Contact and Professional Identity
Name: Johan Brissmyr
Current Role: CEO & Co-Founder, Castle.io
Location: Brooklyn, New York, United States
LinkedIn: [https://www.linkedin.com/in/brissmyr](https://www.linkedin.com/in/brissmyr)
Other Profiles:
- Twitter/X: [https://x.com/brissmyr](https://x.com/brissmyr)
Educational Background
Johan Brissmyr holds a Master of Science (M.Sc.) in Computer Science from The Faculty of Engineering at Lund University, Sweden (2001-2005).
Language Proficiency
- Swedish: Native or bilingual proficiency
- English: Full professional proficiency
- German: Elementary proficiency
Professional Experience
Castle.io
- Position: CEO & Co-Founder
- Location: San Francisco Bay Area / Brooklyn, NY
- Company Overview: Castle.io is a developer-first fraud prevention platform that specializes in behavioral detection to prevent account takeover (ATO) and online abuse. It offers solutions for bot detection, fraud prevention, and user identity security, integrated from network edge (Cloudflare partnership) to in-app levels.
- Company Highlights:
- Founded by Johan Brissmyr and Sebastian Wallin, the company participated in Y Combinator in 2016.
- Raised a total funding of approximately $13.7 million over multiple rounds, including a $9.2M Series A led by Index Ventures.
- Employs approximately 20 staff based in San Francisco with operations and culture extending to Brooklyn’s Williamsburg area.
- Actively publishing thought leadership on fraud prevention, account abuse, and bot detection via the Castle blog and Johan’s authored articles.
- Recently announced a no-code, fully managed unified bot and fraud defense solution integrated with Cloudflare (May 2025).
- Continues advancing anti-abuse technology in response to evolving bot automation, leveraging AI for reverse engineering of detection logic rather than directly powering bots.
Prior Experience Highlights
- Past roles at Userbin, Popdevelop (web development shop co-founded with Sebastian Wallin), ARM, and Axis Communications.
- Professional trajectory includes significant engineering and cyber security experience preceding Castle’s founding.
- Known among peers for a skilled software development ability coupled with a strong focus on quality and results.
Thought Leadership and Industry Contributions
- Publications: Johan regularly authors detailed posts about account takeover prevention, bot detection, fraud prevention strategies, and challenges in the online identity security space. Notable articles include:
- “Perimeter-based Security Doesn’t Stop Account Takeovers — It Postpones Them” (May 2018)
- “8 Things To Avoid When Building Account Takeover Prevention In-House” (May 2018)
- “Reactive vs Proactive Account Takeover Prevention” (April 2018)
- “Stop Calling It Account Takeover ‘Fraud’” (April 2018)
- Public Engagement: Regularly shares insights on LinkedIn and X about advanced fraud prevention, hiring philosophies at Castle, AI-driven threats, and challenges in bot detection technology.
- Recruitment and Team Building: Actively involved in scaling Castle’s talent acquisition systems, emphasizing a “high-touch” talent engine designed to find and engage exceptional candidates.
- Industry Interviews: Featured in interviews and industry press where he discusses common fraud methods and solutions for businesses handling online transactions.
Key Professional Themes and Expertise
- Behavioral Fraud Detection: Focused on detecting fraudulent behavior, not just perimeter security, shifting towards predictive and proactive fraud prevention models.
- Bot and Automation Defense: Expertise in combating anti-detect automation frameworks, bot browsers, and reverse engineering tactics that challenge traditional bot detection systems.
- Account Takeover (ATO) Prevention: Advocates for treating ATO as a unique threat requiring specialized detection at the login point rather than transaction level, acknowledging evolving sophistication in attack patterns.
- Developer and Platform-Centric Security Solutions: Developer-first approach with APIs and integrations designed for easy implementation by security and product teams, aiming to minimize operational friction.
Company and Market Insights Relevant to Position
- Castle.io positions itself as a pioneer in behavioral identity security, delivering solutions that integrate with existing developer workflows and infrastructure providers (such as Cloudflare).
- The company addresses a gap in the market where traditional anti-fraud tools are inadequate against sophisticated attackers leveraging AI, proxies, and advanced automation.
- Recent product expansions include no-code solutions and integrated bot/fraud defense across multiple layers of platform interaction, targeting both enterprise and mid-sized clients.
- Castle maintains an active content presence educating the market and peers on the distinction between fraud and account takeover, emphasizing the importance of nuanced detection models.
This profiling presents Johan Brissmyr as a technically skilled, visionary leader with deep expertise in cybersecurity, specifically focused on account security, fraud prevention, and bot mitigation within software platforms. His role as CEO at Castle.io places him at the helm of a company strategically innovating in identity and fraud defense using behavioral detection technology and developer-centric design, supported by recognized venture capital backing and accelerative experiences such as Y Combinator. His content and public engagement confirm continuous thought leadership and a modern approach to combating online abuse and security challenges.
