HomeTechnologyA decade in, bootstrapped Thinkst Canary reaches $20M in ARR without VC...

A decade in, bootstrapped Thinkst Canary reaches $20M in ARR without VC funding

[ad_1]

This month, cybersecurity company Thinkst will mark its 10th anniversary since the launch of its now-flagship product, Canary. The company debuted Canary after seeing companies spend millions of dollars on cybersecurity products, yet were still taking months or longer to realize that they had been breached.

Thinkst believed it could make a digital tripwire product that would catch hackers in the act, and by all accounts, it did just that.

Over the past decade, the company has grown to around 40 employees, mostly developers and engineers; hasnโ€™t taken on any outside funding; and is on track this year to make a healthy profit on $20 million in annual recurring revenue, almost double from 2021, Thinkst founder Haroon Meer told TechCrunch.

Itโ€™s an impressive, if not refreshing feat, at a time when many cybersecurity companies are driven by breakneck growth and speed and fueled by venture capital.ย 

Meer, who founded Thinkst and serves as its chief executive from Cape Town in South Africa, told TechCrunch in a call earlier this month that Thinkst made it this far by focusing on its customers and what they need โ€” specifically a product that does what it says it does โ€” and not growing the company at an uncontrolled rate. Meer said this approach is working, pointing to 60% of its first-year customers who are still with the company today.

โ€œWeโ€™re not artificially holding back growth, but weโ€™re also not doing any of the really silly, โ€˜pour gasoline on the fireโ€™ growth-at-all-costs stuff,โ€ said Meer. โ€œWhat you have to do is keep the promises that you make, and youโ€™ll grow into the people that are right for you.โ€

In 2015, Thinkst launched its Canary hardware product โ€” named after a canary in a coal mine, essentially a very early warning system โ€” that can detect and alert when hackers are present on a companyโ€™s network.ย 

A canary is set up like a honeypot, so that when a malicious hacker (or an authorized pen-tester stress-testing a companyโ€™s defenses) accesses the canary thinking they struck it lucky by accessing a Windows PC with an open file share, or a server packed with customer data, secret API keys, or a vital service for a companyโ€™s operations, the canary will send an alert about the breach and allow the company to take immediate action.ย 

The canaryโ€™s purpose is to reduce the amount of time that hackers have to sneak around on a victimโ€™s network to search for sensitive data, plant malware, or otherwise cause damage before getting caught. The average hacker has around 24 days on a victimโ€™s network before detection, according to Verizonโ€™s most recent annual data breach report.

The company also offers Canary Tokens, its free and public offering that lets anyone drop an item of ostensible value, like a password, document, or a credit card number, for example, in a safe place so that when someone accesses or opens the item, you are alerted at the same moment your safe place was compromised.

โ€œOne of the things we got accidentally lucky with is itโ€™s really hard to deploy a canary wrong,โ€ said Meer. โ€œIf you make it fit in, then you catch attackers, and if you make it stick out, you catch attackers.โ€ After all, if a malicious hacker sees an advantage to get what they need faster, theyโ€™re going to take the opportunity.ย 

โ€œItโ€™s rare for us to have a week without getting an email from a customer saying this saved our lives, or we had a pen test and this is the only thing that caught our attackers,โ€ said Meer.ย 

It is these success stories that โ€œfuelsโ€ the company, said Meer, and helps drive the companyโ€™s organic sales growth. Thinkst does not have an outbound sales team; instead, the company relies largely on word of mouth, or existing customers who want to buy more of the companyโ€™s honeypots.ย 

Meer said that while Thinkst hasnโ€™t taken any outside funding to date, he does not begrudge the VC industry and values its insights. While conceding that some companies cannot get to where they are without heavy cash injections, he argues that money is โ€œnot the gate that stops you from doing stuff.โ€ Meer said that companies focusing on making their products work and their customers happy is core to good business.ย 

โ€œMy main thing is that you should run the business in a way that you are still attractive for investment or acquisition,โ€ said Meer. โ€œIf you build a good enough business so that you donโ€™t need it, you can always ask for it when you do.โ€

Meer was not shy about his companyโ€™s ambitions. โ€œWe think every company should be running at least five canaries now,โ€ he said. Some companies have a handful of canaries and some into the hundreds or more. โ€œThereโ€™s a bunch of stuff that we could do to make more money; we just donโ€™t think thatโ€™s necessary right now, because what weโ€™re doing is offering a good product at a fair price, and thatโ€™s growing.โ€ย 

โ€œWe are $20 million now, but we donโ€™t think $20 million is our ceiling,โ€ said Meer.

[ad_2]

Source link

RELATED ARTICLES

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Most Popular

Recent Comments