The company

Vilkax - built in Barcelona, for the world.

A small, EU-registered start-up headquartered in Barcelona, with a Baltic soul. We protect the human against the scammer. That's the whole job.

Our story

One team, one wolf.

Vilkax is a team of developers, finance, risk and fraud professionals working together to build a movement - people who have spent years on the dirty side of payments, in fraud teams, and across the engineering that ordinary users never see. Different backgrounds, the same quiet disbelief at what's being done to people online.

We were all quietly disgusted by how most protection software treats the people it claims to protect. Grey dashboards. Permission walls that don't explain themselves. AI that scrapes everything and shows you nothing back.

We wanted the opposite of that. A calm, transparent companion that asks before it looks, says exactly what it sees, and gets out of the way when it isn't needed. The kind of thing you'd actually want your parents to install.

That's the wolf. The name Vilkax comes from Vilkas, the Lithuanian and Baltic word for "wolf." That Baltic root is the soul of the name: we're a Barcelona start-up with a Baltic soul, and the EU was the right place to build something this serious about people's data.

A wolf is calm until it isn't. Alone it's already strong, but in a pack it's unbeatable, and the pack protects its own. That's the whole idea. When you're staring down a scammer, an account takeover or a too-good message at 2am, you are not alone. Vilkax is your pack. Code, finance, fraud and design is the short version of why those instincts keep showing up in the product.

The pack

We're intentionally small. Hiring is slow on purpose so every person who joins owns a real surface end-to-end.

  • Engineering + product Developers across the edge network, the native agents, the mobile apps and the interface.
  • Finance, risk + fraud Risk modelling, fraud detection and financial-crime expertise: the people who turn behaviour into a decision.
  • Native platforms iOS / macOS, Android and Windows leads. Each ships their platform on its own cadence.
  • Operations + support A small rotation on a 24/5 inbox. Average first-response is under an hour in EU business hours.
  • Compliance + legal EU counsel for European work, US counsel for CCPA, and a DPO on retainer.
  • Threat intel Analysts keeping the on-device pattern lists, sub-processor inventory and post-incident reviews honest.

No growth hackers. No marketing department. Word of mouth, an honest product, and a long essay or two per quarter. If that ever changes we'll say so here first.

Where we operate

Vilkax SL

Headquarters · Poble Nou, Barcelona, Spain

European Union

We'll publish the full registered address and company number here as soon as the public listing completes.

Imprint / legal entity

Required company details for the operator of this site. These fields are being finalised as our EU incorporation and public listing complete, and will be published here in full before our EU launch.

  • Registered name · to be published once incorporation is confirmed
  • Company / registration number · to be published once incorporation is confirmed
  • VAT number · to be published once issued
  • Registered address · to be published once the public listing completes
  • Contact · Contact us

Until these are published, treat the above as pending. The registered office is in Poble Nou, Barcelona, Spain (European Union).

Where the name comes from

Vilkax grows out of Vilkas, the Lithuanian and Baltic word for "wolf." We chose it for what the wolf stands for: strength, and the protection of the pack. A lone wolf is formidable. A pack is unbeatable, and it never leaves one of its own exposed.

That's the promise behind the product. Most scam victims aren't reckless. They're just busy, caught off-guard for a single moment. Vilkax stands with them in that moment so the one slip doesn't cost them everything. You're not facing it alone. You're in the pack.

Compliance posture

  • GDPR - data subject requests via our contact form or in-app DSR.
  • Data-protection impact - we assess the data-protection impact of new, higher-risk data flows before they ship.
  • Right to erasure - account deletion freezes your account immediately and schedules a permanent purge within 30 days. See the Privacy Policy for the exact mechanism.
  • EU data residency - primary storage and processing in EU regions.
  • Responsible disclosure - 24h initial response, named in our Hall of Fame.

Build trust by checking us out

Don't take our word for any of this - read the public commits, the security audits, the responsible-disclosure page. If something doesn't add up, write to us.