Thinkst, the cybersecurity firm behind the acclaimed Canary product line, is celebrating its 10th anniversary this month. The company has reached a major milestone, hitting $20 million in annual recurring revenue (ARR) while remaining entirely bootstrapped, defying the industry trend of venture capital-fueled growth.
A Decade of Sustainable Cybersecurity
Founded by Haroon Meer in Cape Town, South Africa, Thinkst emerged from a clear market necessity. A decade ago, organizations were spending millions on security tools, yet still failing to detect breaches until months after they occurred. Thinkst set out to build a digital “tripwire” capable of catching hackers in the act.
Today, the company operates with a lean team of approximately 40 employees, primarily focused on engineering and development. Unlike many competitors chasing growth at all costs, Thinkst has maintained profitability and seen its ARR nearly double since 2021.
The Canary Strategy: Early Warning Systems
The company’s flagship hardware, launched in 2015, functions as a modern canary in a coal mine. These devices act as honeypots, mimicking sensitive assets—such as Windows PCs with open file shares, servers containing secret API keys, or databases packed with customer data.
When an unauthorized actor or a penetration tester attempts to access these decoys, the system immediately alerts the organization. This drastically reduces the “dwell time” of hackers, which current industry reports, such as those from Verizon, indicate can last weeks before detection.
Beyond Hardware: Canary Tokens
In addition to hardware, Thinkst provides Canary Tokens. This free, public-facing tool allows users to embed trackers within documents, passwords, or credit card numbers. If an attacker accesses the “valuable” item, the owner receives an instant alert, exposing the breach in real time.
“It’s really hard to deploy a canary wrong,” says Meer. “If you make it fit in, you catch attackers, and if you make it stick out, you catch attackers.”
Growth Without “Gasoline on the Fire”
Thinkst’s growth model is grounded in product efficacy rather than aggressive outbound sales. The company relies heavily on word-of-mouth referrals and existing clients expanding their deployments. Remarkably, 60% of the company’s first-year customers remain active today.
Meer rejects the notion that venture capital is a prerequisite for success. While he acknowledges the value of VC insights, he maintains that capital is not the primary barrier to building a viable business. “We’re not artificially holding back growth, but we’re also not doing any of the really silly, ‘pour gasoline on the fire’ growth-at-all-costs stuff,” Meer noted.
As the company looks beyond its current $20 million ARR, the focus remains on delivering a product that solves a genuine problem. According to Meer, the goal is to continue operating in a way that remains attractive for future investment or acquisition, while proving that a company can scale effectively by prioritizing customer needs and product integrity above artificial expansion.