Malloc

Malloc is a mobile privacy and security company, operating as Malloc LTD out of Nicosia, Cyprus under Delaware-incorporated parent Malloc Inc., built through Y Combinator’s Summer 2021 batch. Its product combines a mobile VPN with behavioral AI-based spyware and stalkerware detection, real-time alerts when apps access the camera or microphone, and privacy-by-design engineering — the company states all R&D, data handling, and core engineering happen within the EU under European data-protection law, and that it deliberately minimizes the user data it collects.

The company’s stated customer base skews toward high-risk individuals and institutions: executives, journalists, activists, and government agencies exposed to targeted surveillance and commercial spyware, a different buyer profile than typical consumer mobile-security apps. Malloc claims over one million users and backing from Y Combinator, Urban Innovation Fund, Dragon Capital, and other investors, though specific funding amounts are not disclosed in available reporting.

Malloc sits at the edge of this site’s typical enterprise-security coverage — it is fundamentally a consumer/prosumer mobile app rather than an enterprise platform — but its behavioral-AI approach to detecting sophisticated commercial spyware (as opposed to signature-based mobile antivirus) and its stated government-agency customer base make it relevant to organizations managing device risk for high-value, high-target individuals such as executives and public figures. As with most consumer-facing privacy tools, independent, named verification of its spyware-detection efficacy against known commercial surveillance tools was not found in public reporting.