Halcyon
Halcyon is a private Austin-based cybersecurity company that sells a purpose-built AI-driven anti-ransomware platform with 24x7 managed response and a ransomware warranty, targeting enterprise customers across healthcare, education, financial services, government, and manufacturing sectors via direct sales, channel partners, and Dell OEM embedding.
- Company typePrivate
- Founded2021
- HeadquartersAustin, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What Halcyon does
Halcyon is a private Austin, Texas-based cybersecurity company that has built a purpose-built anti-ransomware platform designed to detect, disrupt, and prevent ransomware attacks across the full attack lifecycle, from pre-execution behavioral detection to data exfiltration blocking to encryption key capture and recovery. The platform uses AI and machine learning, including capsule neural networks trained specifically on ransomware behaviors, combined with modules for Data Exfiltration Protection, Encryption Detection and Key Capture, EDR Tamper Protection, and Linux environment coverage. It is offered as an annual or multi-year subscription with per-endpoint licensing and includes a Ransomware Operations Center (ROC), a 24x7 managed service staffed by ransomware specialists, plus a Ransomware Warranty providing up to $50,000 in professional services annually for qualifying incidents.
The company generates revenue primarily through platform subscriptions sold via direct enterprise field sales and channel partners (Climb Channel Solutions in North America, Distology in the UK), with a strategic OEM embedding through Dell Technologies' Trusted Workspace delivering Halcyon's protection pre-loaded on Dell commercial PCs globally. Additional revenue streams include professional services for engagements beyond the warranty scope and emerging integrations with cloud data protection (HYCU), threat intelligence sharing (Sophos), and incident response partners (Beazley Security, Booz Allen Hamilton). The company has raised approximately $190 million across multiple rounds, achieving $1 billion unicorn valuation in November 2024, and serves enterprise customers across healthcare, education, financial services, government, manufacturing, retail, energy, and federal sectors with named logos including Toyota, Chipotle, Cinemark, Caesars Entertainment, Deloitte, Eastman, Intermountain Health, and multiple K-12 districts and universities. Leadership combines operational veterans (CEO/founder Jon Miller, CTO/founder Ryan Smith) with senior advisors from government (former DHS Secretary Kirstjen Nielsen, former National Cyber Director Chris Inglis) and security operations (former FBI Cyber Division Deputy Assistant Director Cynthia Kaiser, former Barclays CISO Oliver Newbury).
Halcyon firmographics
Firmographics- Name
- Halcyon
- Legal name
- Halcyon Tech, Inc.
- Website
- https://halcyon.ai
- Company type
- Private
- Founded year
- 2021
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Halcyon is a private Austin-based cybersecurity company that sells a purpose-built AI-driven anti-ransomware platform with 24x7 managed response and a ransomware warranty, targeting enterprise customers across healthcare, education, financial services, government, and manufacturing sectors via direct sales, channel partners, and Dell OEM embedding.
- Ownership category
- akta.pro rank
Halcyon industry classification
Industry- Product category
- Anti-Ransomware Cybersecurity Software
- NAICS
- Software Publishers (5132)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Endpoint Deception & Anti-Ransomware (HDADAEAL)
- akta.pro secondary industry
- Cyber Recovery & Ransomware-Resilient Backup Services (BPAEALAG)
Keywords
Where Halcyon is headquartered
LocationHeadquarters
- HQ city
- Austin
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Halcyon business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Platform Subscription: Annual or multi-year subscription licenses for the Halcyon Anti-Ransomware Platform, sold per endpoint or enterprise-wide agreements with volume pricing for larger deployments. Core revenue driver with included 24x7 ROC monitoring and professional services up to Annual Cap of $50,000 for ransomware incidents.
- Professional Services: Incident response and recovery professional services provided under warranty (up to $50,000 Annual Cap) and additional billable professional services for engagements beyond warranty scope.
- Partner/VAR Subscriptions: Subscription revenue flowing through channel partners including Climb Channel Solutions (North America), Distology (UK), and other resellers who purchase and resell Halcyon licenses to end customers.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Platform subscription with included ransomware warranty |
| Subscription | Multi-year contract | Enterprise agreements with custom pricing |
Go-to-market motion4 records
Distribution channels6 records
Marketing channels7 records
Halcyon product offering
Product offeringCore offering
Halcyon develops and sells an enterprise anti-ransomware software platform that prevents, detects, and contains ransomware attacks at the endpoint. The offering combines prevention modules (data exfiltration prevention, encryption detection with key capture, and EDR tamper protection) with a Ransomware Operations Center, a Ransomware Warranty, and Emergency Ransomware Recovery professional services.
