Edge Rewrite
everything Source code View original
// HTMLRewriter · presentation

This page was redesigned at the edge.

Cloudflare fetched the original article and streamed it through HTMLRewriter to apply an entirely new visual system without rebuilding the source page.

// request.cf · coarse context

A page that knows where it met you.

Only coarse request metadata is shown. This demo does not display or persist visitor IP addresses.

Country
US
Cloudflare location
CMH
Connection
HTTP/2
Language
Not provided

Ray ID: a23a57791f17efad

Jump to content

Draft:SpyCloud

From Wikipedia, the free encyclopedia
  • Comment: None of the independent secondary sources have in-depth coverage of the subject. Stuartyeates (talk) 08:40, 9 June 2026 (UTC)
  • Comment: In accordance with the Wikimedia Foundation's Terms of Use, I disclose that I have been paid by my employer for my contributions to this article. KellyA6428SC (talk) 13:40, 2 June 2026 (UTC)


SpyCloud
TypePrivate
IndustryComputer security
Founded2016; 10 years ago (2016) in Austin, Texas, U.S.
FoundersTed Ross, David Endler, Alen Puzic
Headquarters
Austin, Texas
,
U.S.
Key people
Ted Ross (CEO)
ProductsIdentity threat protection; cybercrime investigations
Websitespycloud.com

SpyCloud Inc. is an American cybersecurity company based in Austin, Texas, founded in 2016.[1][2] It develops identity threat protection products that use data recaptured from data breaches, information-stealing malware logs, phishing, and other underground sources to identify exposed credentials and help organizations prevent account takeover, ransomware, session hijacking, and online fraud.[3][1] The company also offers a cybercrime investigations product and sells access to its recaptured data to law enforcement agencies.[3]

The company has said its customers include more than half of the Fortune 10.[4] Its research division, SpyCloud Labs, publishes analysis of cybercrime activity that has been covered by news media.

History

[edit]

SpyCloud was co-founded in 2016 in Austin by Ted Ross, who became the company's chief executive, along with David Endler and Alen Puzic.[5][3][4] The company raised a $5 million Series A round in 2018, led by Silverton Partners and March Capital Partners,[5] followed by a $21 million Series B round in 2019 led by Microsoft's venture fund M12.[6] In 2020, the company closed a $30 million Series C round led by Centana Growth Partners, bringing its total funding to $58.5 million at that time.[7] In 2023, SpyCloud raised a $110 million growth round led by Riverwood Capital,[1] and in 2024 it raised a further $35 million led by CIBC Innovation Banking.[2]

Products

[edit]

SpyCloud's products are aimed at enterprises, consumers, and investigators. Its enterprise offerings include account-takeover prevention for employees and customers, session identity protection that addresses session hijacking using stolen authentication cookies, and post-infection remediation intended to prevent malware infections from escalating into ransomware; the company positions these alongside identity and access management, identity threat detection and response, endpoint protection, and zero-trust systems.[4][2] The platform integrates with identity systems such as Active Directory, Okta, and Microsoft Entra ID to support automated remediation,[2] and the company also markets a consumer identity protection offering and a cybercrime investigations product used by security and fraud teams.[8] To assemble its data, the company collects information from breaches, malware-infected devices, phishing, and criminal forums, cracks hashed passwords, and uses human-intelligence techniques to obtain data from closed sources.[3]

Research

[edit]

SpyCloud's research division, SpyCloud Labs, investigates cybercriminal activity, and its findings have been used as the basis of reporting by technology and security news outlets. In October 2024, its researchers reported that criminals had begun advertising stolen credit-card data on Meta's Threads platform, a practice previously confined to Telegram and dark-web forums; The Register reported the findings after interviewing two of the company's researchers.[9] In November 2024, SpyCloud researchers Kyla Cardona and Aurora Johnson presented research at the Cyberwarcon conference describing a black market in which insiders at Chinese government, surveillance, and technology organizations sell citizens' personal data to buyers; the research was reported by Wired and The Register.[10][11] In November 2025, the security journalist Brian Krebs cited SpyCloud's recaptured data in an investigation identifying the administrator of the cybercrime group "Scattered Lapsus$ Hunters".[12] SpyCloud has also been named among the private-sector organizations that assisted law-enforcement operations against cybercrime infrastructure, including the disruption of the Tycoon 2FA phishing kit and Operation Endgame.[13][14][15]

Law enforcement data

[edit]

In 2020, Motherboard reported that SpyCloud markets access to data stolen in breaches to law-enforcement agencies, including several U.S. federal agencies, for use in investigations. The report drew criticism from privacy and surveillance researchers, who said that buying breached data lets agencies obtain personal information without the legal process normally required; co-founder David Endler said the data the company provides to law enforcement is generally already circulating among criminals.[3]

Security incidents

[edit]

In 2025, SpyCloud was among the companies whose Salesforce data was accessed through the Salesloft Drift supply-chain attack; the company said it had previously been a customer of Salesloft and Drift.[16]

References

[edit]
  1. ^ a b c "Digital Identity Protection Firm SpyCloud Raises $110 Million". SecurityWeek. August 24, 2023.
  2. ^ a b c d "SpyCloud raises $35M to bolster its cybersecurity efforts against account takeovers". SiliconANGLE. June 6, 2024.
  3. ^ a b c d e Cox, Joseph (July 8, 2020). "Police Are Buying Access to Hacked Website Data". Vice.
  4. ^ a b c "SpyCloud Raises $110 Million Growth Round Led by Riverwood Capital to Accelerate Identity Threat Protection" (Press release). SpyCloud. August 23, 2023 – via Business Wire.
  5. ^ a b "Austin-based SpyCloud Raises $5 Million". Silicon Hills News. March 29, 2018.
  6. ^ "SpyCloud Raises $21M in Series B Funding, Will Focus on Account Takeover Prevention". Dark Reading. 2019.
  7. ^ "SpyCloud Closes $30M Series C To Prevent Account Takeovers". Crunchbase News. 2020.
  8. ^ "Cybercrime Investigations". SpyCloud.
  9. ^ "Stolen credit cards up for grabs on Meta's Threads". The Register. October 28, 2024.
  10. ^ Greenberg, Andy (November 21, 2024). "China's Surveillance State Is Selling Citizen Data as a Side Hustle". Wired.
  11. ^ "How Chinese insiders exploit its surveillance state". The Register. December 8, 2024.
  12. ^ Krebs, Brian (November 26, 2025). "Meet Rey, the Admin of 'Scattered Lapsus$ Hunters'". KrebsOnSecurity.
  13. ^ "Global coalition dismantles Tycoon 2FA phishing kit". CyberScoop. 2026.
  14. ^ "Europol Leads Major Strike on Global Cybercrime Infrastructure". TechRepublic. November 14, 2025.
  15. ^ "Police disrupts Rhadamanthys, VenomRAT, and Elysium malware operations". BleepingComputer. November 13, 2025.
  16. ^ Johnson, Derek B. (September 2, 2025). "Salesloft Drift attacks hit Cloudflare, Palo Alto Networks, Zscaler". CyberScoop.


Category:Companies based in Austin, Texas Category:American companies established in 2016 Category:2016 establishments in Texas Category:Computer security companies Category:Computer security software companies

Retrieved from "https://en.wikipedia.org/w/index.php?title=Draft:SpyCloud&oldid=1358576405"