This talk discusses the challenges of starting and running a company that specialises in vulnerability research. The typical problems likely faced include: How do you build a new team? And how do you encourage knowledge transfer and upskilling within your team? What targets do you focus on? How much engineering is required to support research? This talk will give insights and answer these questions, for the purpose of maintaining reliable, consistent, and high quality research outputs.