http://carnal0wnage.attackrese...

That is a valid question, and often the case. In our case however we are 11 full time and another 6 or so part time people. We have a building, and locations in several states. You can, for example, look up our papers published by blackhat, defcon, etc. to see more than just what we post on our blog. Here is one of my old favorites: https://www.defcon.org/images/... I know at least one of the other companies, InGuardians, is roughly similar in size, and many of its people were foundational contributors to things such as SANS. Dell Secureworks is one of the pre-eminent security organizations in the world and are a very large group V.

I'm going to put out a blog post soon to give more detail, but essentially it is private contractors who used to work with the PLA and are now under-employed trying to make money on the side. At least that is my theory.