A consultancy with a teenager at its head
The detail that separates Vann from the many talented teenagers in security is the corporate form. He is described not as a contributor to bounty programmes but as the operator of his own consultancy, VannTech Cyber, at seventeen. That implies clients, invoices and a set of services, none of which the reporting names.
The second reported activity is more unusual still. The Hustle states that he tracks down Ukrainian cybercriminals in his spare time, placing him in the territory of threat intelligence rather than routine penetration testing. Where that work went, who it was shared with and whether it produced any outcome are not recorded.
The market he was working in
The article that carries his name is about an economy that barely existed a decade before it: companies paying strangers to break into their own systems. It records 300,000 hackers from 150 countries registered on the platform HackerOne, which paid them 19 million dollars in a single year, with BugCrowd and HackenProof named as competitors.
The distribution of that money is the point. Fewer than one per cent of hackers on the platform earn a full-time living from it, the piece reports, which makes bounty hunting a lottery with a very long tail rather than a career. Facebook's programme set a floor of 500 dollars for a valid report and no stated ceiling, and 57 per cent of millennials surveyed regarded hacking as a legitimate profession.
Why a consultancy is the harder route
Against that background, Vann's choice reads as a deliberate one. A bounty hunter is paid per flaw, competes against hundreds of thousands of others and has no relationship with the customer. A consultancy sells time, retains clients and can be built into something that survives a quiet month. It is also far harder to start, and harder still before the founder can sign a contract in his own name.
The article does not say what services VannTech Cyber sold, who bought them, or what it earned. What it establishes is the shape of the thing: a named business, run by a named seventeen-year-old, operating in a field where most people his age were submitting reports to someone else's programme.
What is documented — and what is not
Four facts are firm: his age at the time of the reporting, the name of his company, the description of his threat-tracking work, and his stated plan to attend the Massachusetts Institute of Technology. All four come from a single paragraph in a single article, which is a thin evidential base and is stated as such here.
Nothing else is on the record. No source gathered for this page gives his birth year, his home state, his school, the names of any client, any bounty earnings, or whether he did in fact enrol at MIT. A plan reported in an article is not a place taken, and this page does not treat it as one.
Why the teenage security founder became a type
The bug bounty era rewarded a very specific combination: unlimited time, no institutional habits, and a willingness to be told no repeatedly by automated systems. Teenagers had all three in a way that salaried engineers did not, and the platforms were built to accept work from anyone who could produce a valid report, without an interview or a degree.
That is what makes Vann's entry worth recording even though it is brief. He represents the next step in the pattern — the young researcher who does not stay on the platform but builds a business beside it. Whether that business lasted is a question the sources gathered here cannot answer.
| 人物 | 国家 | 里程碑 | 年龄 / 数据 |
|---|---|---|---|
| Sawsan Ahmed | 美国 | 2021年12月，12岁时成为Broward College最年轻的毕业生 | 12岁 |
| Arvind Mahankali | 美国 | 13岁时赢得2013年Scripps全国拼字比赛 | 13岁 |
| Kerry Close | 美国 | 13岁时赢得2006年Scripps全国拼字比赛 | 13岁 |
| Shania Muhammad | 美国 | 15岁时成为Langston大学最年轻的毕业生 | 15岁 |
| Paul Vann | 美国 | 青少年时期经营网络安全咨询公司VannTech Cyber | — |
What is documented — and what is not
✓ Documented
- Reported at 17 as running the cybersecurity consultancy VannTech Cyber (The Hustle)
- Described as tracking down Ukrainian cybercriminals in his spare time
- Stated a plan to attend MIT
? Unverified, disputed or wrong
- No birth year, home state, school or current age in these sources
- No clients, services, revenue or bounty earnings are documented
- No confirmation that he enrolled at MIT or what he has done since
- Single-source record; no national news confirmation was found
Questions people ask about Paul Vann
Who is Paul Vann?
A teenage cybersecurity operator profiled by The Hustle, reported at seventeen as running his own consultancy, VannTech Cyber.
What is VannTech Cyber?
His cybersecurity consultancy. The reporting names it but does not describe its services, clients or size.
What did he mean by tracking Ukrainian cybercriminals?
The Hustle states that he tracked down Ukrainian cybercriminals in his spare time. No detail about the work, its results or who it was shared with is documented.
Did Paul Vann go to MIT?
The article reports that he planned to attend MIT. No source in this record confirms that he enrolled.
How much did he earn from bug bounties?
No earnings are disclosed for him. The same article reports that hackers on HackerOne collectively earned 19 million dollars in a year and that fewer than one per cent make a full-time income.
How old is Paul Vann now?
No birth year is published in these sources, so no current age can be stated. He was seventeen at the time of the reporting.
Is Paul Vann on Wikipedia?
No Wikipedia article was found for him. The single source used here is The Hustle's article on teenage bug bounty hunters.
Where is Paul Vann now?
No source in this record says. The documented trail ends with the article that names his company and his plans.
Quick quiz: how well do you know Vann’s story?
What was the name of Paul Vann's company?
How old was he when The Hustle reported on him?
Which university did he plan to attend?
Sources
- How teenage hackers became tech's go-to bounty hunters — The Hustle, 2024-10-01
Checked by the Geniuses.club editorial team. Ages are given as of September 2026.
