Kevin Mahaffey

Who they are

Kevin Mahaffey is Co-Founder and Co-CTO at SNR.vc — previously co-founded Lookout, the mobile security company valued at over $1 billion, at age 22.

Person

Kevin started programming at 8, and by his early twenties had co-founded DailyWireless.com — a wireless-tech publication eventually acquired by Tippit, Inc. — before going on to co-found Lookout at 22 as CTO. Lookout became one of the defining mobile security companies of its era, crossing a $1 billion valuation, and Kevin ran its technology through that entire arc. After Lookout, he moved to the investing side, co-founding SNR.vc, an early-stage firm in San Francisco focused on AI, robotics, biotech, SaaS, and cybersecurity — where he holds the unusual dual title of Co-Founder and Co-CTO, signaling he still thinks of himself as a builder, not just a capital allocator. His portfolio of 50+ startups includes Beeper, Knostic, Saleor Commerce, Monomer Bio, dcbel, Salt Security, and Boundless. He speaks regularly at Black Hat, DEF CON, and RSA Conference, and has appeared at the World Economic Forum — he's been a fixture in security research circles for well over a decade. He writes at writing.snr.vc, a Substack covering defensibility, application-layer thinking, and investment philosophy. The through-line is a founder-engineer who built deep security credibility at the platform layer, then moved upstream to fund the next generation of technical founders.

Company

SNR.vc is an early-stage venture firm co-founded by Kevin Mahaffey and Amit Gupta, based in San Francisco. The firm invests across AI, robotics, biotech, SaaS, and cybersecurity, with a portfolio that has grown to 50+ startups including Beeper, Knostic, Salt Security, Saleor Commerce, Monomer Bio, and dcbel. Kevin's Co-CTO title at a VC firm is unusual and deliberate — it signals SNR positions itself as technically hands-on with founders, not just financial partners. Amit Gupta, the co-founder and partner, brings experience from Qualcomm, Lookout, and Benchling, meaning the firm's DNA is deeply operator-driven. SNR publishes ongoing investment thinking at writing.snr.vc, which suggests an active effort to build a public intellectual presence alongside the portfolio.

Market

SNR operates in the seed and early-stage venture market, competing with other technically-oriented seed funds for deals in security, AI, and deep tech. The firm differentiates on operator credibility — both founders built and scaled companies rather than coming from a traditional finance background — a positioning increasingly common among post-founder VCs but still a genuine differentiator at the seed stage. Security and AI infrastructure remain highly active categories for early-stage capital, with ongoing regulatory and geopolitical pressure around data security making the thesis durable.

Network

Kevin's closest named collaborator is Amit Gupta, his co-founder and partner at SNR, who previously worked at Qualcomm, Lookout, and Benchling — a shared history that goes back to Lookout. His portfolio relationships span founders at Beeper, Knostic, Salt Security, Saleor Commerce, Monomer Bio, and dcbel, giving him a wide operational network across security, AI, and biotech.

Amit Gupta· Co-Founder and Partner at SNR.vc

How they likely show up

Co-founded Lookout at 22 and ran it as CTO through a $1B+ valuation → he thinks in long company-building arcs, not short cycles.
Holds the title Co-CTO at a VC firm → he almost certainly stays technically engaged with portfolio companies, not just at the board level.
Programming since age 8 and a recurring speaker at Black Hat and DEF CON → the security-researcher identity is foundational, not ornamental; he'll go deep on technical architecture fast.
Active writer at writing.snr.vc on defensibility and investment philosophy → comfortable articulating frameworks publicly; he's likely thought carefully about the questions you might ask him.
Hybrid role-type pattern (founder + investor simultaneously) → high agency, probably runs meetings with a clear agenda and moves quickly to 'so what are we doing?'.
Portfolio of 50+ companies → he's doing a high volume of early pattern-matching; clear, specific pitches will land better than long narrative wind-ups.

Conversation tips

→ Reference a specific post from writing.snr.vc — he's put real thinking into that Substack and will notice if you've read it.
→ Come with a specific technical or architectural question, not a generic product overview — his CTO background means he'll respect depth over polish.
→ Ask about the Lookout founding story at 22, not just as flattery but because it shaped his investing thesis; he's pattern-matching for founders with that same early technical conviction.
→ Be concrete about defensibility — that's a stated theme in his writing, and vague moat claims will fall flat.
→ Name a specific portfolio company (Beeper, Knostic, Salt Security) if relevant — it shows you've done the work on SNR, not just on him.

Toolbox

Openers

Open on writing.snr.vc — he runs a Substack specifically on defensibility and investment philosophy, which is an unusual commitment for a VC; asking what prompted him to write that publicly is a genuine opener.
Reference the Co-CTO title at SNR — it's structurally unusual for a venture firm and signals something intentional about how he wants to engage with founders; asking what that looks like in practice will get a real answer.
Bring up his Black Hat or DEF CON talks — he's been a security research speaker for well over a decade, and connecting his research past to his current investment thesis (security is a core SNR category) is a natural thread.

Discovery questions

You kept the Co-CTO title at SNR rather than just going GP — what does that actually look like day-to-day with portfolio companies?
Lookout was mobile security at a moment when the category barely existed — how does that experience of defining a category shape what you're looking for at the seed stage now?
Your Substack focuses on defensibility — where do you see founders most often getting that wrong in AI and security right now?

Avoid

Don't pitch or discuss a company with vague technical differentiation — his entire career has been as a hands-on engineer and security researcher, and he'll probe the architecture; come with specifics or don't go there.

Make it yours