Pardon Mukoyi is the founder of Cyber Matrix Tech and the operator behind its red team — a multi-award-winning hacker whose name appears on the security halls of fame of Microsoft, the European Union, Red Hat, Bank of America, and a long list of organizations he is not at liberty to mention.
Mukoyi has spent the better part of a decade compounding skill across disciplines that most operators only ever pick one of. The result is a profile that is unusually rare even among the world's best offensive security researchers.
More than a million dollars in disclosed bug bounty earnings across the world's most demanding programs — HackerOne, Bugcrowd, MSRC, and private invitation-only programs. The kind of track record that gets you into rooms.
Multiple Microsoft acknowledgements for remote code execution disclosures, and a place on the MSRC Researcher Leaderboard — a list that recognizes the small handful of researchers contributing the highest-impact vulnerabilities to Microsoft's products each year.
An early operator at the intersections most of the industry is only now beginning to take seriously — adversarial AI, smart-contract logic, agentic systems. The doctrine behind Cyber Matrix's Offensive Neural capability is built on this body of work.
In 2018 he founded Cyber Matrix Tech in Sandton — now operating across South Africa, Zimbabwe, and Southeast Asia, serving Fortune 500 and Global 2000 organizations through coordinated research, retained engagement, and direct contract.
Pardon Mukoyi did not arrive at offensive security through any of the usual doors. There was no graduate scheme, no four-letter consultancy on the CV, no Ivy-League pipeline. There was a curiosity that started early, a discipline that came hard, and a sequence of vulnerabilities — submitted to the right programs at the right time — that turned a name into a reputation.
By his mid-twenties, that reputation had earned him acknowledgements from Microsoft, the European Union, Red Hat, Bank of America, Nike, AT&T, Achmea, UN Women, and a long list of organizations whose names sit behind NDAs. His work has been credited in over thirty public security disclosures, with bounty earnings crossing the million-dollar mark across the world's most demanding programs.
Before founding Cyber Matrix, he had already been working at the edge of AI security — long before the industry agreed it was a category. Independent research into model behaviour, adversarial inputs, and the security implications of agentic systems became the foundation for what Cyber Matrix now calls Offensive Neural — a category-defining capability the firm operates for a small portfolio of organizations.
The firm itself was founded in Sandton in 2018. It has stayed deliberately small, deliberately selective, and deliberately quiet. The work it has done for some of the world's most consequential organizations is, by design, work the public will never read about.
What is on the record is enough.
A selection of organizations that have publicly acknowledged his work through their security halls of fame, responsible disclosure programs, and researcher leaderboards.
Selected milestones from a decade of offensive research. Numbers shown are public or disclosable; the full picture remains under NDA.
One of the most consistent contributors we have seen come out of the African security research community — and one of the few names that crosses, comfortably, between bug bounty, enterprise red team, and AI security work.
A founder's attention is rarely confined to a single problem. Outside the firm, his work pushes into territory that matters at a different scale.
An initiative championing climate resilience and food security across emerging markets. Where Cyber Matrix protects digital infrastructure, Re-Basket targets the systems that feed people — applying the same operator mindset to a problem whose stakes are measured in lives, not dollars.
Briefs are reviewed by the principal within one business day. Initial conversations are off-the-record.