I find it so interesting Exegy wanted to weaponize their non-disclose agreement (NDA) against me, especially with it being used in a lawsuit against me four months later.
Their NDA is not even up to date on the laws regarding the matter, since it tries to silence whistleblowers from reaching parties that should be aware of certain things, like the Stock Exchange Committees (SEC) and other government agencies.
This NDA is dated 2014 and there has never been a new one that I am aware of
When I left the company I was never given any kind of exit interview that allowed them to explain any of the contracts I have signed working at the company. All I received was an email asking to return any of the Exegy property I had back to them, which I did.
On April 10, 2025 I sent an email to Exegy asking for copies of all the signed documents I have signed there, but they never responded to that.
This was after months of trying to work with them to disclose my findings to them. I even tried to be the bigger person and work with Exegy regarding the offers their attorneys reached out to me about, even though I wanted to work out their threats and extortion attempts first.
You can see my following articles related to that here
To make matters even worse they had me believing there was a true real bounty program that I could submit my findings too, but it wouldn't happen until Q3 (July-Sep). I am still wondering to this day if this bounty program actually even exists, because Exegy would never respond to any of my requests regarding it and I even reached out to them again in Q4 asking about it.
This really shows how Exegy is not interested in the flaws and vulnerabilities that they could have. I am sure their customers and government agencies would enjoy knowing all about this and how they don't take security matters very seriously.
It really makes me wonder what kind of breach in contract they could potentially have with their customers, because I know how I would want a contract with Exegy regarding security matters and their behavior would violate it.
Though this has truly been an interesting learning experience for me, since it has taught me all kinds of things.
How a previous Employer will lie about your performance and history to a government agency and to the court of Missouri. I was actually an excellent employee at Exegy that helped build Managed Services to where it is today.
They way people or attorneys will spin things and mislead things the courts, it is so interesting to see how they hide all the facts to make things look better in their favor.
How companies can lie to the courts on many different things without showing their facts. It still makes me wonder what judge would do if he realized he was being manipulated.
How companies are not even aware of their own documents and don't go out of their way to make sure they are up to date with laws.
How there needs to be better policies and rules in places to stop this kind of behavior, so security researchers can submit their findings without any kind of relation.
There are government agencies for filing complaints too so they can investigate things, though I am against this since I know the harm that it could cause and think it should be a last resort.
It truly makes me wonder why they would take all this court instead of settling it outside of it, because the direction I am working toward might eventually destroy an entire company.
I am still doing my research and trying to make sure my complaints are well written before sending them off, but I am also hoping Exegy's own customers will reach out to me and help me file the complaints in other countries after I send them an email with my complaint to the SEC.
To any Exegy employees reading this, just wanted to say hi and hopefully we will talk once again. Mark if you do read this… I miss talking to you man, hope you and your family are doing well.
Though I guess I should probably add, I am also trying to research the laws for other countries Exegy is in, because I want to figure out what laws they have broken by having their employees believe they can't talk with me.
I have come across these following things regarding that matter and I still need to read over them when I have time.
UK
- Article 8 (Human Rights Act 1998)
France
Canada