Product overview
Halcyon is a cybersecurity company that has built an anti-ransomware platform as a new and distinct security category. The flagship offering is the Halcyon Anti-Ransomware Platform, a unified solution combining multiple prevention and recovery modules: Anti-Ransomware (pre-execution prevention using AI/ML), Data Exfiltration Protection (real-time data theft blocking), Encryption Detection + Key Capture (enabling key-based recovery without ransom payment), and EDR Tamper Protection (guarding endpoint agents). The platform is backed by the Ransomware Operations Center (ROC), a 24x7 expert-led managed service included with every subscription that automates detection, isolation, and recovery response actions. A Ransomware Warranty committing Halcyon to professional services recovery support up to $50,000 per year is also included. The Ransomware Research Center (RRC) provides ongoing threat intelligence and a Threat Actor Index. The platform is offered as a purpose-built SaaS subscription with per-endpoint licensing and integrates with existing EDR, backup, and cloud environments, while a Dell OEM partnership delivers ransomware-resilient commercial PCs.
Differentiator
Problem solved
Functional benefit
Brands
- Halcyon Anti-Ransomware Platform: Dedicated anti-ransomware protection platform using AI and machine learning
- Ransomware Operations Center (ROC)
- Halcyon Ransomware Research Center (RRC)
Products and services
- Halcyon Anti-Ransomware Platform Core enterprise software platform that prevents, detects, and contains ransomware attacks on endpoints using AI/ML detection, encryption detection with key capture, data exfiltration prevention, and EDR tamper protection; sold to enterprise customers in healthcare, education, financial services, government, and manufacturing.
- Ransomware Warranty A warranty-backed financial protection product bundled with the Halcyon platform, designed to offset residual ransomware risk for enterprise customers.
- Emergency Ransomware Recovery Professional services engagement for enterprise customers experiencing an active ransomware incident, providing emergency response and recovery support.
- Halcyon Ransomware Operations Center (ROC) An operations center capability that provides active monitoring and operational support for ransomware defense alongside the Halcyon platform.
Quantifiable outcome
- 68% of Halcyon users say Halcyon stopped a ransomware threat that would have significantly impacted their business
- +4 more outcomes
Companies that use Halcyon
Customer profileNamed customers4 records
Segments7 records
Ideal customer profiles1 record
Halcyon technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration6 records
AI capability6 records
Feature6 records
Halcyon partnerships and signals
Strategic signalPartnerships
Ten partnerships are on record, tiered flagship, minor and core.
- HYCUflagshipStrategic partnership to create the first ransomware-resilient data protection solution for cloud environments. Integration combines Halcyon's prevention and resilience capabilities with HYCU's cloud-native backup and recovery platform to protect workloads across Nutanix, VMware, AWS, Azure, and Google Cloud. Enhanced R-Cloud platform with R-Shield enables earlier threat identification, attack disruption before spread, and rapid recovery.
- AlvakaminorPartnership provides organizations with enhanced ransomware detection, response, and recovery capabilities combining Halcyon's anti-ransomware platform with Alvaka's incident response expertise including keyless decryption capabilities enabling recovery of encrypted data without paying ransoms.
- Dell TechnologiesflagshipCollaboration through Dell Trusted Workspace makes Halcyon the first commercial PCs equipped with out-of-the-box ransomware resilience. Exclusive offering adds Halcyon's dedicated anti-ransomware protection and recovery layer to all Dell commercial PCs globally, targeting enterprises seeking protection from ransomware attacks with minimized operational downtime.
- Beazley SecuritycoreRansomware Incident Response Partner Program integrates Halcyon's anti-ransomware platform with Beazley Security's incident response expertise. Program delivers end-to-end ransomware protection with significantly reduced recovery times. Beazley brings experience handling tens of thousands of ransomware claims over eight years.
