In early 2018, Google’s parent conglomerate Alphabet announced the birth of a new "independent" startup that was supposed to revolutionize cybersecurity. Chronicle was meant to be a new type of startup. One of its products was designed to structure, organize, and help companies understand their security related data—a "Google Photos for businesses’ network security," as Forbes put it when the company announced its first product this year.

Just a year and a half after the announcement, however, Chronicle has been folded back into Google, within its Cloud department—and some employees feel Chronicle management abandoned and betrayed the original vision. Chronicle’s CEO and chief security officer have already left and the chief technology officer is leaving later this month, Motherboard has learned. Others are eyeing the exit.

At the time it was unclear what Chronicle was going to be. But industry observers were excited for what they thought was going to be a significant disruptor in an industry that is full of relatively old technologies such as antivirus and firewalls, is rife with products that offer solutions in search of a problem and outright snake oil .

"We want to 10x the speed and impact of security teams’ work by making it much easier, faster and more cost-effective for them to capture and analyze security signals that have previously been too difficult and expensive to find," Gillett wrote in a blog post announcing Chronicle. "We know this mission is going to take years, but we’re committed to seeing it through."

The promise was radical: Chronicle would leverage machine learning and Alphabet’s near-endless well of security telemetry data about known malware and internet infrastructure and use it to help security teams at companies detect intrusions that could threaten a company’s network. Crucially, Chronicle would also remain independent from Google, according to Stephen Gillett, the startup’s CEO.

"A lot of people got royally fucked," one former employee added. Other sources spoke about how stock and employee compensation shook out as the startup was folded in. Chronicle was a "shitshow," the former employee added.

"People keep quitting. Sales doesn’t know what to do since there’s no real product roadmap anymore. Engineering is depressed for the same reason, folks have been finding jobs at startups or transferring to other parts of Google," the current employee said.

Employees have left because of a combination of Chronicle losing its original vision, a distant CEO, a lack of clarity about Chronicle’s future, and disappointment that the startup has been swallowed into Google, according to interviews with five current and former employees who were present across different stages of Chronicle's growth. Motherboard granted them anonymity to speak candidly about internal company events.

Do you work or used to work at Google? We’d love to hear from you. Using a non-work phone or computer, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, OTR chat at lorenzofb@jabber.ccc.de , or email lorenzo@motherboard.tv . You can contact Joseph Cox securely on Signal on +44 20 8133 5190, Wickr on josephcox, OTR chat on jfcox@jabber.ccc.de , or email joseph.cox@vice.com .

In an interview with The Information last month, Gillett seemed to try to have it both ways, admitting that some employees were disappointed about joining Google, while calling the folding "not [a] disappointment."

Gillett did not respond to a request for comment. When asked for comment, a Google spokesperson provided a link to a June blog post in which it announced it had acquired Chronicle .

"What culture does Chronicle have now?" they said. "It’s a zombie. Bunch of people eyeing the exit."

The use of the past tense there is important, according to one of the current employees.

Reflecting on his time there, Wiacek wrote that "Chronicle had one of the most healthy and vibrant corporate cultures I could imagine. Things were never perfect, but that’s important! Diversity and tension, in a trust-filled environment, are fuel for innovation." (Wiacek declined to comment for this article.)

In a blog post announcing his departure, Wiacek said he is leaving the entire Alphabet organization after 13 years there. In the post, he did not get into the reasons why he left, although he may have left a hint of the internal issues facing the former startup.

Gillett has left Chronicle for another role within Google. Co-founder and CSO Mike Wiacek has left the company entirely. Will Robison, the CTO, announced internally that he’s leaving too, according to two current employees and two former employees. Robinson’s planned departure has not been previously reported.

Industry observers got excited right away. Patrick Gray, the host of the influential Risky Business podcast, said on Twitter at the time that Chronicle could be "a meteor aimed at planet Threat Intel™," using the insider term for a part of the cybersecurity industry that helps other companies counter hackers. Some of Chronicle's leads had a long history in digging into cybercriminal and government hacking groups, and the company could take advantage of vast repositories of data from Virus Total and other Alphabet sources, Forbes explained in March .

After being a secret within X, Google's research and development organization, since 2016, Gillett publicly announced the birth of Chronicle in early 2018, describing its mission to help companies "find and stop cyber attacks before they cause harm." The idea was to offer a new platform to let companies track and analyze large troves of security-related data, and combine that with VirusTotal, a Google search engine and repository for malware, with the goal of helping them track hackers, prevent breaches, or investigate them.

But the loss of three of the highest ranking Chronicle employees, as well as the departure of other Chronicle workers, suggest that Google faces challenges in figuring out what to do with one of the industry's most hotly watched and anticipated cybersecurity companies. Like Google's digital rights and internet freedom division Jigsaw , Chronicle is yet another Google offshoot that has been launched with great hype but has failed to deliver on its promises.

"The honeymoon phase was really only about two weeks long, and then the Google ecosystem and the inability to be legitimately agile, and do rapid prototyping, and [be] actually innovative, became painfully apparent," the former employee said.

Those days didn't last, though. One of the former employees described Chronicle's position under X as a "double-edged sword," and another said the initial buzz only lasted a couple of weeks once they joined.

"Chronicle was in a very unique position, where we had more or less unlimited funds, in a way," because of its connection to X, one former employee added.

And X didn't only seemingly provide a lot of freedom, but it also came with a lot of money.

"The idea was—very, very early on—we're going to build a startup that's going to do great things, so very ambitious goals. And to be able to achieve this, we need to be outside of the usual framework of Google," another former Chronicle employee said.

Chronicle was supposed to be different from other cybersecurity firms; the plan was to have a company that really had the space to try new things in the field of cybersecurity, thanks in part to being under X, where founders are encouraged to create "radical new technologies to solve some of the world's hardest problems."

There was great enthusiasm inside the startup too. "Things were crazy," in a good way, one former employee said.

For how quickly Chronicle could actually move to experiment on projects, "You're a giant freighter on the ocean; you're not a sports car," they added.

Many of the Chronicle staff were longtime Google employees, bringing their own culture into the startup. Chronicle was only allowed to use Google's own tools for work even to the hindrance of projects, one former worker said.

"Any large company begins to approach the level of a government, for better and for worse," another said.

At the center of some of the sources' grievances with Chronicle was Gillett. Four sources described Gillett as distant or unavailable throughout the company's growth.

"He was a figurehead. He didn't care what the company was doing, outside of money," one former employee said.

"All of us got this fatigue at looking at ideas, and needed leadership from someone saying 'this is what we are going to do.’ That leadership did not come. Stephen, again, did not really know what was going on," another said.

"A lot of people felt betrayed when it occurred."

Earlier this year, at the business-oriented RSA security conference, Chronicle announced its new security platform, calling it Backstory. As Wired reported at the time, Backstory was supposed to be "a cloud platform on which companies can store their network-intelligence data indefinitely, allowing them to use Google's search smarts to comb through logs and gain insight into emerging digital security threats." Chronicle also announced that it had partnered with antivirus companies Avast and Proofpoint to share data, and that it was going to integrate Backstory inside the endpoint security product offered by Carbon Black.