Mokn

MokN is a cybersecurity company that protects organisations against credential theft and identity-based attacks. Its approach, which it markets as "Phish-Back" and positions within a category it calls Active Identity Recovery, aims to recover compromised credentials proactively rather than relying on passive monitoring such as dark web surveillance. The company says it protects more than one million users across large enterprises and mid-sized organisations, including Fortune Global 500 companies, in sectors such as finance, retail and healthcare.

The company's first product, Baits, deploys highly realistic decoy access points — replicas of corporate VPN portals and webmail login interfaces — that mirror a customer's real environment. When an attacker attempts to authenticate with stolen credentials against a decoy, the credentials are surrendered to the system, allowing security teams to identify affected accounts and trigger automated recovery workflows before the credentials are exploited or traded on the dark web. A second offering, Lantern, is presented on the company's site alongside Baits and relates to detecting and fixing exposures on an organisation's external perimeter. Following its Series A, MokN said it plans to build a multi-product identity theft protection platform, with upcoming products addressing customer account security, stolen browser cookies and compromised sessions.

The company's name references the Moken people, described on its site as a tribe whose children can see unusually well underwater, a metaphor for visibility in obscured online environments; the ocean theme also informs its visual identity.

Founding story

The founders were SOC (security operations centre) practitioners in large organisations. After managing a major cyber crisis in which credential theft defences depended on end users making correct decisions despite the tooling available, they concluded a control-oriented, attacker's-perspective solution was missing from the market and built the product they wished they had had. CEO Gautier Bugeon has described the company as born out of that cyber crisis experienced in a previous role.

Business model

B2B subscription software sold to enterprise and mid-market organisations, described by third-party data providers as SaaS. Customers deploy MokN's decoy access points and recovery workflows alongside their existing security operations tooling.

Recurring subscription revenue from enterprise customers; the company reported surpassing €1 million in annual recurring revenue by October 2025.

Traction

More than 20 enterprise clients and over 500,000 users protected with more than €1 million ARR as of October 2025, growing to more than one million users protected across large enterprises and mid-sized businesses, including Fortune Global 500 companies, by May 2026. Headcount grew from 16 to 20 employees in the quarter to June 2026. Total disclosed funding is reported at roughly $18 million.

Latest developments

In May 2026 MokN closed a $15 million Series A led by GV with participation from Datadog, Moonfire, OVNI Capital and angels, earmarked for increased R&D, international expansion into the US and UK, and the build-out of a multi-product active identity protection platform covering customer accounts, stolen browser cookies and compromised sessions.