Draft:Byron Labs
Where to get help
How to improve a draft
You can also browse Wikipedia:Featured articles and Wikipedia:Good articles to find examples of Wikipedia's best writing on topics similar to your proposed article. Improving your odds of a speedy review To improve your odds of a faster review, tag your draft with relevant WikiProject tags using the button below. This will let reviewers know a new draft has been submitted in their area of interest. For instance, if you wrote about a female astronomer, you would want to add the Biography, Astronomy, and Women scientists tags. Editor resources
|  |
Submission declined on 6 July 2026 by Theroadislong (talk). This draft's references do not show that the subject meets Wikipedia's criteria for inclusion for organizations and companies. The draft requires multiple published secondary sources that:
Declined by Theroadislong 2 months ago.
| |
Submission declined on 2 July 2026 by Gurkubondinn (talk). This draft appears to contain text generated by a large language model (such as ChatGPT). You cannot use LLMs to generate, draft, or rewrite article content.
Please delete the portions which were LLM-generated, and summarize in your own words a range of independent, reliable, published sources that discuss the subject. If you have used an LLM but you believe that your use is covered by one of the two exceptions (basic copyediting and translation between two languages in which you are fully fluent), please provide a transcript of the prompt(s) you used while writing your draft (see the how-to guide). Reviewers can make mistakes. If you have not received any LLM assistance, you may seek a second opinion at the AfC Help Desk. See the advice page on large language models for more information.This draft's references do not show that the subject meets Wikipedia's criteria for inclusion for organizations and companies. The draft requires multiple published secondary sources that:
Declined by Gurkubondinn 3 months ago.
| |
Comment: Needs independent, reliable, substantial analysis -- not just funding notices. Of the 14 sources in current article, 1, 3-6, 10-14 are all from the company and/or its founders. 7 and 8 simply announce a project and 9 announces funding. Source 2 has only one line about Byron and does not confirm the claim in the article. You need things like comparative analysis or deep discussion of the business. M kuhner (talk) 03:39, 12 August 2026 (UTC)
- Comment: In accordance with Wikipedia's Conflict of interest guideline, I disclose that I have a conflict of interest regarding the subject of this article. Nathaniel.Lanc (talk) 11:53, 2 July 2026 (UTC)
| Type | Private |
|---|---|
| Industry | Cybersecurity, threat intelligence |
| Founded | May 2022 |
| Founders | Carlos Cilleruelo Rodríguez Javier Junquera Sánchez |
| Headquarters | , |
Area served | Worldwide |
| Products | Vysion CTI Platform, Vysion API, Live Threat Feeds |
| Website | byronlabs |
Byron Labs, S.L. is a Spanish cybersecurity company founded in 2022 and headquartered in Madrid, Spain.[1] The company specialises in the collection, indexing, and processing of cyber threat intelligence (CTI) from the darknet, cybercriminal forums, and closed instant messaging networks.
The company originated as an academic spin-off from researchers at the University of Alcalá, moving proprietary data collection methods and darknet analysis from academic studies to a commercial enterprise threat intelligence platform called Vysion. Its products and services are primarily used by threat intelligence teams, security operations centres (SOCs), law enforcement agencies, and cyberinsurance firms.[2]
History
[edit]Byron Labs was founded in May 2022 by computer science researchers Carlos Cilleruelo Rodríguez and Javier Junquera Sánchez.[3] The entity was established to commercialize preliminary research breakthroughs in continuous authentication frameworks and automated darknet network ecosystem analyses developed within the University of Alcalá's Department of Computer Science, where its founders completed their doctoral work.[4][5] Early iterations of the company's threat matrices were presented across the Spanish cybersecurity circuit, notably at the IntelCon Cyber Intelligence Congress in late 2022.[6]
In December 2023, the Spanish National Cybersecurity Institute (INCIBE), under its Innovative Public Procurement initiative funded by the European Union's Next Generation funds, integrated Byron Labs into a development consortium.[7] The €5.19 million euro initiative, led by tech multinational Inetum alongside strategic partners including Byron Labs, Tecnalia, and the University of Salamanca, tasked the firm with architecting continuous authentication frameworks and behavioral biometric layers for decentralized digital identity wallets.[7][8]
