@stake

ATstake, Inc. (stylized as @stake) was a computer security professional services company in Cambridge, Massachusetts, United States. It was founded in 1999 by Battery Ventures (Tom Crotty, Sunil Dhaliwal, and Scott Tobin) and Ted Julian. Its initial core team of technologists included Dan Geer (Chief Technical Officer) and the East Coast security team from Cambridge Technology Partners (including Dave Goldsmith). Its initial core team of executives included Christopher Darby (Chief Executive Officer), James T. Mobley (Chief Operating Officer), and Christina Luconi (Chief People Officer).

In January 2000, Atstake acquired L0pht Heavy Industries (who were known for their many hacker employees), bringing on Mudge as its Vice President of Research and Development. Its domain name was atstake.com.^[1] In July 2000, Atstake acquired Cerberus Information Security Limited of London, England, from David and Mark Litchfield and Robert Stein-Rostaing, to be their launchpad into Europe, the Middle East and Africa.^[2] Atstake was subsequently acquired by Symantec in 2004.^[3]

In addition to Dan Geer and Mudge, Atstake employed many famous security experts including Dildog, Window Snyder, Dave Aitel, Katie Moussouris, David Litchfield, Mark Kriegsman, Mike Schiffman, the grugq, Chris Wysopal, Alex Stamos, Cris Thomas, and Joe Grand.^[4][5][6]

In September 2000, an Atstake recruiter contacted Mark Abene to recruit him for a security consultant position. The recruiter was apparently unaware of his past felony conviction since Atstake had a policy of not hiring convicted hackers. Mark was informed by a company representative that Atstake could not hire him, saying: "We ran a background check." This caused some debate regarding the role of convicted hackers working in the security business.

Atstake was primarily a consulting company, but also offered information security training through the Atstake academy, and created a number of software security tools:

• LC 3, LC 4 and LC 5 were versions of a password auditing and recovery tool also known as L0phtCrack
• WebProxy was a security testing tool for Web applications
• SmartRisk Analyzer was an application security analysis tool
• The @stake Sleuth Kit (TASK) was an open source digital forensics tool (now called The Sleuth Kit).

Symantec later stopped selling LC5 to new customers citing US Government export regulations, and discontinued support in December 2006.^[7] In January 2009, L0phtCrack was acquired by the original authors from Symantec; L0phtCrack 6 was announced at the SOURCE Boston Conference on March 11, 2009.^[8] The technology underlying SmartRisk Analyzer was extended, and eventually brought to market by the Symantec spinoff Veracode.

Symantec announced its acquisition of Atstake on September 16, 2004,^[9] and completed the transaction on October 9, 2004.^[10]

Several members of Atstake left to form the computer security company "iSEC Partners"^[11] in 2004. Former Atstake academy instructors Rob Cheyne and Paul Hinkle later formed the information security training company "Safelight Security Advisors"^[12] in 2007. The remaining portion of the Atstake consulting group continues to operate as the "Security Advisory Services"^[13] team within Symantec's Security Business Practice.

Numerous Atstake employees before and after the acquisition by Symantec started their own cybersecurity services companies, which included:

• iSec Partners, US
• ImmunitySec, US
• Matasano, US
• NGS Software, UK
• Safelight Security Advisors, US
• Leviathan Security, US
• VSR, US

of these companies NCC Group latterly acquired:

• NGS Software, UK
• iSec Partners, US
• Matasano, US
• VSR, US

Atstake employees have also started their own cyber security product companies, including:

• Arbor Networks, US (acquired by private equity firm Danaher)
• Resilient Systems, US (acquired by IBM)
• Veracode, US
• GreatHorn, Inc (acquired by private equity)

• "Atstake company website". Archived from the original on 2007-05-08., now redirects to Symantec