The White House has initiated a new program that will allow private security firms to apply for approval to conduct offensive cyber operations against foreign cybercrime organizations. A national security presidential memorandum (NSPM), signed by President Donald Trump on Wednesday, directs the National Coordination Center (NCC) to establish this framework.
The NSPM aims to leverage the capabilities of the U.S. private sector for cyber operations targeting transnational criminal organizations, all under the direct control and authority of the U.S. Government. The NCC, which is part of the Homeland Security Task Force, will oversee the program.
According to a fact sheet released yesterday, the memorandum mandates that the Program's Executive Directors and the Homeland Security Council create stringent procedures for reviewing and conducting these limited cyber operations. These procedures are intended to ensure strict compliance with the U.S. Constitution, federal laws, and applicable international agreements.
Participating private sector companies are encouraged to enter into agreements with other private entities, as well as Federal, State, Local, Tribal, and Territorial agencies, to gather threat intelligence on transnational criminal organizations (TCOs) and propose cyber operations to address these threats.
The program will be jointly overseen by executive directors appointed by the Justice and Homeland Security departments. Security firms wishing to participate will undergo a vetting process before they can secure contracts with either department.
A key requirement for participating companies is maintaining a bond or escrow of at least $1 million. This sum would be forfeited if the company fails to comply with its contractual obligations. Furthermore, companies must immediately cease operations and notify the NCC if they discover any activity exceeding approved limits, including the unintended targeting of U.S. citizens or systems based in the U.S.
The White House stated that the program's objective is to disrupt foreign criminal organizations involved in a range of cyber-enabled crimes. These include ransomware attacks, phishing campaigns, financial fraud, sextortion schemes, and impersonation scams. The administration highlighted that U.S. consumers reported losses exceeding $20.8 billion to cyber-enabled crime in 2025.
Industry experts view this initiative as a significant shift in U.S. cyber policy and a major expansion of the private sector's role in offensive cyber operations. Some analysts suggest it could create a continuous demand for such services.
