About Surface Security

Built by practitioners who've seen the threat firsthand

Surface Security was founded by a team of offensive security operators, cyber warfare officers, and SOC practitioners who spent years watching browser-based attacks slip past every layer of defense. They built the platform they wished they had — one that sees what happens after the click.

Our founders' work fighting phishing at scale has been featured in

The AtlanticFinancial TimesWIREDPeople
Our Principles

What we stand for

Every decision we make is grounded in three principles that reflect who we are and how we build.

Operator-Built

Built by people who have operated in SOCs, run red teams, and defended real networks across DoD and private-sector environments. This is not a product born in a boardroom.

Privacy by Architecture

On-prem first. Your browsing telemetry never leaves your infrastructure. No cloud dependency, no vendor lock-in, no third-party data exposure.

Mission-Driven

Founded to close the gap between email security and endpoint detection. Every feature exists because it stops a real threat that our team has encountered firsthand.

Leadership

The team behind Surface Security

Three serial founders with deep roots in Department of Defense cyber operations and Enterprise Security, each having previously built and led cybersecurity companies before joining forces to tackle browser security.

Grant

Co-Founder

Grant previously founded Phantom Security Group, where he built enterprise red teaming and evasion capabilities for Fortune-scale organizations across highly regulated industries. A recognized cyber operator with experience spanning the Department of Defense and the private sector — including serving on the red team at The Walt Disney Company — Grant was named Army CENT Best Cyber Warrior and has spoken at DEF CON and AvengerCon. He holds numerous advanced certifications including OSEP and GCIH, and his work disrupting phishing and scam operations at scale has been featured in multiple national publications.

Founded Phantom Security GroupRed TeamDoDDEF CON

Thomas

Co-Founder

Thomas previously co-founded CodeNav, building developer security tooling from the ground up. A penetration tester and security engineer with experience across Department of Defense, government, and private-sector environments, he has operated as a SOC analyst, adversary simulation specialist, and secure application developer. Thomas holds advanced offensive security certifications including OSEP and OSCP, applying hands-on operational experience to emulating sophisticated threats and strengthening organizational defenses.

Co-Founded CodeNavPentestingDoDOSEPOSCP

Connor

Co-Founder

Connor previously founded CodeNav, bringing cybersecurity products to market with a focus on data science and AI/ML-enabled analysis. A cybersecurity practitioner with experience supporting Department of Defense missions and delivering security solutions in the private sector, Connor also serves as a Cyber Warfare Officer in the Virginia Army National Guard. He has led teams to top placements in national cybersecurity competitions, bringing a mission-driven approach to identifying and countering real-world threats.

Founded CodeNavAI/MLDoDCyber Warfare

Ready to see what happens after the click?

Talk to our team about how Surface Security gives your SOC complete visibility into browser-based threats.