Documented path
Born 1981 (Honolulu per secondary profiles); dropped out of high school for about two years before returning; first professional security role at age 17 developing tools for the U.S. Department of Defense; continued exploit and audit work, then launched Metasploit as a public exploit research resource in 2003 while still in his early 20s.
Born 1981; childhood reportedly included moves (Honolulu origin in secondary profiles); left high school for two years before returning and entering security work young; family finances not well documented.
Co-founder and CTO of runZero (cyber asset attack surface management); former Rapid7 chief research officer and Metasploit chief architect.
Where the conditions came from
Each is placed on a −1 to 3 scale from documented evidence, and the three are never added together. A combined total would rank H. D. Moore against other people. Held apart, they explain why this path ran differently from another one—which is the only comparison this project supports.
The marble itself
+2Tailwind
What capability, drive, or early skill is documented in the person rather than their surroundings?
Self-taught hacker from childhood, doing contract security work for the U.S. Department of Defense at 17. Founded Metasploit at ~22, defining modern penetration testing. Exceptional self-driven security research ability despite dropping out of high school for two years.
Where it was dropped
0Neither way
What money, family standing, network, or permission was already in place before the work began?
Born in Honolulu, family lived in 13 different states before settling in Austin, TX. Mother was a medical transcriptionist. No documented family wealth, domain connections, or educational investment. Frequent moves suggest instability.
The shape of the track
+1Tailwind
What place, timing, institution, or peer group made the next step available?
Christopher Walker (math/computer teacher at alternative high school) recognized his talent and recruited him to run school IT, connecting him to DoD contract work. Online security/BBS community was the primary ecosystem. No elite institutional access. Largely self-created network.
A −1 is a documented headwind, not a missing value; a 0 means the sources record nothing notable either way. Annotation confidence: Medium. These are analyst readings of what the sources record, not measurements of merit, talent, or effort. The twenty-two scored dimensions remain available inside the deeper research detail.
What moved through the conditions
This records repeated behaviour or recovery described by sources; it is not a grit or merit score.
This is an unchosen opening or condition in the record, not an estimate of how much luck caused the outcome.
Strongest documented signals: Early online platform, Direct domain exposure, Frontier geography.
Describes the starting position, not what the person later made of it.
Strongest observed levers: Domain proximity, Started serious reps before 20, Prior reps.
Measures what was present, not whether it was inherited, earned, self-built, external, or mixed.
The timeline below shows the sequence of work and transitions around the selected early milestone. It is evidence of a path, not proof that every step was necessary.
Dominant figure at the top of a field. The tier summarizes documented career recognition through the data cutoff—not H. D. Moore's worth or future potential.
Question four · where did the leverage come from?
Each non-zero lever gets a best-supported origin, evidence signals, and confidence. Unresolved is the honest default when the biography cannot distinguish self-built, advantage-enabled, earned, external, or mixed.
One or more documented starting advantages plausibly enabled this lever.
One or more documented starting advantages plausibly enabled this lever.
One or more documented starting advantages plausibly enabled this lever.
One or more documented starting advantages plausibly enabled this lever.
One or more documented starting advantages plausibly enabled this lever.
A structural wave is external to the person, even when their position improved access to it.
One or more documented starting advantages plausibly enabled this lever.
One or more documented starting advantages plausibly enabled this lever.
This is a bounded inference from the current annotations—not a claim about private effort, merit, or the percentage of H. D. Moore's outcome attributable to any origin.
Structural luck, Encounter luck, Event luck, Outcome variance can change every arrow in the path. This successful-only dataset cannot observe the near-identical paths that did not break through, so luck stays visible and unscored.
Multiplying capacity documented later in the path. Measures what was present, not whether it was inherited, earned, self-built, external, or mixed.
Access or conditions documented near the beginning of the path. Zero means "no clear evidence in reviewed sources," not "advantage was absent."
Not documented in detail in reviewed sources; some secondary profiles describe a difficult childhood and early independence, but primary family financial/domain facts are sparse.
Not documented in reviewed sources.
Moore’s path is self-driven technical depth: DoD security tooling at 17 after dropping out of high school, then founding Metasploit at ~22, which defined modern penetration testing. Family capital and elite-school pipelines are not documented; advantages center on early scarce skills, online security communities, and intense hands-on exploit practice. Later roles include Rapid7 CRO after Metasploit’s 2009 acquisition and co-founding runZero (formerly Rumble).
advantage confidence: Medium · source count: 5 · audit: partial_source_verification · status: subagent_researched_beta