Fundraising Fox.png)
Halcyon
Unicorn · $1BSan Diego, US · Founded 2021 · 447 employees on LinkedIn · 15 known investors
Find your way into Halcyon
Sign up to see every warm intro you have to Halcyon
- Paths you didn't know you had: your email and LinkedIn already hold routes to the Halcyon team. We find them for you
- 2nd- and 3rd-degree connections: the friend-of-a-friend routes that take hours to manually find through your inbox or LinkedIn
- Answers now, not in days: momentum is everything in a raise. Skip asking around whether someone knows someone
Days of research, done the moment you sign in, with every route ranked by how warm it is.
Halcyon builds a dedicated anti-ransomware platform that operates across the full attack chain — from initial access to data exfiltration and encryption — adding a detection, protection, and recovery layer within an organization's existing security stack. It uses behavioral engines and an encryption-key capture capability to disrupt ransomware and recover data, and offers 24x7x365 detection and recovery services for enterprises.
Also known as Halcyon · Halcyon.ai
Founders & leadership
Halcyon was founded in 2021 by Jon Miller and Ryan Smith.
Board
Investors · 15
How we know: board seat on SEC Form D · research · thesaasnews.com · baincapitalventures.com · Not right? Tell us
How we know: Cisco Investments's portfolio page · research · preqin.com · open dataset · 5k.vc investor directory · Not right? Tell us
How we know: Dell Technologies Capital's portfolio page · Not right? Tell us
How we know: the VCSheet dataset · open dataset · 5k.vc investor directory · Not right? Tell us
How we know: Evolution Equity Partners's portfolio page · the VCSheet dataset · research · thesaasnews.com · Not right? Tell us
How we know: the VCSheet dataset · open dataset · 5k.vc investor directory · Not right? Tell us
How we know: the VCSheet dataset · Not right? Tell us
How we know: Protagonist's portfolio page · the VCSheet dataset · Not right? Tell us
How we know: Syn Ventures Seed Management Llc's portfolio page · the VCSheet dataset · research · thesaasnews.com · open dataset · 5k.vc investor directory · Not right? Tell us
How we know: Washington Harbour Partners's portfolio page · Not right? Tell us
How we know: the VCSheet dataset · research · thesaasnews.com · Not right? Tell us
Also in the syndicate · 2
Funding
SEC filings, press & company announcements$228.5M disclosed across 4 of 7 rounds · 2023–2026
- $21MSeries AMar 2026Source ↗
▶$125.3MraisedJan 2025 · 16 investors · Other TechnologyRule 506(b)
- Enrique SalemDirector
- Ryan SmithDirector
- Richard SeewaldDirector
- Jay LeekDirector
- Jon W. MillerExecutive Officer, Director
- Nicholas WarnerDirector
- Offering amount
- $127.8M
- Amount sold
- $125.3M
- First sale
- Oct 2024
- Incorporated
- Corporation, Delaware, 2021
- Federal exemptions
- 06b
▶$40MraisedDec 2023 · 2 investors · Other TechnologyRule 506(b)
- Marvin TienDirector
- Jon W. MillerExecutive Officer, Director
- Jay LeekDirector
- Enrique SalemDirector
- Ryan SmithDirector
- Offering amount
- $40M
- Amount sold
- $40M
- First sale
- Dec 2023
- Incorporated
- Corporation, Delaware, 2021
- Federal exemptions
- 06b
▶$42.3MraisedMay 2023 · 10 investors · Other TechnologyRule 506(b)
- Jay LeekDirector
- Marvin TienDirector
- Jon W. MillerExecutive Officer, Director
- Ryan SmithDirector
- Offering amount
- $43.8M
- Amount sold
- $42.3M
- First sale
- Apr 2023
- Incorporated
- Corporation, Delaware, 2021
- Federal exemptions
- 06b
Source: SEC EDGAR Form D. Amounts as filed; amended filings shown once at their latest values.
Valuation · disclosed
Disclosed eventsSource: SEC prospectus filings, and round valuations the company or its investors disclosed — follow each entry's link for the claim.
Company profile
researched Aug 2026Halcyon develops an anti-ransomware and cyber resilience platform positioned as a specialized layer distinct from general-purpose endpoint and threat-detection tooling. The platform is described as covering every stage of a ransomware attack, from pre-execution activity through data exfiltration to encryption, with the stated objectives of eliminating ransom payments, maintaining operational continuity and preventing data extortion.
