Mark Balovnev

Mark Balovnev's job at CYRISMA is to sell cybersecurity to the people who can least afford a breach and are least equipped to think about one: small and mid-sized businesses, and the managed service providers who run IT for them. He describes the underlying problem as a game of whack-a-mole. A threat surfaces, you knock it down, another surfaces somewhere else, and the small business owner - who wanted to sell dental supplies or run a law office - is now supposed to have opinions about attack-surface visibility and dark-web monitoring. CYRISMA's pitch is that all of that can live on one platform: risk assessment, vulnerability management, compliance tracking, sensitive-data discovery, and a dollar figure attached to what a given gap might actually cost. Balovnev took the CEO seat in January 2025, days after the company closed a $7 million growth round, which is the sort of timing that suggests the investors and the new CEO arrived as a package.

He is a Canadian who runs a Rochester, New York company from Boston, which tells you something about how cybersecurity firms are built now, and he got here by a route that reads less like a career and more like a dare. His family immigrated to Canada with $20. Business, investing and entrepreneurship were, in his telling, dinner-table conversation from before he could really speak. He started earning his own money at 8, flipping comics and fireworks. He wrote his first line of code at 9. He started investing at 12, built a bitcoin brokerage at 14, entered a top Canadian business school at 16 with a 96.5% GPA, and founded a small hedge fund at 17. Then, at 18, with five semesters of university behind him, he dropped out.

Vienna, blockchain, and a company born from a rejection pile

The dropping-out was in service of a job. Balovnev had been rejected by more than 300 companies before one said yes - a fintech innovation consultancy called Match-Maker Ventures, in Vienna. It was there, in April 2016, that he and a coworker named Marek Termanowski became fixated on blockchain, and specifically on a problem they had both lived: digital documents are trivially easy to fake, and so institutions still print digital data back onto paper to notarize, translate and attest it. The two of them had spent hundreds of dollars and months of waiting getting credentials verified across borders. The company they built, EduChain, plugged into the software schools already used and issued verifiable digital versions of transcripts, diplomas, badges and attestations - across K-12, universities and entire education ministries.

Then came six years that Balovnev talks about with a kind of fondness that only makes sense in retrospect. He and his cofounder, in his words, "effectively lived at cost for 6 years, reinvesting every dollar of revenues." He financed enterprise-customer cashflow gaps on credit cards. There were months when the bank account held $6 before payroll was due. This is the part of a founder story that usually gets sanded down into a single inspirational sentence, and Balovnev does deliver the sentence - he learned that he thrives in uncertainty - but he is also careful to note that personal care turned out to be a prerequisite for surviving that long. Uncertainty is a place he can live; it is not free rent.

The demo day, the box tower, and the acquirer who wasn't

In the fall of 2019, EduChain joined Techstars, which is the part of the story where a startup usually gets its KPIs and controls in order, and EduChain did. It also had the specific bad luck, or good story, of becoming the first Techstars cohort to go fully digital mid-program when the pandemic hit. The detail that survives from that period is that Balovnev, recording his demo day pitch from a small downtown apartment without a proper setup, stacked cardboard boxes to raise his laptop to eye level. It is the kind of image that a person either finds mortifying or keeps around on purpose, and he keeps it around.

COVID-19 turned out to be rocket fuel for a company that digitized paper credentials, because suddenly everything had to be remote. Growth was explosive. And then the near-disaster: a serious acquisition partner signed a letter of intent and, according to Balovnev, "ended up trying to steal our IP and immediately launched a competitor in the market." He walked away from the deal. EduChain then accelerated into becoming, in his description, the undisputed market leader for digital credentialing in the MENA region. In April 2021, Yorkville Partners acquired a majority stake, the team stayed on, and Balovnev became VP of Product. It was his first exit, and the second time he had come out the other side of an acquisition.

Non-human identity, and then the whole risk stack

After EduChain, Balovnev co-founded and led Vantyr, a company focused on non-human identity security - the unglamorous and rapidly growing problem of securing the machine accounts, service tokens and automated agents that now do most of the talking inside a modern network. He also did advisory work through Accelliance Consulting, counseling CISOs and executive teams, and contributed to World Economic Forum and government innovation initiatives. The through-line across EduChain, Vantyr and now CYRISMA is not an industry. It is a habit of finding the question nobody is asking - are your credentials real, who is securing the machines, how much risk are you actually carrying - and then building the boring, load-bearing thing that answers it.

CYRISMA is the version of that habit aimed at the broadest possible audience. The company has spent close to seven years on a single idea: make comprehensive cybersecurity simple, accessible and affordable for the MSP and the businesses it serves. Balovnev's arrival, with the growth capital behind him, is the company's bet that the person who bootstrapped a credentialing platform to market leadership on $6-before-payroll discipline is the right one to spend real money scaling globally. He publishes essays on his personal site across finance, personal growth, company building and cybersecurity, which is a fairly on-brand way to spend the hours a normal person would use to relax.