Tall Poppy

Name: Tall Poppy
Brand: Tall Poppy

Employee safety for a connected world ✨

Est 2018|Valuation $12M|Raised $2.3M

LinkedIn 938|Website|FTEs 9

Published Jul 21, 2026

01Common complaints

1. Organizations that primarily need low-cost, high-volume data broker removals. Consumer-focused removers may be more cost-effective if the primary requirement is bulk broker removals. 2. Organizations that require publicly documented SOC 2 / ISO certifications before engaging in vendor evaluation. Public documentation of those certifications was not located in this research pass. 3. Organizations that require a full-service physical executive protection program. Tall Poppy may complement such services but is unlikely to replace dedicated protective intelligence and physical security operations. 4. Organizations seeking a highly standardized, self-serve SaaS with extensive marketplace reviews. Tall Poppy appears more service- and program-oriented with limited review-platform visibility.

Deal disqualifiers (poor fit)

Organizations that only require traditional phishing-focused security training and do not want to engage with personal-account incident response.
Organizations that require publicly documented compliance certifications as a gating criterion before pilot discussions.

Limitations suggested by vendor materials

Availability model: The service is offered primarily through employers and partner organizations; direct individual access is described as a future capability.

Limitations inferred from public footprint

No public pricing, which complicates early-stage budgeting and vendor comparisons.
Enterprise security and compliance documentation is not publicly detailed, which can extend procurement timelines.
Limited mainstream review coverage, increasing reliance on direct references and pilot results.

Data retention (privacy policy detail)

The vendor Privacy Policy indicates personal information may be retained for up to two years past account termination, with caveats for legal requirements. Enterprise contracts should be used to confirm retention options and contractual controls.

02Why they buy

Unique selling points supported by evidence

Employer-delivered digital safety program: Vendor positions the offering as a benefit-oriented service that supports employees and managers.
Combination of guidance and response: The vendor describes an integrated approach combining an app, training, and incident-response support.
Founder background: Public profiles indicate the founder has prior roles and experience in security-related work.

Claims requiring validation

Claims about preventing harassment escalation to account compromises or other security incidents are plausible but were not accompanied by independently verified outcome metrics in the materials reviewed.

03Field reports

Review platform reality check (G2 / TrustRadius / Gartner Peer Insights)

Searches did not surface a credible Tall Poppy product profile or review presence on Gartner Peer Insights, G2, TrustRadius, or Capterra in this research pass. This limits access to independently collected review samples.

Vendor-published endorsements

The vendor publishes endorsements from several public figures and sector leaders. These endorsements describe positive experiences or support for the concept. Examples include endorsements attributed to Ellen K. Pao, Anita Sarkeesian (who characterized the service positively), and Katherine Maher. These are vendor-selected endorsements and are not equivalent to systematically collected product reviews.

Community/social feedback (limited)

There are limited public community mentions indicating employer-provided use of Tall Poppy. A single anecdotal community mention referenced an employer-provided Tall Poppy program and noted a perceived subsidized cost; this data point is anecdotal and not independently verified.

Common reasons cited for choosing the service

From vendor positioning and third-party mentions, organizations appear to select Tall Poppy to provide employee-facing response capabilities when harassment occurs, and to avoid building an internal specialized team for personal account incident response.

Common complaints / negatives (what’s missing)

Publicly observable negatives or procurement impediments:

Low transparency on pricing (demo-only sales model).
Limited public documentation of enterprise security controls and certifications.
Limited independently verifiable outcome metrics and third-party review footprint.

Public case studies

No detailed, quantified case studies were located on the vendor site in the reviewed materials.

Credible third-party contextual mentions (not formal case studies)

Press and academic mentions cite engagement or advisory roles with streaming platforms; these indicate industry relevance but do not provide performance metrics.

Critical evaluation of outcome claims

Vendor materials emphasize preventing harassment escalation and improving safety, but no independently verified impact metrics — for example, specific incident-reduction figures, remediation timing statistics, or measurable behavior-change data from training — were found in public materials. What to request from the vendor during evaluation: - Aggregated incident-response SLAs and time-to-first-response. - Takedown/remediation success rates by broker/site category, with methodology. - User adoption and completion metrics for critical security controls (e.g., multi-factor authentication adoption). - Evidence from training programs demonstrating pre/post behavior changes.

