ThreatCanary exists because attackers do not work from disconnected scanner queues. They follow relationships across exposed assets, APIs, identities and trust boundaries. We built one governed system that can do the same—and prove every conclusion with evidence.
ThreatCanary was shaped by three disciplines that rarely meet in one product team: offensive research, high-assurance security engineering and enterprise technology delivery.
ThreatCanary combines original offensive research, security leadership in high-consequence environments and the experience required to deliver technology at enterprise scale.
Matt is a hands-on security leader who has built offensive security, threat intelligence, application-security and DevSecOps functions across NSW Government and Big Four consulting. Before ThreatCanary, he founded and exited a DevSecOps consultancy, led EY’s Oceania DevSecOps practice and served as an elected technical lead in CNCF TAG Security. He turns attacker reality into security systems that engineers can operate and executives can defend.
Andrew is a security researcher and engineering leader with nearly two decades of experience turning attacker techniques into useful tools. He leads ThreatCanary’s offensive methodology, research automation and technical product direction.
Marco is ThreatCanary’s Chairman and an enterprise technology founder whose work spans networking, cyber security, managed services, IoT, digital twins and agentic AI. He brings the governance, customer, delivery and commercialisation perspective required to turn ambitious security technology into an enterprise platform.
