# Andrew Morris

> Andrew Morris is the founder and Chief Architect of GreyNoise Intelligence, a Washington, D.C.-based cybersecurity company that observes internet scanning and exploitation through distributed sensors. His early honeypot experiments grew into a business helping defenders distinguish widespread activity from more specific threats. After serving as CEO, he moved into the Chief Architect role in February 2024, when Ash Devata became CEO.

- **Role:** Founder and Chief Architect at GreyNoise Intelligence
- **Organizations:** GreyNoise Intelligence, Endgame
- **Known for:** Founded GreyNoise Intelligence and led it as CEO before becoming Chief Architect., Developed early distributed honeypot experiments into a business providing internet scanning and exploitation context to defenders., Led GreyNoise during its $15 million Series A in June 2022.

## Career timeline

- **Age 13** — Began using Linux after learning about live CDs; recounted in a Strategic Cyber Ventures interview.
- **Before GreyNoise; dates not established** — Worked in penetration testing and in research and development at Endgame.
- **Circa 2013** — Experimented with roughly ten honeypots on virtual servers in geographically separate data centers and centralized their logs in Splunk.
- **2017** — GreyNoise founding year given in Morris’s April 2021 introduction to the company blog.
- **2018** — Morris’s 2024 retrospective describes starting GreyNoise alone in an Arlington, Virginia apartment in 2018.
- **2021** — GreyNoise was named a SINET16 Innovator; Morris launched the company blog.
- **2022-06** — As founder and CEO, announced a $15 million Series A led by Radian Capital; company reported $21 million raised in total.
- **2024-02** — Became Chief Architect when Ash Devata joined as CEO.
- **2024-09** — Appeared on Storm Watch to discuss noise storms and a hidden message in over two million ICMP packets.
- **2025-09** — Discussed internet background noise and sensor-network operations on Sprocket Security’s Ahead of the Breach.
- **2025-11** — Joined Patrick Gray for a sponsored Risky Biz discussion of scanning patterns preceding vulnerability disclosures.
- **2026-05** — Published Re-implementing IOT Backends on May 25, 2026, describing local replacements for the cloud services used by a smart outlet and robot vacuum.

## Achievements

- Founded GreyNoise Intelligence and led it as CEO before becoming Chief Architect.
- Developed early distributed honeypot experiments into a business providing internet scanning and exploitation context to defenders.
- Led GreyNoise during its $15 million Series A in June 2022.
- GreyNoise received a 2021 SINET16 Innovator Award during his tenure as CEO.
- Coauthored the Honeypots Are Back report with Bob Rudis.

## Latest updates

- **2026-05** — Published Re-implementing IOT Backends on May 25, describing how he reduced cloud dependencies for a smart outlet and robot vacuum using local services and AI programming tools.
- **2025-11** — Discussed early scanning signals ahead of vulnerability disclosures in a sponsored Risky Biz interview.
- **2025-09** — Appeared on Ahead of the Breach to explain internet background noise, legitimate scanning and sensor-network operations.

## Links

- Website: https://www.greynoise.io/
- LinkedIn: https://www.linkedin.com/in/andrew---morris
- Twitter/X: https://twitter.com/Andrew___Morris
- GitHub: https://github.com/andrew-morris
- Bluesky: https://bsky.app/profile/andrewmorr.is

---

Profile page: https://yespress.io/andrew-morris
Published by YesPress — https://yespress.io
Last updated: 2026-10-20