hey.ax

What It Is

hey.ax is the personal professional homepage of UK-based security researcher and journalist Ax Sharma, rather than a traditional cybersecurity software or hosting service. The profile indicates over 10 years of security experience, focusing on malware campaigns, supply chain attacks, and cybercrime operations. He serves as the Head of Research at Manifold Security and contributes to media outlets such as BleepingComputer and CSO Online.

Core Capabilities and Protection Types

From a security perspective, its core value lies in research and expertise: malware analysis and reverse engineering, threat intelligence, AI agent and supply chain security, vulnerability disclosure, tech news investigation, media commentary, and conference speaking. The text also mentions his establishment of the R&D function at Manifold Security, involving AI supply chain integrity, detection pipelines for MCP servers and AI agent skills, and a runtime risk scoring framework for AI assets. However, these descriptions are more about personal credentials and research directions, and do not indicate that hey.ax itself offers a purchasable or deployable protection platform.

Pricing, Deployment, and Integration

The profile does not disclose pricing, payment methods, service packages, SLAs, or enterprise support processes, nor does it provide deployment and integration information such as SaaS, on-premises, API, or SIEM/SOAR integration. Therefore, it is not appropriate to evaluate it as a directly deployable security product. If there are collaboration needs, the page only provides an email contact for media, speaking engagements, and research consulting.

Pros and Cons

The pros include a solid research background covering high-value areas such as malware, open-source ecosystem supply chains, AI security, and vulnerability disclosure; his work has been cited by numerous major media outlets like WIRED, TechCrunch, BBC, and BleepingComputer, demonstrating strong influence and credibility. The cons are also clear: it lacks explanations of productization capabilities, and there are no compliance certifications, deployment methods, alert management, customer case studies, or commercial support details, making it difficult for buyers to evaluate through a standard security vendor process.

Target Audience & Access from China

It is more suitable for media organizations, conference organizers, security teams, or corporate PR/research departments for expert interviews, keynote speaking, threat research collaboration, or responsible disclosure communication; it is not suitable as a direct replacement for firewalls, EDR, SOC, or threat intelligence platforms. Information regarding access from China is not provided, and domain accessibility, payment methods, and contract delivery methods are all unknown. For domestic alternatives, consider local threat intelligence vendors, security consulting firms, or expert resources from universities and research institutions.