Create a free account, or log in

How Malwarebytes founder Marcin Kleczynski turned an infected family computer into a multimillion-dollar cyber security company

Malwarebytes co-founder Marcin Kleczynski was inspired to found the multimillion-dollar cyber security company after fixing his family’s computer.
Dominic Powell
Dominic Powell
Malwarebytes
Malwarebytes founder Marcin Kleczynski. Source: Supplied.

Despite having millions of customers around the world, more than 10 years of operations to his name, and nearly $US80 million ($113 million) in venture capital, Marcin Kleczynskiโ€™s mother still thinks his cyber security company Malwarebytes is just a โ€œschool projectโ€.

Thatโ€™s probably because Polish-born Kleczynski was only 14 when he first began the company what would eventually turn into US-based Malwarebytes, which is celebrating its 10th anniversary this year.

Speaking to SmartCompany while visiting Australia, Kleczynski says the seeds of Malwarebytes were first planted 14 years ago, when the young founder found himself battling a malware infection on his family computer, with no help from his anti-virus software.

โ€œI went online and found this security forum, where all these people, these volunteers, were helping people solve their virus problems. I still consider them superheroes to this day, and it still blows my mind why a community like that even existed in the first place,โ€ he says.

โ€œThey spotted the problem in a few hours, and then a woman from Belgium started stepping me through all the instructions on how to get the malware off manually. My anti-virus program Symantec at the time would neither protect from, nor remove, any malware on the machine.โ€

After three days of screwing around, the familyโ€™s computer was fixed, but the founder had caught the itch for solving problems and decided to stick around and help out on the forums.

Over the next four years, Malwarebytes slowly evolved into a proper company, with Kleczynski teaming up with forum regular Bruce Harrison (now vice president of research at the company) to build the startupโ€™s first set of anti-virus tools. These setup days also gave the company its name, with the founder being gifted the dormant โ€˜malwarebytes.bizโ€™ domain name.

โ€œI actually used to hate the name, but it was gifted to me,โ€ Kleczynski says.

The malwarebytes.biz webpage from 2005, back when the company was called AboutBuster. Source: Wayback Machine.

Harrison helped Kleczynski build the software into something easier and more familiar to use, but Kleczynski laughs that he and Harrison worked together for almost a year before actually meeting face to face.

โ€œI was sixteen and building an antivirus software, and for Harrison it didnโ€™t go down too well telling his wife he was working with a 16-year-old kid online,โ€ the founder laughs.

โ€œWe actually made our first million before we met in real life.โ€

โ€œNever in my wildest dreams did I think it would get this big”

Two years later 2008 rolled around, and the founders officially launched Malwarebytes. But Kleczynski still wasnโ€™t running the company out of a proper office, withย an apartment at his universityโ€™s campus serving as the companyโ€™s โ€œheadquartersโ€.

โ€œI remember in my freshman year, I was working online to disassemble a virus and the school network actually kicks me off, and says I need to install one of these three anti-virus programs,โ€ Kleczynski recalls.

โ€œSo I call the helpdesk and a kid no older than me shows up and proceeds to download and run Malwarebytes right infront of me.

โ€œIt was there and then that I first thought that the company had a chance.โ€

From then on, Malwarebytes was off to the races, though the company didnโ€™t lock in any funding until a $US30 million round in 2014. Rather, it grew organically through almost entirely word-of-mouth marketing.

Kleczynski identified that his product was highly popular with a cult-like following from individuals who used it in their homes to protect their PCs and banked on those clients โ€œbringing us to workโ€ by implementing the software at their businesses or places of employment. The gamble paid off, with around half of Malwarebytesโ€™ revenue today coming from enterprise customers.

That revenue is estimated to be upwards of $US150 million, and the company now has over 700 employees, but neither Kleczynski nor his family can really believe how successful the company has been.

โ€œNever in my wildest dreams did I think it would get this big. I even stayed at uni for my whole tenure mostly as a fallback plan,โ€ he says.

โ€œTo this day my mother still thinks itโ€™s a school project.

โ€œBut all jokes aside, Iโ€™m incredibly fortunate to be leading such a talented group of people. Theyโ€™ve helped me get off my computer and opened up my eyes to what we can achieve in the world of remediation.โ€

And while finding those talented people is a hard task for any startup, Kleczynski says he’s tapped into a secret pocket of tech geniuses: the โ€˜superheroesโ€™ from his old security forum.

โ€œThat same community that helped us out initially we tapped as a talent market. We told them: โ€˜You know what youโ€™re already doing for free? Come do it for us and weโ€™ll pay youโ€™,โ€ he laughs.

Companies must strive to be experts in one area

Looking forward at the future of the cyber security industry, Kleczynski says thereโ€™s plenty of room for innovation, mainly due to the relentless pace at which cyber criminals themselves innovate.

One emerging marketย Kleczynski can see is mobile phone security; the entrepreneur is โ€œshockedโ€ at the amount of malware found on third-party app stores.

โ€œTheyโ€™re cesspools of malicious data,โ€ he says.

However,ย Kleczynski has a warning for any aspiring cybersec companies, as heโ€™s seen many bound into the space with whizz-bang solutions, only to fall over when trying to spread themselves across too many different areas.

โ€œThereโ€™s typically a lifecycle of a company here, where theyโ€™re very good at doing one thing, and then they begin to expand and start to stop being good at what put them on the map in the first place,โ€ he says.

โ€œI see this with so many companies. You need to be like Apple: very good at one thing.

โ€œThough customers want one company who can provide it all, thatโ€™s not the case. Just like how Proofpoint is the best with email security, Malwarebytes is the best with endpoint security. But it all has to be about security being simple.โ€

NOW READ:ย Nine Australian cyber security startups raising money and kicking goals

NOW READ:ย From millions to malware: Cyber attacks in Australia by the numbers