Paul Vann Now: The 17-Year-Old Running a Cyber Firm

Biography

A consultancy with a teenager at its head

The detail that separates Vann from the many talented teenagers in security is the corporate form. He is described not as a contributor to bounty programmes but as the operator of his own consultancy, VannTech Cyber, at seventeen. That implies clients, invoices and a set of services, none of which the reporting names.

The second reported activity is more unusual still. The Hustle states that he tracks down Ukrainian cybercriminals in his spare time, placing him in the territory of threat intelligence rather than routine penetration testing. Where that work went, who it was shared with and whether it produced any outcome are not recorded.

The market he was working in

The article that carries his name is about an economy that barely existed a decade before it: companies paying strangers to break into their own systems. It records 300,000 hackers from 150 countries registered on the platform HackerOne, which paid them 19 million dollars in a single year, with BugCrowd and HackenProof named as competitors.

The distribution of that money is the point. Fewer than one per cent of hackers on the platform earn a full-time living from it, the piece reports, which makes bounty hunting a lottery with a very long tail rather than a career. Facebook's programme set a floor of 500 dollars for a valid report and no stated ceiling, and 57 per cent of millennials surveyed regarded hacking as a legitimate profession.

Why a consultancy is the harder route

Against that background, Vann's choice reads as a deliberate one. A bounty hunter is paid per flaw, competes against hundreds of thousands of others and has no relationship with the customer. A consultancy sells time, retains clients and can be built into something that survives a quiet month. It is also far harder to start, and harder still before the founder can sign a contract in his own name.

The article does not say what services VannTech Cyber sold, who bought them, or what it earned. What it establishes is the shape of the thing: a named business, run by a named seventeen-year-old, operating in a field where most people his age were submitting reports to someone else's programme.

What is documented — and what is not

Four facts are firm: his age at the time of the reporting, the name of his company, the description of his threat-tracking work, and his stated plan to attend the Massachusetts Institute of Technology. All four come from a single paragraph in a single article, which is a thin evidential base and is stated as such here.

Nothing else is on the record. No source gathered for this page gives his birth year, his home state, his school, the names of any client, any bounty earnings, or whether he did in fact enrol at MIT. A plan reported in an article is not a place taken, and this page does not treat it as one.

Why the teenage security founder became a type

The bug bounty era rewarded a very specific combination: unlimited time, no institutional habits, and a willingness to be told no repeatedly by automated systems. Teenagers had all three in a way that salaried engineers did not, and the platforms were built to accept work from anyone who could produce a valid report, without an interview or a degree.

That is what makes Vann's entry worth recording even though it is brief. He represents the next step in the pattern — the young researcher who does not stay on the platform but builds a business beside it. Whether that business lasted is a question the sources gathered here cannot answer.

Achievement Timeline

At age 17

Reported as running his own cybersecurReported as running his own cybersecurity consultancy, VannTech Cyber (The Hustle)

Same period

Described as tracking down Ukrainian cDescribed as tracking down Ukrainian cybercriminals in his spare time

Stated next step

Planned to attend MITPlanned to attend MIT

Since

No further published record appears inNo further published record appears in the sources gathered here

Historical Comparison

Person	Country	Milestone	Age / Stat
Sawsan Ahmed	United States	Broward College's youngest graduate, at 12, in December 2021	Age 12
Arvind Mahankali	United States	Won the 2013 Scripps National Spelling Bee at 13	Age 13
Kerry Close	United States	Won the 2006 Scripps National Spelling Bee at 13	Age 13
Shania Muhammad	United States	Langston University's youngest graduate, at 15	Age 15
Paul Vann	United States	Running the cybersecurity consultancy VannTech Cyber as a teenager	—

What is documented — and what is not

✓ Documented

Reported at 17 as running the cybersecurity consultancy VannTech Cyber (The Hustle)
Described as tracking down Ukrainian cybercriminals in his spare time
Stated a plan to attend MIT

? Unverified, disputed or wrong

No birth year, home state, school or current age in these sources
No clients, services, revenue or bounty earnings are documented
No confirmation that he enrolled at MIT or what he has done since
Single-source record; no national news confirmation was found

Questions people ask about Paul Vann

Who is Paul Vann?

A teenage cybersecurity operator profiled by The Hustle, reported at seventeen as running his own consultancy, VannTech Cyber.

What is VannTech Cyber?

His cybersecurity consultancy. The reporting names it but does not describe its services, clients or size.

What did he mean by tracking Ukrainian cybercriminals?

The Hustle states that he tracked down Ukrainian cybercriminals in his spare time. No detail about the work, its results or who it was shared with is documented.

Did Paul Vann go to MIT?

The article reports that he planned to attend MIT. No source in this record confirms that he enrolled.

How much did he earn from bug bounties?

No earnings are disclosed for him. The same article reports that hackers on HackerOne collectively earned 19 million dollars in a year and that fewer than one per cent make a full-time income.