The United States is preparing a new phase in cyber defense, allowing selected private firms to take part in offensive operations under federal supervision for the first time. The White House says the move is designed to strengthen responses to international cybercrime networks and digital threats aimed at Americans.
According to the presidential memorandum, the program is meant to tap into the specialized expertise of the private sector against ransomware groups, online fraud networks, and extortion schemes. Approved companies may help with intelligence gathering, including surveillance tools, and with disruptive actions aimed at disabling criminal systems or erasing stolen data.
The policy marks a major shift from the long-standing U.S. approach, which allowed private companies to defend against attacks but not to launch them. Participation will come with strict conditions: companies must place $1 million in escrow, follow federal rules, and operate only with approval from the Justice Department and the Department of Homeland Security.
The government also plans to issue detailed guidance within two months, including standards for smaller firms that may offer highly specialized capabilities. Any operation must avoid U.S.-based targets, and companies will be required to alert authorities if they detect an imminent threat to critical infrastructure such as power or water systems.
The memorandum does not authorize so-called "hack back" actions by private firms acting on their own. Instead, all activity will remain under federal oversight, reflecting an effort to balance innovation, security, and control in a rapidly evolving digital landscape.
As AI-driven cyber tools become more advanced and criminal networks more adaptive, this policy could shape a new model for public-private cyber defense in the years ahead.