- Booz Allen HamiltoncoreRansomware Incident Response Partner Program integrates Halcyon's anti-ransomware platform with Booz Allen Hamilton's cyber incident response capabilities for government and commercial clients. Combines Halcyon's dedicated ransomware technology with Booz Allen Hamilton's strategic consulting expertise.
- MoraeminorStrategic partnership enhancing cybersecurity for legal organizations through integration of Halcyon's ransomware detection and recovery technology with Morae's legal expertise. Collaboration focuses on data protection, regulatory compliance, and operational resilience for law firms and legal departments.
- Climb Channel SolutionscoreDistribution partnership expanding access to ransomware prevention technology across North American VARs and MSPs. Partnership leverages Climb's extensive partner network to enhance adoption of Halcyon's platform combining multiple prevention engines and automated recovery.
- SophoscoreStrategic threat intelligence sharing partnership at Black Hat USA enabling real-time exchange of indicators of compromise, adversary behaviors, and attack patterns. Collaboration includes mutual anti-tamper protections allowing each platform to monitor and safeguard the other's security agents, benefiting over 300,000 organizations worldwide.
- DistologycoreUK channel partner appointed to drive global growth and expand ransomware defense reach in European market through Halcyon's Revolution Partner Program expansion to UK.
- BlackLake SecurityminorPartnership to defeat ransomware through integration of BlackLake Security's expertise with Halcyon's anti-ransomware platform capabilities.
Scale indicators6 records
Recent moves8 records
Expansion highlights6 records
Halcyon competitors and assessment
Company assessmentBroad incumbents
- CrowdStrike: CrowdStrike is a leading endpoint security platform with its Falcon EDR/XDR suite that includes anti-ransomware capabilities (Falcon anti-ransomware, behavioral analysis, rollback features). It is the primary broad incumbent competing against Halcyon's focused approach, with much larger scale and bundled offering.
Direct peers
- SentinelOne: SentinelOne provides AI-driven endpoint security with Singularity XDR, including autonomous ransomware detection, rollback, and behavioral AI capabilities. It is a direct peer to Halcyon in autonomous endpoint protection and is publicly traded with comparable AI-led prevention messaging.
- Deep Instinct:
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Halcyon social profiles
Digital presenceHalcyon compliance and trust
Trust signalCompliance4 records
Halcyon financial estimates
Financial estimateRevenue estimate
Valuation estimate
Halcyon leadership team
Management profileNumber of profiles
Profiles3 records
Halcyon funding detail
Funding detailFunding overview
Funding rounds4 records
Investors16 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Halcyon M&A and investment
M&A and investmentM&A
Investments1 record
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Halcyon
What does Halcyon do?
Halcyon develops and sells an enterprise anti-ransomware software platform that prevents, detects, and contains ransomware attacks at the endpoint. The offering combines prevention modules (data exfiltration prevention, encryption detection with key capture, and EDR tamper protection) with a Ransomware Operations Center, a Ransomware Warranty, and Emergency Ransomware Recovery professional services.
Is Halcyon a public or private company?
Halcyon is a private company. It is classified as venture growth investor backed and is currently operating.
When was Halcyon founded?
Halcyon was founded in 2021. It employs 101 to 250 people.
Where is Halcyon based?
Halcyon is headquartered in Austin, United States, in the North America region.
How does Halcyon make money?
Three revenue lines are on record. Platform Subscription is the primary driver. The others are professional Services and partner/VAR Subscriptions.
Who are Halcyon's main competitors?
CrowdStrike is listed as a broad incumbent. Direct peers are SentinelOne and Deep Instinct.
Does Halcyon have an API?
Yes. Halcyon exposes a REST API as part of its hosted platform services (Management Console, REST APIs, Atlas services, Webhook services, and other production cloud services). Customers can configure external scanning of their assets via the Platform. A public status page with Atom/RSS feeds is also available for monitoring service availability. SDK or client library details are not explicitly documented in the source material. Developer documentation is at status.halcyon.ai/history.atom.
What industry is Halcyon in?
Halcyon's product category is Anti-Ransomware Cybersecurity Software. Its primary akta.pro industry code is HDADAEAL, Endpoint Deception & Anti-Ransomware, with a secondary code of BPAEALAG, Cyber Recovery & Ransomware-Resilient Backup Services. Its NAICS code is 5132 and its SIC code is 7372.