04Best fit

Company sizes

Most plausible fit: mid-market to very large enterprises.
Smaller organizations may also be suitable if they have high-risk staff such as journalists, activists, or executives and budget flexibility.

Industries / verticals

Media & journalism; creator platforms; gaming/streaming ecosystems.
Advocacy and nonprofit organizations; political and civic tech entities.
Technology companies with prominent public leadership or exposure to public controversy.

Roles and personas

Buyers: CISO / Security leadership, HR/People Ops, Trust & Safety, Legal, Communications/PR, Executive Protection.
Users: public-facing employees, executives, moderators, community managers, DEI leaders, journalists, and contracted creators/streamers.

Pain points addressed

Lack of internal playbooks for doxxing and harassment targeting staff.
Need for personal-account incident response in addition to corporate incident response.
Employee safety and retention concerns arising from harassment.

Qualification criteria (good fit)

Elevated likelihood of targeted harassment for employees.
Willingness to include employee-centric safety measures as part of benefits or security programs.
Operational capacity to run a benefits or programmatic rollout and communications.

05The pitch

What the product does (core value proposition)

Tall Poppy is a B2B personal digital safety and anti-harassment offering positioned as an employee benefit and as a support layer for organizational security teams. It is designed to assist organizations in protecting employees—particularly public-facing, high-risk, or targeted staff—from online harassment that can escalate into doxxing, account takeovers, fraud/social engineering, and physical-safety threats. The product mix (as described by Tall Poppy) includes: - A web app with step-by-step guidance for personal security best practices (password manager, 2FA, account hardening, etc.). - Training/workshops that incorporate security awareness with a harassment-focused perspective. - Incident response support (human help during an active attack), described by the vendor as trauma-aware. - Digital footprint assessments and takedown/remediation support (e.g., reducing exposed addresses/phone numbers on people-search/data broker sites). - Social listening and hate-site monitoring / crisis response resources (described on the vendor homepage). These product elements are vendor-described on Tall Poppy’s site; external references indicate Tall Poppy has advised or worked with organizations in creator and streaming ecosystems.

Target market and market positioning

Primary target market (inferred from positioning and references): - Mid-market to enterprise organizations that face elevated employee risk: media/newsrooms, platforms with creator ecosystems, advocacy/nonprofits, political organizations, and technology companies with public-facing staff. - Buyer functions likely to be involved: Security, People/HR, Trust & Safety, Legal, and Executive Protection. Market positioning: Tall Poppy sits between traditional security awareness training vendors (focused on phishing and corporate controls), executive protection/protective intelligence firms (typically higher-cost and executive-focused), and consumer privacy/data broker removal services (not designed for incident response or employer programs). The vendor emphasizes addressing gaps in organizational support for employees' personal digital safety.

Get a comprehensive analysis of Tall Poppy including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →

Published Jul 21, 2026

01Common complaints

Organizations that primarily need low-cost, high-volume data broker removals. Consumer-focused removers may be more cost-effective if the primary requirement is bulk broker removals.
Organizations that require publicly documented SOC 2 / ISO certifications before engaging in vendor evaluation. Public documentation of those certifications was not located in this research pass.
Organizations that require a full-service physical executive protection program. Tall Poppy may complement such services but is unlikely to replace dedicated protective intelligence and physical security operations.
Organizations seeking a highly standardized, self-serve SaaS with extensive marketplace reviews. Tall Poppy appears more service- and program-oriented with limited review-platform visibility.

Deal disqualifiers (poor fit)

Organizations that only require traditional phishing-focused security training and do not want to engage with personal-account incident response.
Organizations that require publicly documented compliance certifications as a gating criterion before pilot discussions.

Limitations suggested by vendor materials

Availability model: The service is offered primarily through employers and partner organizations; direct individual access is described as a future capability.

Limitations inferred from public footprint

No public pricing, which complicates early-stage budgeting and vendor comparisons.
Enterprise security and compliance documentation is not publicly detailed, which can extend procurement timelines.
Limited mainstream review coverage, increasing reliance on direct references and pilot results.

Data retention (privacy policy detail)

The vendor Privacy Policy indicates personal information may be retained for up to two years past account termination, with caveats for legal requirements. Enterprise contracts should be used to confirm retention options and contractual controls.

