Mission
focused:
For nearly a decade, we have been driven to disrupt cybercrime at the source, while ensuring individuals can live a safe digital life.
From innovating solutions that prevent identity-based attacks to supporting efforts that find missing and exploited children to taking down criminal operations – we’re turning the tables on cybercriminals.
Our mission is clear: make the internet safer for everyone.
Why cybercrime disruption is a business imperative
Cybercriminals are operating like professional enterprises – fast, agile, and globally connected. To outpace them, defenders must adopt the same playbook: collaboration, intelligence sharing, and preemptive action.
SpyCloud works to:
Prevent targeted attacks stemming from stolen identity data like credentials, session cookies & PII and deliver Responsible Disclosures of breach data to minimize impact.
Support the intelligence communities efforts to takedown large criminal enterprises and threat actors with comprehensive investigations and enriched training.
Team up and enable those bringing justice to victims of cybercrime through intelligence sharing.
How SpyCloud disrupts cybercrime
We infiltrate criminal communities to recapture breach data, malware logs, phished data, and infrastructure details – before they can be used for attacks.
analytics
We convert raw data into enterprise-grade identity intelligence that gives the insights needed to drive comprehensive investigations and proactive defense.
We work hand-in-hand with MSSPs, national CERTs, law enforcement agencies, and technology platforms to dismantle cybercriminal tools and tactics.
The impact
“[Working at SpyCloud] you can have a broader impact, I think because you’re never really focused on making a case. As a law enforcement agent, there are often times where you think you're leaving more on the table, and working here you can make that broader impact -- you're more laser focused on greater outcomes rather than case by case.”
Duncan Edwards,
SpyCloud Sr. Investigator, Retired FBI Agent
Elite expertise. Proven results.
Meet some of the SpyCloud experts bringing decades of expertise in law enforcement, cybercrime research and national security to build out the best solutions to disrupt cybercrime. These individuals often volunteer their free time to continue to fight the power imbalance for cybercrime victims.

Jason Lancaster
SVP, Investigations
Nearly three decades in cybersecurity investigations, threat intelligence & security research
Founding-member of World Economic Forum’s Cybercrime Atlas Project
Recipient of Tech Ascencion’s 2025 Industry Innovator of the Year
Trevor Hilligoss
Almost 15 years in cybersecurity investigations, digital forensics & cybercrime research
Tracked threat actors via time in the US Army and the FBI and now a member of Operation Endgame
Recipient of the President's Volunteer Service Award for volunteer service aimed at countering cyber threats.
Phil Fuster
VP, Federal Sales
35+ years in technology, cybersecurity and AI sales leadership with focus on Federal contracting
US Army veteran
Maintains active Top Security Clearance
Tyson McAllister
Director, Investigations
15 years in cybersecurity investigations, threat intelligence & security research
US Army Veteran with over two decades of service
Unearthed unique investigative methodology to identify DPRK Fraudulent IT Workers
Duncan Edwards
Senior Investigator
Nearly 30 years years in federal law enforcement, cybersecurity investigations, and incident response
Retired FBI Special Agent (Cyber and Criminal Divisions)
Investigative expert in child exploitation, human trafficking victim identification, and perpetrator attribution
Tom Harper
Senior Investigator
Over 25 years in cybersecurity investigations and cybercrime research
Veteran of US Marine Corps and VA Army National Guard
Criminal investigator for US National Archives, US Dept. of Housing & Urban Development, US Army CID Computer Crimes Investigative Unit, and US Treasury Inspector General
Samuel Curet
Senior Investigator
12+ years in cybersecurity investigations, intelligence analysis, and cybercrime research
Co-Founder & Previous-CEO of Zero Trafficking (Disrupt human trafficking networks) – acquired in 2023
Former US Marine & currently US Marine Corps Reservist
Aurora Johnson
Manager, Security Research Partnerships
Former CISA Senior Analyst
Deep security research in the Chinese cybercrime ecosystem and various Threat Actor groups
Runs SpyCloud’s Responsible Disclosure program
Cris Lichti
Senior Investigator
Veteran of US Air Force
Nearly 20 years as an Intelligence Officer with the CIA
Our disruption partners
SpyCloud partners with organizations (private, public and non-profit) as well as community researchers, and volunteer professionals after hours that share a commitment to disrupting cybercrime operations and protecting the digital economy to enable faster takedowns, target remediation and create a safer internet for all.
We won’t stop 'til bad actors do
From financial fraud to investigating missing and exploited children, SpyCloud is committed to helping the most vulnerable and working to bring justice to victims. Here are some recent examples of our work.
When individuals who qualified for additional assistance during COVID due to unemployment went to file their taxes and were informed their taxes had already been filed and their return had already been cashed – bad actors were taking funds directly from those in need.
Such was the case of an elderly woman who was the victim of $3,000 Pandemic Unemployment Assistance (PUA) fraud that paid out to someone impersonating her. SpyCloud was able to identify the fraudster and right the wrong.
Every case doesn’t make it on the federal law enforcement’s radar, but every one of those that we help adds up and it all matters – it matters to the victims a lot.
A global online child exploitation unit leverages SpyCloud data and Investigations API 99% of the time to help dig into victim and perpetrator leads and more comprehensively investigate.
SpyCloud’s data has been instrumental in rescuing nearly 120 victims and identifying approximately 75 perpetrators for prosecution. This is often years of following breadcrumbs and the figures are considered extremely conservative estimates.
“To be in the room and see a case break-open and find a child who is being exploited, it’s a great feeling and SpyCloud’s intelligence is part of that process most of the time.”
– Specialist Investigator
Euroboss is a threat actor that SpyCloud investigators identified related to a number of schemes and pervasive phishing.
In partnership with the World Economic Forum (WEF)’s Cybercrime Atlas Group we looked into a number of domains that were impersonating other companies and enabling phishing activity.
We brought to bear a large number of resources – dozens of people from different companies – to work together and were able to identify this scheme and bring justice in the face of fraudulent activity.
SpyCloud in the news
SpyCloud’s cybercrime disruption efforts have been featured in major news outlets, industry publications, and global security forums.
Keep reading
Learn more about the methodology, insights, and programs we’ve created to disrupt cybercrime at scale.