H. D. Moore

Founders / operators · Founder/Entrepreneur · milestone at age 22 ·T2 Field-leading

Milestone (age 22)

Founded the Metasploit Project in summer 2003 at about age 22, creating an open-source penetration-testing framework that became the industry-standard exploit development and testing platform.

Born 1981 (Honolulu per secondary profiles); dropped out of high school for about two years before returning; first professional security role at age 17 developing tools for the U.S. Department of Defense; continued exploit and audit work, then launched Metasploit as a public exploit research resource in 2003 while still in his early 20s.

Think your path resembles H. D. Moore's?Compare the visible ingredients, then see exactly where the comparison stops working.

Am I the next H. D. Moore? →

Starting point

Born 1981; childhood reportedly included moves (Honolulu origin in secondary profiles); left high school for two years before returning and entering security work young; family finances not well documented.

Current position (2025)

Co-founder and CTO of runZero (cyber asset attack surface management); former Rapid7 chief research officer and Metasploit chief architect.

How this path compounded

01 Starting advantages

8/24 starting-position score

Strongest documented signals: Early online platform, Direct domain exposure, Frontier geography.

Describes the starting position, not what the person later made of it.

Cohort percentile: 72

02 Built or converted leverage

14/25 multiplying-capacity score

Strongest observed levers:Domain proximity, Started serious reps before 20, Prior reps.

Measures what was present, not whether it was inherited, earned, self-built, external, or mixed.

Cohort percentile: 72

03 Compounding trajectory

7 documented steps

The timeline below shows the sequence of work and transitions around the selected early milestone. It is evidence of a path, not proof that every step was necessary.

Milestone at age 22

04 Observed career standing

T2 · Field-leading

Dominant figure at the top of a field. The tier summarizes documented career recognition through the data cutoff—not H. D. Moore's worth or future potential.

How tiers work →

Question four · where did the leverage come from?

H. D. Moore's leverage provenance

Each non-zero lever gets a best-supported origin, evidence signals, and confidence. Unresolved is the honest default when the biography cannot distinguish self-built, advantage-enabled, earned, external, or mixed.

Started serious reps before 201/1

Advantage-enabledmedium confidence

One or more documented starting advantages plausibly enabled this lever.

Rare early tools (1/2)Early online platform (2/2)

Domain proximity2/2

Advantage-enabledmedium confidence

One or more documented starting advantages plausibly enabled this lever.

Direct domain exposure (2/2)Frontier geography (1/2)

Prior reps2/3

Advantage-enabledmedium confidence

One or more documented starting advantages plausibly enabled this lever.

Rare early tools (1/2)Early online platform (2/2)

Scarce skill depth2/3

Advantage-enabledmedium confidence

One or more documented starting advantages plausibly enabled this lever.

Rare early tools (1/2)Early online platform (2/2)

Native distribution2/3

Advantage-enabledmedium confidence

One or more documented starting advantages plausibly enabled this lever.

Early online platform (2/2)

Structural wave / timing2/3

Externalmedium confidence

A structural wave is external to the person, even when their position improved access to it.

Frontier geography (1/2)Early online platform (2/2)

Concentration intensity2/3

Advantage-enabledmedium confidence

One or more documented starting advantages plausibly enabled this lever.

Adversity / constraint catalyst (1/2)

Elite ecosystem network1/3

Advantage-enabledmedium confidence

One or more documented starting advantages plausibly enabled this lever.

Frontier geography (1/2)

This is a bounded inference from the current annotations—not a claim about private effort, merit, or the percentage of H. D. Moore's outcome attributable to any origin.

Luck is not a leftover score.

Structural luck, Encounter luck, Event luck, Outcome variance can change every arrow in the path. This successful-only dataset cannot observe the near-identical paths that did not break through, so luck stays visible and unscored.

Within Founders / operators, H. D. Moore's starting-advantage total is at the 72th percentile. Separately, their built or converted leverage total is at the 72th percentile. Other T2 profiles average 7.9 / 24 starting advantage and 12.3 / 25 leverage. Similar scores appear in other tiers, so these figures describe positioning—not a cause.

Trajectory

1998 · age 17
Took a DoD-linked security research/development role writing exploits
Traffic-capture tooling while still a teenager.
2003 · age 22
Founded the Metasploit Project
A public exploit research and penetration-testing framework.
2006 · age 25
Ran the Month of Browser Bugs full-disclosure campaign
Driving browser patches and industry attention.
2009 · age 28
Metasploit was acquired by Rapid7
Moore became a senior security executive while remaining Metasploit architect.
2016 · age 35
Left Rapid7 after years as chief research officer / Metasploit chief architect.
2018 · age 37
Co-founded Rumble (later runZero)
For network discovery and attack-surface management.
2022 · age 41
Company rebranded to runZero
Continued as co-founder and CTO.

Primary leverage engine

Technical depth

Scarce technical / intellectual depth

Secondary engine

Open-source distribution

Built/converted leverage

14 / 25

evidence: High

Built or converted leverage

Multiplying capacity documented later in the path. Measures what was present, not whether it was inherited, earned, self-built, external, or mixed.

Started serious reps before 20

1/1

Prior reps

2/3

Scarce skill depth

2/3

Native distribution

2/3

Elite ecosystem network

1/3

Complementary team

0/2

Structural wave / timing

2/3

Concentration intensity

2/3

Capital safety

0/2

Domain proximity

2/2

Starting-advantage scores (0–2 each)

Access or conditions documented near the beginning of the path. Zero means "no clear evidence in reviewed sources," not "advantage was absent."

Family financial platform

0/2

Parent / family domain

0/2

Inherited audience / network

0/2

Elite institution pipeline

0/2

Frontier geography

1/2

Rare early tools

1/2

Dedicated mentor / coach

0/2

Exceptional peer / cofounder

0/2

Early online platform

2/2

Direct domain exposure

2/2

Prodigy / innate ability

1/2

Adversity / constraint catalyst

1/2

Family context

Not documented in detail in reviewed sources; some secondary profiles describe a difficult childhood and early independence, but primary family financial/domain facts are sparse.

Parent / family domain

Not documented in reviewed sources.

Archetype & tags

Self-created domain repetitionMetasploitDoD teen workexploit researchopen source securityfull disclosureRapid7runZero

Evidence summary

Moore’s path is self-driven technical depth: DoD security tooling at 17 after dropping out of high school, then founding Metasploit at ~22, which defined modern penetration testing. Family capital and elite-school pipelines are not documented; advantages center on early scarce skills, online security communities, and intense hands-on exploit practice. Later roles include Rapid7 CRO after Metasploit’s 2009 acquisition and co-founding runZero (formerly Rumble).

advantage confidence: Medium · source count: 5 · audit: not_independently_audited · status: subagent_researched_beta

Sources

Related — same primary engine

Mark Zuckerberg

Founder/Entrepreneur · age 19

Launched Facebook at Harvard

Leverage 19/25T1

Michael Truell

Founder/Entrepreneur · age 23

Co-founded Anysphere/Cursor

Leverage 19/25T1

Alfred Wahlforss