Grit• Feb 23, 2026• 1:03:08Interview

The AI Era of Cybercrime: How Malwarebytes Is Evolving Its Security Stack | Marcin Kleczynski

From Grit

Marcin Kleczynski•Founder and CEO, Malwarebytes

Executive Summary

Malwarebytes funded its growth through profitability, using all three of its major funding rounds ($30M from Highland, $50M from Fidelity, and a PE round from Vector) for secondary transactions to provide liquidity, not for operations.
CEO Marcin Kleczynski identifies his biggest mistake as not separating the consumer and B2B businesses sooner, as a single team struggled to serve two distinct markets.
The company has since been split into Malwarebytes (consumer) and ThreatDown (B2B).
The consumer business is now thriving post-separation, with accelerating growth, approaching $200M in ARR, and surpassing three million paying subscribers.
The company's hiring philosophy discounts impressive LinkedIn pedigrees, finding that candidates who are "underdogs" on paper often outperform.
They've implemented a formal hiring committee to improve consistency, acknowledging a 50% success rate on hires would be considered lucky.

8 quotes

Concerns Raised

The increasing sophistication of AI-powered cyberattacks targeting both businesses and consumers.
The persistent difficulty of hiring effective go-to-market and marketing leadership.
The inherent challenge and low success rate (estimated at 50/50) of making correct hiring decisions.
The difficulty of managing productivity and culture in a hybrid work environment.

Opportunities Identified

Accelerating growth in the consumer business, which is approaching $200M in ARR.
Expansion of the consumer product suite into high-demand areas like identity protection and data privacy.
Increased focus and execution for the newly separated B2B business, ThreatDown.
Leveraging a strong brand built on organic, word-of-mouth acquisition from tech support communities.

Key Themes

Unconventional Capital Strategy

Malwarebytes has a unique funding history, having never raised primary capital for its balance sheet. All major funding rounds were used for secondary transactions to provide liquidity for early investors and employees, a strategy made possible by the company's high profitability from its consumer business.

This demonstrates an alternative, bootstrapped-to-scale growth model that prioritizes profitability and shareholder liquidity over traditional venture-fueled cash burn, offering a case study for founders in profitable niches.

The Strategic Imperative of Business Separation

The CEO candidly admits that trying to serve both consumer and B2B markets with a single management, engineering, and product team was a major strategic failure. The eventual separation into two distinct businesses, Malwarebytes (consumer) and ThreatDown (B2B), unlocked focus and accelerated growth, particularly on the consumer side.

This highlights a critical lesson for scaling companies: distinct customer segments often require dedicated teams and strategies. A one-size-fits-all approach can stifle growth and lead to suboptimal execution for all markets.

Counterintuitive Talent Assessment

The CEO has found that candidates with the most impressive resumes and experience at flashy companies often underperform, while those who appear less strong on paper but have more to prove tend to exceed expectations. This philosophy is rooted in the belief that 'will' can be more important than 'skill,' especially when a role is existentially important to a candidate's career.

This challenges conventional hiring wisdom that relies heavily on pedigree. It suggests that hiring managers should look beyond the resume to assess a candidate's drive, hunger, and cultural fit, potentially uncovering hidden gems and avoiding costly mis-hires.

The Evolving Cybersecurity Landscape

The discussion covers the dual-edged nature of AI, which is being used by cybercriminals for autonomous, sophisticated attacks while also providing new tools for defense. Malwarebytes is responding by expanding its consumer product suite beyond antivirus to include identity protection and personal data removal, addressing a broader range of modern digital threats.

This underscores the rapid evolution of cyber threats and the need for security companies to innovate continuously. The shift from basic malware protection to a holistic digital safety platform reflects changing consumer needs and the growing attack surface created by AI.

Post-Pandemic Workplace Dynamics

The company has seen a significant reduction in its Bay Area headcount, shifting to a hybrid model. The conversation explores the difficulty of mandating a return to the office and the debate over remote work productivity, with one VC partner admitting he handicaps WFH productivity to 50%.

This reflects the ongoing struggle many tech companies face in defining the future of work. It highlights the tension between employee flexibility, leadership presence, and perceived productivity, with no clear-cut answers.

Get started free

Topics

Cybersecurity SaaS Founder Story Bootstrapping Profitability Venture Capital Private Equity Secondary Transactions Corporate Strategy Business Separation Hiring Philosophy Talent Assessment Remote Work Hybrid Culture Artificial Intelligence Go-to-Market Strategy Consumer Tech B2B Software

Processed Apr 6, 2026 yt-dlp + mlx-whisper + Gemini