have no interest in spamming you or selling your information. We're too busy building stuff.