Agger Labs

🎤 Speaker Spotlight | RWN Summit 2026 Cybersecurity isn’t about stopping every attack, it’s about understanding how attackers think before they make their move. Glenn Wilkinson has built a career doing exactly that. As CEO and co-founder of Agger Labs, Glenn is an ethical hacker who helps organisations see security through the eyes of their adversaries. Through live demonstrations, real attack scenarios and insights into human behaviour, he reveals the vulnerabilities that technology alone can’t solve. A respected voice in the cybersecurity community, Glenn has spoken at Black Hat and DEF CON, while his work has been featured by CNN, BBC and Channel 4. His approach bridges technical expertise with practical business resilience, helping leaders better understand the evolving threat landscape. If you’ve never watched an ethical hacker break down how a real attack unfolds — Glenn will change the way you think about cyber risk. 📅 6-7 October 2026 🗣️ NextGen Cyberthreats: From Quantum Unlocking State Nexus and Vishing: Are We Ready? 📍 Church House Westminster, London Register now: https://bit.ly/4mK4YjB #rwsummit2026 #theresiliencereset #rwnsummit #resilienceworldnexussummit #cybersecurity

We won! Agger Labs has won the SE Labs Awards 2026 in the Enterprise Security Development category. We couldn't be more proud of our team. Building security software is a strange old game. The bit people see is usually the dashboard, the demo, the marketing page, the nice clean explanation of what the product does. But the bit that matters is often much less glamorous: • Does it do what it says on the tin? • Does it make the right decision quickly? • Does it behave properly under pressure? • Does it fit into a real environment without creating more work for already busy teams? That’s the kind of work this award recognises, which is why it means a lot. Full write-up in comments below. #CyberSecurity #Ransomware #EndpointSecurity #SELabs #Agger

We don't spend money on marketing at Agger Labs. No BDRs cold-calling you. No booths bombarding you with swag to swipe your badge. No paid ads in your feed. Instead, I turn up. At events, on stage, on the news, on LinkedIn. I talk about what we've built and why it matters. Because selling in cyber security starts with trust. And trust isn't something you can buy; you have to earn it before you've even mentioned the word "demo". So here's my ask. If you've seen me speak, caught me on the news, or we've crossed paths at an event, grab 15 minutes with me for a chat about Agger Labs. What we're doing with ransomware protection. Beyond that, why we think endpoint resilience is the conversation the industry should actually be having - and how we're solving that. No hard sell. No slides. Just a founder who's genuinely passionate about this thing we've built, and wants to show you why. DMs open, drop a comment below. Or tag someone who should hear about this. Thank you!

Whilst this is a data theft / exfiltration attack, there’s still a chance of ransomware being deployed to further hurt the victim. Our Agger Labs is free if you’re in the middle of an attack. We’ll kill any ransomware before it does damage. After you’ve recovered we can chat commercials, but also totally fine to just walk away friends. Drop me a DM or email if you’re ever in this situation, we’ll have you up and running and protected within the hour.

The final episode of Season 1 of Cyber Security in Focus is now live. Katie Watson is joined by Glenn Wilkinson Wilkinson, CEO of Agger Labs and ethical hacker with 15 years of experience testing the defences of banks, enterprises, and critical infrastructure. Glenn brings a direct attacker's perspective to the conversations security leaders need to be having. In this episode: 🟢 Why proficient hackers are methodical, not opportunistic, and what that means for how you structure your defences 🟢 Why most breaches still start with a person, not a system, and why the security industry needs to stop putting the onus on users to fix that 🟢 How attackers spend an average of 197 days on a network before anyone notices, and the detection approaches that can change that number 🟢 Why a passed penetration test is not the same as being secure 🟢 How to reframe cybersecurity as a business continuity issue to get genuine board-level engagement 🟢 The ransomware pay or don't pay decision, including the legal exposure most organisations don't see coming From recon to ransom, this episode covers the full attacker lifecycle and what defenders need to do differently. Available on Spotify, Apple Podcasts, and YouTube. Link in the comments. #cybersecurity #ethicalhacking #ransomware

This is exactly why we built our Agger Labs endpoint agent to be deterministic. No false positives, low overheads, accurate “fact based” results when spotting and killing ransomware. We have some LLM in the pipeline, but very much outside the critical loops.