The offering includes a File Resilience capability aimed at preventing encryption before it begins, native macOS support and integrations with Microsoft products. Halcyon bundles a managed 24/7 service it calls the Ransomware Operations Center (ROC), described as a ransomware-focused SOC included at no additional cost, together with recovery services and a services-based ransomware warranty. The company also runs the Halcyon Ransomware Research Center, a community-oriented research effort that publishes ransomware intelligence including a Threat Actor Index covering ransomware groups, their tactics and their targets, and produces survey and market research such as a 2026 security leadership survey on ransomware defense.
Business model
Halcyon sells a security platform to organizations, packaging software-based ransomware detection and disruption with an included managed 24/7 ransomware operations service, recovery assistance and a services-based warranty.
Traction
A 2026 UserEvidence survey of Halcyon customers reported that 68% said Halcyon stopped a ransomware threat that would have significantly impacted their business, 99% were confident in their ransomware resiliency after deployment versus 7% before, and 100% were less concerned about ransomware as a business risk. The company states it is used by companies worldwide.
Latest developments
Halcyon announced the launch of File Resilience, aimed at preventing ransomware encryption before it starts, together with native macOS support and deeper Microsoft integrations. It also published a 2026 security leadership survey on the ransomware defense gap in the AI era, and an Omdia technical validation of its platform was issued in February 2026.
▸Full profile — market position, technology, go-to-market
Market position
Halcyon presents itself as a dedicated anti-ransomware specialist adjacent to, and layered on top of, existing endpoint detection and response deployments. An Omdia technical validation of the Halcyon Anti-Ransomware Platform published in February 2026 argued that EDR solutions were not designed for ransomware-specific behaviors.
Halcyon positions itself as purpose-built for ransomware rather than broad-spectrum threat detection, arguing that EDR tools are not tuned to ransomware-specific behaviors and are bypassed by operators using valid credentials and legitimate administrative tools. Its stated differentiators are end-to-end coverage of the ransomware attack chain, an included managed Ransomware Operations Center, and a ransomware warranty covering recovery and business continuity.
Technology
The platform focuses exclusively on ransomware behaviors across the attack chain, from pre-execution through exfiltration and encryption, and includes a File Resilience capability designed to block encryption before it starts. It supports macOS natively and integrates with Microsoft environments.
Go-to-market
Direct enterprise sales driven by demo requests and product tours on the company website, supported by research and thought-leadership content from the Halcyon Ransomware Research Center, customer survey evidence and third-party analyst validation.
Enterprises and other organizations concerned with ransomware-driven business disruption, including security leadership teams that already operate EDR tooling.
Compiled by commissioned research from 6 cited public sources — announcements, filings, and press listed under research sources below.
Key figures
latest reportedCompany-reported or press-reported figures, each dated to when it was claimed — not independently audited.
Founder mafia
2 people who came through Halcyon went on to found or lead other companies.
Related companies · 7
Companies working in the same space as Halcyon.
Timeline · 4
launches, deals, and filingsHalcyon announced File Resilience, a capability intended to prevent ransomware encryption before it starts, alongside native macOS support and expanded Microsoft integrations.
Halcyon closed a $100 million Series C led by Evolution Equity Partners with participation from Bain Capital Ventures, SYN Ventures, Harmony Group, Corner Capital Management, Dropbox Ventures, ServiceNow Ventures and existing investors, reaching a $1 billion valuation and $190 million in total funding. Proceeds were earmarked for growth of its ransomware prevention and recovery platform.
$100M source ↗
Evolution Equity Partners Managing Partner Richard Seewald joined Halcyon's board of directors in connection with the Series C round.
Halcyon Tech raised an undisclosed amount of venture funding from new investor Cisco Investments.
Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.
Legal entities · 1
corporate structure▸Research sources · 6
primary sources listed
- Halcyonhalcyon.ai · web
- Halcyon Closes $100 Million in Series C | The SaaS Newsthesaasnews.com · web
6 public sources were cited for this profile; the first-party ones are listed here.
Frequently asked questions
- What does Halcyon do?
- Halcyon is a cybersecurity vendor whose platform is dedicated to detecting, disrupting and recovering from ransomware attacks.
- Who founded Halcyon?
- Halcyon was founded by Jon Miller, Ryan Smith in 2021.
- Who are Halcyon's investors?
- Halcyon's investors include Bain Capital Ventures, Cisco Investments, Dell Technologies Capital, Dnx Ventures, Evolution Equity Partners, Gula Tech Adventures, Harmony Partners, Next47 and 5 more.
- How much funding has Halcyon raised?
- Halcyon has disclosed $228.5M raised across 4 of its 7 known rounds.
- Where is Halcyon headquartered?
- Halcyon is headquartered in San Diego, US.