Tall Poppy
Employee digital-safety vendor combining proactive personal-exposure hardening with trauma-aware incident response for workers targeted by online harassment or doxxing.
Visit Website ↗ + Add to CompareOverview
Tall Poppy protects individual employees rather than corporate networks. Its product walks employees through reducing their exposed personal footprint (data broker removal, credential hygiene, authentication hardening with tools like YubiKey and 1Password) before anything happens, and then provides trained, trauma-aware incident responders if an employee is doxxed, harassed, or targeted online. The company frames this as an employee benefit and risk-reduction tool for organizations whose staff, executives, journalists, moderators, researchers, public-facing employees, face a real and growing risk of being personally targeted because of their jobs.
Co-founded in 2018 by Leigh Honeywell (previously a security engineer at Slack and Microsoft) and Logan Dean, and now based in Ottawa, Ontario, Tall Poppy grew out of Honeywell’s earlier volunteer work tracking down online harassment campaigns. The company has reported reaching roughly $2.7 million in revenue in 2024, up from $1.4 million the prior year, with a team of around a dozen to seventeen people, growth that appears to be organically funded rather than driven by large venture rounds.
Tall Poppy sits outside the conventional network- or endpoint-centric security categories: its unit of protection is a person’s personal digital exposure rather than a corporate asset. That makes it a genuinely different offering from traditional data-protection tools, though it also means its efficacy is inherently harder to benchmark than a product with a measurable detection or prevention rate.
Innovation Matrix Assessment
The core product concept (proactive exposure hardening plus incident response) has remained consistent since 2018 launch; no evidence of major platform pivots or rapid feature expansion was found.
Reported revenue growth to roughly $2.7M in 2024 with a small team indicates a functioning, sustainable service business, though it operates at a scale well below enterprise security vendors.
Revenue reportedly grew from $1.4M to $2.7M year over year (2023 to 2024), a real and fairly strong growth rate for a bootstrapped company of this size.
Treating an individual employee's personal digital exposure as the unit of protection, rather than a corporate network or endpoint, is a genuinely different framing from most vendors in adjacent data-protection and privacy categories.
Revenue and team-size figures come from a self-reported founder interview (Latka) rather than audited disclosures, and there is no standardized way to independently benchmark harassment-prevention efficacy; evidence here is inherently limited by the nature of the service.
Doxxing and coordinated online harassment of employees, executives, journalists, and public-facing staff is a documented and growing risk that most conventional corporate security programs do not address.
Why CISOs Should Care
Covers a risk category, personal targeting and harassment of individual employees, that falls outside what network, endpoint, or identity security tools are built to address, and gives HR/security teams a defined incident-response path when it happens.
What Makes It Different
Unlike data-protection or privacy tools aimed at corporate data, Tall Poppy's unit of protection is a specific employee's personal exposure and well-being, paired with trauma-aware human incident response rather than purely technical controls.
The Matrix Verdict
52/100 — INCREMENTAL INNOVATOR
A small, durable, and organically-growing service filling a real gap between HR, security, and personal safety that most enterprise security stacks don't cover; its impact is real but inherently hard to quantify with conventional security metrics.
Editorial Note: Claims vs. Verified Findings
Tall Poppy's reported revenue ($2.7M in 2024) and team size come from a self-reported founder interview (Latka) and were not independently audited. The company's founding, leadership, and general service model are independently confirmed via Y Combinator, TechCrunch, and the company's own site.
Sources
Alternatives to Tall Poppy
Cyera
AI-powered, agentless data security platform combining DSPM, DLP, and AI-activity monitoring, and one of the fastest-funded startups in…
Halcyon
Ransomware-focused cyber resilience platform combining endpoint prevention, automated recovery, and data exfiltration protection.
Varonis
Data-centric security platform that monitors file, email, and cloud activity to detect insider threats and ransomware before data…
Bedrock Data
AI-native data security posture management (DSPM) platform using a Metadata Lake to discover, classify, and contextualize data across…
CyberRidge
Photonic-layer encryption that converts transmitted data into optical noise, defending fiber communications against quantum-era decryption.
AWS Wickr
AWS Wickr is Amazon's end-to-end encrypted messaging, voice, video, and file-sharing platform for regulated and government environments, holding…