EC-Council’s $100M Vision: Revolutionizing Cybersecurity’s Next Frontier
Summary
- EC-Council has announced a $100 million initiative to invest in cybersecurity companies.
- The money goes to companies building next-generation security technology.
- It favors high-growth firms with strong technical innovation and real defensive impact.
- Companies led by or employing EC-Council-certified professionals get priority.
- Backed companies also get mentorship, strategic guidance and global exposure.
What EC-Council announced
EC-Council, best known for certifications such as Certified Ethical Hacker, announced on April 24, 2025 that it is committing $100 million to invest in cybersecurity companies. That’s unusual. The fund is aimed at startups and growth companies developing new security technology.
Who the fund targets
EC-Council says it will prioritize high-growth companies with strong technical innovation and a tangible impact on cyber defense. An earlier version of this article described the $100 million as a research, university and education program. That was inaccurate. It is an investment initiative for companies.
The certified-professional angle
The initiative gives preference to companies led by or employing EC-Council-certified professionals. That ties the fund to EC-Council’s core business, building a community of certified practitioners, and gives its credential holders a possible path to funding if they start companies. Companies anywhere in the world can apply through EC-Council’s investment initiative page.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
More than money
Besides capital, EC-Council says backed companies will get mentorship, strategic guidance and exposure to its global network. For an early-stage security company, access to that network of customers and practitioners can be as useful as the cash.
What it could mean for training
EC-Council hasn’t said the fund will change its courses. Over time, though, a portfolio of startups working on new defenses could feed real-world experience back into its training.
A new source of startup capital
Security startups compete for funding with every other kind of tech company, and in a tight venture market a dedicated $100 million fund from an industry insider adds another source of capital, especially for founders with deep hands-on experience who may not fit the usual investor profile.
Questions to watch
Key details remain to be seen, including how large individual investments will be, how quickly the money is deployed and what terms companies get. Those will decide how much the fund actually moves the industry.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
What happens next
EC-Council’s $100 million pledge shows a certification body moving into venture investing. If it backs strong companies, its certified professionals and the wider industry could both benefit. Founders interested in the fund can apply now.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.