02Why they buy

Unique selling points supported by evidence

Employer-delivered digital safety program: Vendor positions the offering as a benefit-oriented service that supports employees and managers.
Combination of guidance and response: The vendor describes an integrated approach combining an app, training, and incident-response support.
Founder background: Public profiles indicate the founder has prior roles and experience in security-related work.

Claims requiring validation

Claims about preventing harassment escalation to account compromises or other security incidents are plausible but were not accompanied by independently verified outcome metrics in the materials reviewed.

03Field reports

Review platform reality check (G2 / TrustRadius / Gartner Peer Insights)

Searches did not surface a credible Tall Poppy product profile or review presence on Gartner Peer Insights, G2, TrustRadius, or Capterra in this research pass. This limits access to independently collected review samples.

Vendor-published endorsements

Community/social feedback (limited)

There are limited public community mentions indicating employer-provided use of Tall Poppy. A single anecdotal community mention referenced an employer-provided Tall Poppy program and noted a perceived subsidized cost; this data point is anecdotal and not independently verified.

Common reasons cited for choosing the service

Common complaints / negatives (what’s missing)

Publicly observable negatives or procurement impediments:

Low transparency on pricing (demo-only sales model).
Limited public documentation of enterprise security controls and certifications.
Limited independently verifiable outcome metrics and third-party review footprint.

Public case studies

No detailed, quantified case studies were located on the vendor site in the reviewed materials.

Credible third-party contextual mentions (not formal case studies)

Press and academic mentions cite engagement or advisory roles with streaming platforms; these indicate industry relevance but do not provide performance metrics.

Critical evaluation of outcome claims

What to request from the vendor during evaluation:

Aggregated incident-response SLAs and time-to-first-response.
Takedown/remediation success rates by broker/site category, with methodology.
User adoption and completion metrics for critical security controls (e.g., multi-factor authentication adoption).
Evidence from training programs demonstrating pre/post behavior changes.

04Best fit

Company sizes

Most plausible fit: mid-market to very large enterprises.
Smaller organizations may also be suitable if they have high-risk staff such as journalists, activists, or executives and budget flexibility.

Industries / verticals

Media & journalism; creator platforms; gaming/streaming ecosystems.
Advocacy and nonprofit organizations; political and civic tech entities.
Technology companies with prominent public leadership or exposure to public controversy.

Roles and personas

Buyers: CISO / Security leadership, HR/People Ops, Trust & Safety, Legal, Communications/PR, Executive Protection.
Users: public-facing employees, executives, moderators, community managers, DEI leaders, journalists, and contracted creators/streamers.

Pain points addressed

Lack of internal playbooks for doxxing and harassment targeting staff.
Need for personal-account incident response in addition to corporate incident response.
Employee safety and retention concerns arising from harassment.

Qualification criteria (good fit)

Elevated likelihood of targeted harassment for employees.
Willingness to include employee-centric safety measures as part of benefits or security programs.
Operational capacity to run a benefits or programmatic rollout and communications.

05The pitch

What the product does (core value proposition)

The product mix (as described by Tall Poppy) includes:

A web app with step-by-step guidance for personal security best practices (password manager, 2FA, account hardening, etc.).
Training/workshops that incorporate security awareness with a harassment-focused perspective.
Incident response support (human help during an active attack), described by the vendor as trauma-aware.
Digital footprint assessments and takedown/remediation support (e.g., reducing exposed addresses/phone numbers on people-search/data broker sites).
Social listening and hate-site monitoring / crisis response resources (described on the vendor homepage).

These product elements are vendor-described on Tall Poppy’s site; external references indicate Tall Poppy has advised or worked with organizations in creator and streaming ecosystems.

Target market and market positioning

Primary target market (inferred from positioning and references):

Mid-market to enterprise organizations that face elevated employee risk: media/newsrooms, platforms with creator ecosystems, advocacy/nonprofits, political organizations, and technology companies with public-facing staff.
Buyer functions likely to be involved: Security, People/HR, Trust & Safety, Legal, and Executive Protection.

Market positioning: Tall Poppy sits between traditional security awareness training vendors (focused on phishing and corporate controls), executive protection/protective intelligence firms (typically higher-cost and executive-focused), and consumer privacy/data broker removal services (not designed for incident response or employer programs). The vendor emphasizes addressing gaps in organizational support for employees' personal digital safety.

Get a comprehensive analysis of Tall Poppy including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →