Is Halcyon profitable in 2026?

Halcyon has not disclosed profitability or audited revenue. It last raised $100M in a Series C round on 2024-11-25, valuing it at $1B, and no new funding round has been announced since, as of July 2026.

Who owns Halcyon, the anti-ransomware company?

Halcyon is privately held and venture-backed. Its Series C, closed 2024-11-25, was led by Evolution Equity Partners with Bain Capital Ventures, SYN Ventures and others, bringing total funding to $190M at a $1B valuation.

Who is Halcyon's biggest competitor?

Halcyon competes with EDR/XDR incumbents CrowdStrike, Microsoft Defender and Palo Alto Networks, plus backup vendor Rubrik, which shipped a matching $10M ransomware recovery warranty by 2026-05-29, directly challenging Halcyon's differentiator.

Could AI replace Halcyon's anti-ransomware product?

No frontier AI lab targets ransomware defense as of 2026. Halcyon's patented key-capture technique is engineering-specific, not an LLM function, and its July 2026 report shows AI is fueling more attacks (1,988 in Q2 2026), increasing demand for its defenses.

Has Halcyon raised new funding since its Series C?

No new funding round has been publicly disclosed since Halcyon's $100M Series C closed on 2024-11-25 at a $1B valuation, leaving a roughly 20-month funding silence as of July 2026.

Who is Halcyon's current CEO?

As of 2026-07-21, Halcyon's own company page lists Aaron Mick as COO and Interim CEO, with co-founder Jon Miller repositioned to Chief Scientist. No press release has confirmed this transition.

United States · United States

Halcyon

Halcyon builds anti-ransomware software that captures encryption keys and pays a recovery warranty.

Losing its protection

Assessed 29 July 2026 · Evidence as of 29 July 2026

The structural protection is eroding.

On the recordSince 29 July 2026 · Checkable from Q4 2026 · Every call on the record Checkpoint: Series D announcement or confirmation of permanent CEO after Jon Miller's move to Chief Scientist

The call

Halcyon has a real product and paying customers, but its core warranty idea is now being copied by bigger backup and EDR vendors with more distribution.

Halcyon built software that stops ransomware by catching the moment attackers steal encryption keys, before damage happens. It is used by over 300 large companies and generates around $79.5 million per year. The main problem is that CrowdStrike, Microsoft, Palo Alto Networks, and backup companies like Rubrik are all building the same kind of protection into their own products, which means Halcyon's special advantage could fade as these giants add the same features. The company's patents and customer data slow down copycats, but do not stop them completely. A leadership change (the founder moved to a different role and handed over to an interim CEO) combined with silence about new funding for 20 months raises questions about whether Halcyon can invest fast enough to stay ahead of these competitors.

Why

AI pressure: None apparent. AI-driven ransomware makes attacks faster and cheaper to launch, which grows demand for Halcyon's product rather than replacing it. Could AI do the core job? Only partly.

Bigger players: Rubrik. Rubrik now sells a $10M ransomware recovery warranty, copying Halcyon's key differentiator inside its own backup platform. Could a giant copy it? Yes, easily.

What protects it. Patented key-capture tech, years of ransomware telemetry, and a fresh Sophos intelligence-sharing deal make quick copying harder for rivals.

What would change this call

Microsoft Defender or CrowdStrike ship native ransomware key-capture or a matching recovery warranty within 12-18 months. Would show incumbents can absorb Halcyon's core feature and erode its independent-vendor case.
Halcyon announces a Series D or confirms Aaron Mick's CEO status with a press release. Would clarify whether the unannounced leadership change and funding silence reflect stability or strain.
Major cyber-insurance carriers publicly require or credit Halcyon specifically for underwriting discounts. Would show Halcyon becoming a standard requirement rather than an optional add-on.

Key numbers

$100M Series C at $1B valuation (2024-11-25)
$190M raised total across Series A-C (2024-11-25)
~212 employees at time of Series C (2024-11)

Named risks

Unannounced CEO transition to Interim CEO by 2026-07-21 with no press release raises governance uncertainty. Severity: high
No new funding disclosed since Nov 2024 Series C, a roughly 20-month silence as of July 2026. Severity: medium
Core differentiators, key-capture and ransomware warranty, are being matched by incumbents like Rubrik. Severity: high
No structural barrier prevents CrowdStrike or Microsoft from absorbing Halcyon's feature set into existing EDR/XDR stacks. Severity: medium
Reported revenue and headcount figures rely on unconfirmed third-party estimates, not company disclosure. Severity: low

Rivals, as read in July 2026

Rival	Direction	Evidence
Rubrik	gaining on	Shipped competing $10M ransomware recovery warranty by 2026-05-29
CrowdStrike	contesting	EDR incumbent Halcyon layers onto; no structural barrier stops native feature bundling
Microsoft Defender	contesting	Platform-scale EDR vendor could bundle ransomware key-capture natively
Palo Alto Networks	contesting	Large XDR platform positioned to absorb ransomware-specific detection features
Cohesity	contesting	Backup/recovery incumbent competing in ransomware resilience market as of 2026-05-29

Questions people ask

Is Halcyon profitable in 2026?: Halcyon has not disclosed profitability or audited revenue. It last raised $100M in a Series C round on 2024-11-25, valuing it at $1B, and no new funding round has been announced since, as of July 2026.
Who owns Halcyon, the anti-ransomware company?: Halcyon is privately held and venture-backed. Its Series C, closed 2024-11-25, was led by Evolution Equity Partners with Bain Capital Ventures, SYN Ventures and others, bringing total funding to $190M at a $1B valuation.
Who is Halcyon's biggest competitor?: Halcyon competes with EDR/XDR incumbents CrowdStrike, Microsoft Defender and Palo Alto Networks, plus backup vendor Rubrik, which shipped a matching $10M ransomware recovery warranty by 2026-05-29, directly challenging Halcyon's differentiator.
Could AI replace Halcyon's anti-ransomware product?: No frontier AI lab targets ransomware defense as of 2026. Halcyon's patented key-capture technique is engineering-specific, not an LLM function, and its July 2026 report shows AI is fueling more attacks (1,988 in Q2 2026), increasing demand for its defenses.
Has Halcyon raised new funding since its Series C?: No new funding round has been publicly disclosed since Halcyon's $100M Series C closed on 2024-11-25 at a $1B valuation, leaving a roughly 20-month funding silence as of July 2026.
Who is Halcyon's current CEO?: As of 2026-07-21, Halcyon's own company page lists Aaron Mick as COO and Interim CEO, with co-founder Jon Miller repositioned to Chief Scientist. No press release has confirmed this transition.

Timeline

2026-07-27Published Q2 2026 Ransomware Evolution Report: 1,988 attacks by 89 groups in 101 countries
2026-07-21Company page shows Aaron Mick as Interim CEO, Jon Miller moved to Chief Scientist, no press release
2026-05-29Rubrik reported shipping competing $10M ransomware recovery warranty
2026-04-14Opened new ~10,000 sq ft Austin engineering and product office
2026-03-18Published survey: 99% EDR confidence vs 25% actual trust among security leaders
2026-02Announced OEM PC partnership; Scott Stout appointed President
2025-08-03Announced threat-intelligence sharing partnership with Sophos
2025-05Added Kernel Guard protection against BYOVD attacks
2024-11-25Closed $100M Series C led by Evolution Equity Partners at $1B valuation
2023-12Closed $40M Series B led by Bain Capital Ventures

Revision history

29 July 2026

First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.

In the same band

American Airlines Group Wayfair Safe Superintelligence Inc.