MadX

What MadX does

MadX LLC is a privately held, veteran-owned small business contracting firm headquartered in Fairfax, Virginia, founded in 2020 by U.S. Marine Corps veteran and threat intelligence researcher Jonathan Tomek. The company initially developed two internet intelligence products — Sauron and Nodify — which were acquired by Digital Envoy (Digital Element) in 2021. Following the divestiture, MadX restructured into a pure-play professional services firm operating under four service lines: Threat Intelligence (collection, adversary tracking, finished analysis, internet-scale data operationalization), Offensive Security (penetration testing, red teaming, attack surface assessments), Security & Network Engineering (architecture, hardening, detection engineering), and Software & AI Development (custom tooling, automation, data pipelines, AI-driven systems).

The firm's core technology competency stems from its prior product work in internet measurement and threat intelligence, giving engineers operational familiarity with large-scale telemetry and adversary infrastructure analysis — evidenced by ongoing public research on residential proxy networks, browser proxyware, and VPN ecosystems. MadX serves U.S. government agencies (primarily DoD) as a prime and subcontractor under NAICS 541511 since 2021, alongside commercial clients requiring offensive security testing, hardened infrastructure builds, and custom software. The firm is registered as a Veteran-Owned Small Business (CAGE Code 8UGN4, UEI NQ6BXPNTJ3F3) and explicitly maintains a "senior practitioners only, no bench" staffing model, prioritizing engagement quality over scale.

MadX's business model is direct contracting: project-based professional services delivered without public pricing, with capability statements available on request. Go-to-market is research-led, leveraging a public threat intelligence blog, security conference speaking (DEF CON, THOTCON — co-founded by the founder), bylined coverage in Dark Reading, and earned media (CNBC). No funding rounds, institutional investors, or parent company are disclosed, indicating the firm is bootstrapped or self-funded. Revenue streams are professional services engagements split between government contracting and commercial work, with no product or subscription revenue after the 2021 Sauron/Nodify divestiture.

Name

MadX

Legal name

MadX LLC

Website

https://madx.co

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

1–10 employees

Short description

MadX is a veteran-owned small business contracting firm in Fairfax, VA, delivering threat intelligence, offensive security, security engineering, and custom software/AI services to U.S. government agencies and commercial clients. Founded 2020, the firm operates a senior-practitioner-only model after divesting its Sauron and Nodify products to Digital Envoy in 2021.

Ownership category

akta.pro rank

Headquarters

HQ city

Fairfax

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Government Contracting (GovCon): Threat intelligence and security mission support to U.S. government agencies since 2021. Available for prime and subcontract work on DoD and other agency missions.
2. Commercial Contracting: Custom engineering, offensive security engagements, hardened infrastructure builds, and custom software delivery to commercial clients.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

MadX is a veteran-owned contracting firm delivering threat intelligence, offensive security, security and network engineering, and custom software/AI development services to U.S. government agencies and commercial clients. The firm operates with senior practitioners only, providing mission-grade cyber and software engineering under prime and subcontract arrangements since 2021.

Product overview

MadX is a veteran-owned contracting firm that was founded in 2020 in Fairfax, Virginia. The company previously developed two internet intelligence products—Sauron and Nodify—which were acquired by Digital Envoy (Digital Element) in 2021. Today, MadX operates as a contracting firm offering four core service lines: Threat Intelligence (adversary tracking and finished analysis), Offensive Security (penetration testing and red teaming), Security & Network Engineering (architecture and hardening), and Software & AI Development (custom tooling and AI-driven systems). The company maintains a small, senior-practitioner-only structure.

Differentiator

Problem solved

Functional benefit

Products and services

• Threat Intelligence Services Threat intelligence service covering collection, adversary tracking, and finished analysis. Includes designing intelligence programs, enriching and operationalizing data at internet scale, and turning raw telemetry into actionable decisions for government and commercial clients.
• Offensive Security Services Offensive security service providing penetration testing, red teaming, and attack surface assessments. Approaches client environments the way an adversary would, producing prioritized, actionable paths to closing discovered vulnerabilities.
• Security & Network Engineering Services Security and network engineering service covering architecture, hardening, detection engineering, and infrastructure builds. Engineers defensible-by-design environments including network segmentation and monitoring pipelines.
• Software & AI Development Services Software and AI development service delivering custom tooling, automation, data pipelines, and AI-driven systems. Purpose-built, mission-specific software delivered by engineers who have shipped commercial products.

Named customers3 records

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

One partnership is on record.

• Digital Envoy (Digital Element)notableOthers · 1 January 2021Digital Envoy acquired MadX's internally-developed products Sauron and Nodify — internet intelligence products — in 2021. This acquisition validated the company's engineering capabilities and product development in the threat intelligence and internet measurement space.

Scale indicators3 records

Recent moves5 records

Expansion highlights4 records

Direct peers

• Two Six Technologies: Government-focused technology and cybersecurity services firm with similar DoD/intelligence community customer base and cleared-workforce model. Comparable GovCon mission-support positioning to MadX.
• TrustedSec: Boutique cybersecurity consultancy specializing in offensive security, incident response, and threat intelligence. Comparable boutique services model and senior-consultant positioning.
• By Light Professional IT Services: Small-to-mid sized GovCon IT and cybersecurity services provider supporting DoD and federal agencies. Closely comparable in scale, federal-customer focus, and security engineering delivery model.
• Bishop Fox: Boutique offensive security firm known for high-end penetration testing and red team services. Comparable senior-practitioner boutique model targeting security-mature commercial and government clients.
• Nisos Holdings: Boutique threat intelligence and adversary-tracking consultancy serving both commercial and government clients. Closely comparable boutique-services model with senior-practitioner positioning.
• Dark Wolf Security: Boutique cybersecurity services firm focused on federal and DoD clients with offensive security, threat intelligence, and engineering offerings — directly analogous to MadX's service mix and customer base.

Broad incumbents

• Optiv: Large commercial-focused security solutions integrator offering advisory, offensive security, and security engineering. Overlaps with MadX's commercial security services but at materially greater scale.
• Recorded Future: Large threat-intelligence platform and services provider. Adjacent product-and-services overlap with MadX's threat-intelligence offering, but operating at substantially greater scale with a software platform at the core.
• BlueHalo: Larger-scale GovCon provider with significant cyber and space-electronics portfolio serving DoD and intelligence customers. Overlapping mission space but with much broader service breadth and scale.

Emerging players

• SpecterOps: Specialized adversary-tactics and detection-engineering consultancy with strong research brand, comparable in boutique positioning to MadX but focused more narrowly on adversary simulation and BloodHound-related tooling.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xtwitter.com/MadX_LLC
• GitHubgithub.com/sakebomb
• LinkedInlinkedin.com/company/madx-llc

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about MadX