Some days are tough, but some days you onboard three new customers in an afternoon - that was my Friday. We'd love to welcome your organisation, big or small, to the growing Agger Labs family too. We're very proud of what we've built, and genuinely think our product can have a meaningful impact at a fair price point in keeping you safe from ransomware. Ransomware sucks. We're out here building a business, but at the end of the day, our focus is on keeping people safe online - that's what gets us out of bed in the morning. As always, our product is free if you're in the middle of ransomware attack - we'll help prevent spread and reinfection. Once you're back up on your feet we'd love to chat commercials, but if not, that's fine too (we have an organisation in the middle of a Sinobi attack at the moment running our software without charge). DM me or comment below, I'd love to tell you more about what we've built, and to see if we could be a good fit for you. #ransomware #cybersecurity #hacking

🚨Strengthening NHS Ransomware Resilience in the NHS – Join the Webinar🚨 Microsoft Defender for Endpoint (MDE) is the recognised security standard across the NHS, providing a strong and consistent baseline for threat detection. It’s highly effective at detecting a wide range of threats. However, ransomware can sometimes move faster than traditional detection and response workflows - creating a short but critical window where disruption can occur. Join us for an upcoming webinar where we’ll explore how Agger Labs complements Microsoft Defender with a ransomware-focused containment layer, helping to detect and contain ransomware variants that even advanced EDR platforms can miss. 📌 Wednesday 4th February 2026 | 11:00AM 🎙️ Strengthening NHS Ransomware Resilience: Building on Microsoft Defender with Agger Labs ➡️ Register here: https://lnkd.in/eYAawAhr This session will be led by Glenn Wilkinson, CEO of Agger Labs, a leading ethical hacker and international cyber security speaker. #NHS #Ransomware #RansomwareProtection #CyberSecurity #MicrosoftDefender #CyberResilience

Something we saw clearly in 2025: Linux ransomware being used to encrypt Windows systems. Attackers are abusing WSL to run ELF-based ransomware that never touches traditional Windows PE execution paths. Most endpoint tools are still heavily Windows-centric and simply don’t look closely inside the Linux subsystem. Result: encryption happens where many controls aren’t watching. Simple question for defenders: Can your EPP see and stop Linux (ELF) ransomware activity running on Windows via WSL? We can.

At Agger Labs we do one thing and we do it well: We. Just. Stop. Ransomware. At BlackHat London in December I delivered a talk entitled: "𝘙𝘐𝘗 𝘙𝘢𝘯𝘴𝘰𝘮𝘸𝘢𝘳𝘦: 𝘈 𝘚𝘰𝘭𝘶𝘵𝘪𝘰𝘯 𝘞𝘪𝘵𝘩𝘰𝘶𝘵 𝘵𝘩𝘦 𝘍𝘜𝘋*" (video link in the comments 👇) It was an opportunity to walk through the mechanics of killing active ransomware in milliseconds, with no marketing and no scare tactics. How do we stand out: -> Install in 30 seconds, immediate protection (zero configuration). -> We turn each endpoint into a minefield ransomware can’t cross. -> No updates, no signatures (just dead ransomware). -> Tiny lightweight agent (<1% CPU, 80MB RAM). -> Legacy support back to Windows 7 / 2000. -> Offline/air-gapped operation if need be. -> Runs alongside your EDR/AV. If ransomware detection and termination is on your risk register for 2026, drop me a DM. -- *Fear, Uncertainty, and Doubt. ie scaring you into buying something! #Ransomware #EndpointSecurity #EDR #IncidentResponse #CyberSecurity #BlackHat #BlueTeam #NoFUD #Hackers #Hacking #BlackHat