Draft:Expel
Submission declined on 11 September 2026 by RangersRus (talk).
Where to get help
How to improve a draft
You can also browse Wikipedia:Featured articles and Wikipedia:Good articles to find examples of Wikipedia's best writing on topics similar to your proposed article. Improving your odds of a speedy review To improve your odds of a faster review, tag your draft with relevant WikiProject tags using the button below. This will let reviewers know a new draft has been submitted in their area of interest. For instance, if you wrote about a female astronomer, you would want to add the Biography, Astronomy, and Women scientists tags. Editor resources
|  |
Submission declined on 15 April 2026 by ThatTrainGuy1945 (talk). This draft's references do not show that the subject meets Wikipedia's criteria for inclusion for organizations and companies. The draft requires multiple published secondary sources that:
Declined by ThatTrainGuy1945 5 months ago.
| |
Submission declined on 5 April 2026 by TarnishedPath (talk). This draft's references do not show that the subject meets Wikipedia's criteria for inclusion for organizations and companies. The draft requires multiple published secondary sources that:
Declined by TarnishedPath 6 months ago.
| |
Comment: Please convert all the citations into proper ones. Also, most coverage seems routine here. Can you find more that isn't? 🚂ThatTrainGuy1945 Peep peep! 19:28, 15 April 2026 (UTC)
- Comment: In accordance with the Wikimedia Foundation's Terms of Use, I disclose that I have been paid by my employer for my contributions to this article. Arodger00 (talk) 16:24, 3 April 2026 (UTC)
Expel is a cybersecurity company headquartered in Herndon, Virginia.[1]
History
[edit]Expel was founded in 2016 by Dave Merkel, Yanek Korff, and Justin Bajko. The founders previously held leadership positions at cybersecurity company Mandiant, as well as FireEye following its acquisition of Mandiant.[2][3]
Expel was listed as a Leader in The Forrester Wave: Managed Detection and Response Services, Q1 2025.[4]
Research and threat intelligence
[edit]In April 2026, Expel threat intelligence research Marcus Hutchins uncovered a hacking group linked to North Korea, which Expel named HexagonalRodent, that used commercial AI tools including ChatGPT, Cursor, and Anima to write malware and construct fraudulent recruiting websites as part of a campaign that stole an estimated $12 million from 2,000+ cryptocurrency and Web3 developers over three months.[5]
The company's threat intelligence team separately attributed an April 2026 security breach at certificate authority DigiCert to a subgroup of the Chinese threat group GoldenEyeDog, dubbed CylindricalCanine.[6] Expel's research on North Korean cyber attack tactics has also informed independent reporting elsewhere, including a feature by The Record on the ransomware group "The Gentlemen"[7] and an investigation by journalist Craig Silverman into North Korean hiring scams.[8]
Public commentary
[edit]Expel executives and threat analysts are frequently quoted in security trade and business press on cyber policy and industry trends. Chief executive Dave Merkel commented on the White House's "Golden Eagle" AI cybersecurity initiative in Bloomberg Law.[9] Chief Strategy Officer Justin Bajko discussed CISO burnout tied to AI governance responsibilities in Dark Reading.[10] Director of threat operations James Shank discussed the cybersecurity implications of Claude Mythos and exploit development timelines for IT Brew.[11]
Funding
[edit]In November 2021, Expel announced a $140.3M Series E funding round at a $1B valuation.[12] Expel has raised $288.8M in total funding.[13]
Products and services
[edit]Expel provides managed detection and response (MDR), co-managed SIEM, threat intelligence, and phishing management services, through its Expel Workbench platform.[14] [15]
References
[edit]- ↑ "Following a $140M Series E, cyber firm Expel is now a unicorn". Technical.ly. 22 November 2021.
- ↑ "Exclusive: Kevin Mandia joins cyber startup Expel's board". Axios. October 1, 2024.
- ↑ "It's much easier to raise money when you've already sold a $1 billion company". The Washington Post.
- ↑ "Expel, CrowdStrike, Red Canary Dominate Forrester MDR Ranks". Bank Info Security. March 7, 2025.
- ↑ "AI Tools Are Helping Mediocre North Korean Hackers Steal Millions". WIRED. 22 April 2026.
- ↑ "GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft". The Hacker News. 17 July 2026.
- ↑ "Ransomware group hijacks hospital system's Facebook page amid ongoing cyberattack fallout". The Record. 11 August 2026.
- ↑ "I got inside a North Korean hiring scam. What I found reveals a troubling shift in tactics". The Indicator. 10 June 2026.
- ↑ "White House AI Cyber Clearinghouse Draws Muted Industry Support". Bloomberg Law. 17 July 2026.
- ↑ "CISOs Feel the Heat Over AI Risk". Dark Reading. 20 July 2026.
- ↑ "You said you're concerned about Mythos—we talked to the experts". IT Brew. 8 May 2026.
- ↑ "Expel raises $140.3M Series E for its managed threat detection and response platform". TechCrunch. November 18, 2021.
- ↑ "Dave Merkel on Why MDR Firm Expel Sought More Money in 2022". Info Risk Today. December 19, 2022.
- ↑ "Visa Teams With Expel to Tackle $10.5 Trillion Cybercrime Threat". PYMNTS. October 2, 2023.
- ↑ "10 Hot New Cybersecurity Tools Announced At RSAC 2026". CRN. March 23, 2026.
- provide significant coverage: discuss the subject in detail, excluding routine coverage like product launches, staff appointments, or financial reports and listings in databases or listicles;
- are reliable: from reputable outlets with editorial oversight;
- are independent: not connected to the subject, such as press releases, the subject's own website, or sponsored content.
Please add references that meet all three of these criteria. If none exist, the subject is not yet suitable for Wikipedia.