The company expanded its footprint into European defense and security research vectors, securing funding through the European Commission's Horizon Europe framework under the ENSEMBLE cybercrime investigation infrastructure project.[9] The firm has regularly demonstrated its technical frameworks at regional defense and summit tracks, including a technical presentation track at INCIBE's 19ENISE summit in October 2025.[10] The founders are also utilized as national commentators on individual digital privacy and algorithm security, with co-founder Carlos Cilleruelo featured by El Diario in July 2026 detailing corporate candidate data harvesting and historical digital footprints.[11]
Technology and Products
[edit]Vysion CTI Platform
[edit]The core product developed by Byron Labs is Vysion, an automated Cyber Threat Intelligence (CTI) software platform that functions as a collection and indexation engine for illicit deep web and darknet sources. The software monitors hidden services, cybercriminal forums, and closed communication channels on platforms like Telegram and Discord to aggregate asset exposures, credential leaks, and active ransomware activities in real time.[12]
Vysion API
[edit]For security operations integration, the company maintains a dedicated application programming interface (API). This framework allows external developers and security teams to programmatically query data structured across four vectors: document intelligence from web scrapers, corporate credential leak tracking, real-time ransomware analytics, and structured message logs retrieved from instant messaging networks.[13]
Integrations
[edit]Vysion features built-in pipeline integrations for mainstream cybersecurity data sharing environments:
- Maltego Hub Integration: A suite of visual transforms that allows security analysts to map correlations between data leaks, ransom distributions, and cryptocurrency transaction paths.[12]
- MISP Integrations: An enrichment module designed to automatically supply local indicator-of-compromise (IOC) datasets with live external dark web context, supplemented by automated daily ransomware threat intelligence feeds.[13]
Open Source Contributions
[edit]Byron Labs maintains public open-source software utilities on GitHub. Notable repositories include Restalker, an automated indicator of compromise (IOC) and entity extraction tool, and Androbeat, a Kotlin-based monitoring agent optimized for system log collection and Elasticsearch integrations.[14]
See also
[edit]References
[edit]- ↑ "About Us". Byron Labs. Retrieved 2026-07-06.
- ↑ ENACT Flash Report #12: Europol Industry & Research Days (PDF) (Report). ENACT EU / Europol. 2026-02-24. p. 2. Retrieved 2026-07-06.
- ↑ Cilleruelo Rodríguez, Carlos (August 2022). "Darknets and Ransomware: An analysis of victims and sectors affected in 2021" (PDF). Anti-FinTer Project. Byron Labs / Universidad de Alcalá. Retrieved 2026-07-06.
- ↑ Cilleruelo, Carlos (2020). "Interconnection Between Darknets". IEEE Internet Computing. 25 (3): 61–70. arXiv:2012.05003. doi:10.1109/MIC.2020.3037723.
- ↑ de-Marcos, Luis; Domínguez-Díaz, Adrián; Cilleruelo, Carlos; Junquera-Sánchez, Javier (2026). "Tor Darkmarket Ecosystem Network Analysis". Universidad de Alcalá Portal Científico. doi:10.5281/ZENODO.19730565. Retrieved 2026-07-02.
- ↑ "Carlos Cilleruelo: Un análisis detallado de ransomware y darknets". IntelCon 2022 (in Spanish). Comunidad GINSEG. 2022. Retrieved 2026-07-06.
- 1 2 Chasco Aristimuño, Daniel (2023-12-14). "INCIBE impulsa el desarrollo de una cartera digital de gestión de credenciales de identidad". Computing España (in Spanish). Retrieved 2026-07-06.
- ↑ "Inetum España, S.A. - Proyectos de Compra Pública Innovadora (CPP001/22)". INCIBE (in Spanish). Instituto Nacional de Ciberseguridad. Retrieved 2026-07-06.
- ↑ "ENSEMBLE Project CORDIS". CORDIS. European Commission. Retrieved 2026-07-02.
- ↑ "19ENISE - Programa Oficial: Speakers' Corner". INCIBE (in Spanish). 2025-10-14. Retrieved 2026-07-06.
- ↑ "¿Puede la huella digital afectar a nuestro futuro laboral?: cómo lo que compartimos en internet construye nuestra identidad". El Diario (in Spanish). 2026-07-06. Retrieved 2026-07-06.
- 1 2 "Vysion Transforms for Maltego". Maltego Transform Hub. Retrieved 2026-07-02.
- 1 2 "Vysion Developer Documentation Overview". Vysion Developer Documentation. Byron Labs. Retrieved 2026-07-02.
- ↑ "Byron Labs Open Source Repositories". GitHub. Retrieved 2026-07-02.
- provide significant coverage: discuss the subject in detail, excluding routine coverage like product launches, staff appointments, or financial reports and listings in databases or listicles;
- are reliable: from reputable outlets with editorial oversight;
- are independent: not connected to the subject, such as press releases, the subject's own website, or sponsored content.
Please add references that meet all three of these criteria. If none exist, the subject is not yet suitable for Wikipedia.