Convicted Felons Behind Offensive Cybersecurity Startup IRIS C2
A cybersecurity startup called IRIS C2 is drawing attention by offering up to $7 million for zero-day security vulnerabilities in popular software. The company, which claims to be based in McLean, Virginia, has amassed more than 4,000 followers on X since January 2025. Its website targets young engineers with raw talent and high IQs, explicitly stating that college degrees and industry experience are not requirements for employment.
Government contracting records reveal that IRIS C2 is operated by Calvexa Group LLC, a registered federal contractor with no active government contracts. The Arlington, Virginia address listed for Calvexa Group belongs to Jack Burkman, a 60-year-old lobbyist who directs inquiries to his longtime associate, 28-year-old Jacob Wohl. Both men are convicted felons and far-right conspiracy theorists with a documented history of creating fake intelligence companies and operating a now-defunct AI-based lobbying platform under assumed names.
The startup's business model centers on attracting top vulnerability researchers and exploit developers by dangling the possibility of massive financial payouts. The website advertises interest in zero-day exploits, individual primitives, partial chains, and full capabilities across all major platforms, with payouts ranging from $10,000 to $7 million depending on the target, reliability, and operational value. Despite the enthusiastic claims on its LinkedIn page about receiving overwhelming numbers of applications, the backgrounds of its operators raise serious questions about the legitimacy and intent of the entire operation.