Who Is the CEO of TryHackMe and How Is It Managed
Leadership at fast-growing cybersecurity startups often shifts as companies scale. While many founders move into advisory roles as professional management takes over, TryHackMe maintains a founder-led structure. This approach keeps the platform’s development closely aligned with the original mission of making security training accessible. The company’s growth trajectory has necessitated a transition from a grassroots community project to a structured business entity, yet the core leadership remains consistent with its origins.
At a glance
| Metric | Details |
|---|---|
| Current CEO | Ben Spring |
| User Base | 2M+ members |
| Primary Focus | Hands-on labs |
| Industry | Cybersecurity EdTech |
What is the current business model of TryHackMe?
TryHackMe operates on a freemium model that balances free, community-driven content with a tiered subscription service for individuals and enterprise organizations. Users pay for advanced learning paths, professional certifications, and management features for team training. Many people assume the platform is entirely free because of its accessible entry-level labs, but the company relies on these paid subscriptions to fund infrastructure and content development. It is a classic software-as-a-service approach tailored for the cybersecurity market, where specialized, up-to-date training modules provide the recurring revenue necessary to keep the platform sustainable and technically relevant.
When was the cybersecurity training platform founded?
The platform was established in 2018 to bridge the gap between theoretical knowledge and practical application in the cybersecurity field.
- 2018: The year the platform launched, marking its transition from a personal project to a structured educational service.
- London: The city where the initial development took place, serving as the central hub for the founding team.
- Gamification: A core design philosophy that uses points, badges, and streaks to keep learners engaged through long-term study.
- Browser-based: The delivery method that allows users to access virtual machines directly, removing the need for complex local software setups.
Who are the co-founders of the organization?
Ben Spring and Ashu Savani founded the company together while studying at university. They initially built the platform to solve their own frustrations with the lack of accessible, hands-on cybersecurity training. By creating a browser-based environment, they made it possible for anyone with an internet connection to practice offensive and defensive security techniques without needing a high-end computer. For instance, the "Advent of Cyber" event they host annually has become a signature example of how they use community engagement to drive platform growth.
The founders maintain a hands-on approach to the business, though their roles have naturally shifted as the team expanded. While they remain the public faces of the organization, they have brought in specialized leadership to manage the increasing complexity of enterprise sales and global operations. One nuance is that while they are the primary architects of the pedagogical style, the platform now hosts a vast library of content created by external contributors, which changes the original dynamic of the founders being the sole content creators.
Where is the company headquartered?
TryHackMe is headquartered in London, United Kingdom.
- London: The primary corporate office location, housing the core administrative and development teams.
- Remote-first: A operational policy that allows the company to hire talent across various time zones, despite the physical headquarters.
- Infrastructure: The physical and cloud-based servers that support the platform, which are distributed globally to reduce latency for international users.
- Compliance: The legal and regulatory framework the company follows, which is tied to its primary registration in the United Kingdom.
What specific services does the platform provide to cybersecurity professionals?
The platform provides a library of interactive labs that simulate real-world cyberattacks and defense scenarios. Professionals use these to refine their skills in areas like network exploitation, digital forensics, and cloud security. A concrete example is the "SOC Level 1" path, which guides users through the specific tools and workflows used in a Security Operations Center, such as log analysis and incident response. This practical focus helps bridge the gap between holding a certification and being able to perform the actual job duties required by an employer.
However, there is a nuance regarding the platform's utility for senior-level experts. While the content is excellent for beginners and mid-level practitioners, highly specialized researchers or those focused on niche zero-day vulnerabilities may find the labs too structured. The platform is designed to teach established methodologies rather than to function as a sandbox for experimental, cutting-edge vulnerability research. It remains a tool for skill acquisition and verification rather than an environment for developing new, proprietary exploits.
How has the company grown in terms of user base and employee count since its inception?
The platform has grown from two founders to a team of over 100 employees. Its user base expanded rapidly, crossing the 2 million registered user mark within its first few years of operation.
What is the primary mission of the platform in the context of cybersecurity education?
The primary mission is to make cybersecurity education accessible and engaging through hands-on, browser-based labs that simulate real-world threats.
| Metric | Beginner Labs | Advanced Labs |
|---|---|---|
| Guided Paths | 15+ | 10+ |
| Difficulty | Low | High |
| Time Estimate | 1-2 hours | 4-8 hours |
Use these metrics to gauge which learning path aligns with your current technical proficiency and time availability.
What people often get wrong
- Assuming the CEO is a public figure. Many users confuse the platform's public-facing instructors or community managers with the executive leadership. Check the official company registry or verified professional profiles instead.
- Confusing founders with investors. The people who started the platform are not necessarily the ones providing the capital. Distinguish between the operational leadership and the venture capital firms backing the company.
- Thinking leadership is static. Startup roles change rapidly as headcount increases. Always verify the current leadership team on official corporate filings rather than relying on outdated blog posts or archived news articles.
Has the company received any significant venture capital funding or acquisitions?
Yes, the company successfully raised funding from investors such as Accel. This capital injection allowed the platform to scale its content library and expand its enterprise offerings to support global security teams.
Managing your cybersecurity learning path
Focus on the practical content and lab quality rather than the corporate structure when choosing your training platform. Review the latest updates on the company’s official site to make sure you are following the current curriculum standards set by the leadership team.