WhiteOps (now HUMAN Security)

WhiteOps (now HUMAN Security)
Name	WhiteOps (now HUMAN Security)
Type	Private
Industry	Cybersecurity
Founded	2011
Founders	Joe Sullivan; Tamer Hassan; Michal Krzysztofowicz
Headquarters	New York City
Area served	Global
Products	Fraud prevention, bot mitigation, bot detection
Services	Cyber threat intelligence, ad fraud detection

WhiteOps (now HUMAN Security)

WhiteOps (now HUMAN Security) is a cybersecurity company specializing in bot mitigation, ad fraud prevention, and automated threat detection. Founded in 2011 and headquartered in New York City, the company developed behavioral fingerprinting and challenge-response technologies to identify automated threats across advertising, account creation, and digital media. Its work intersected with major technology platforms, advertising exchanges, financial institutions, and law enforcement agencies.

History

WhiteOps (now HUMAN Security) was founded in 2011 by executives and engineers formerly associated with Facebook, Google, Yahoo!, PayPal and Microsoft to address online fraud affecting The New York Times, Comcast, Walmart and other publishers. Early funding rounds involved investors linked to Accel Partners, NEA (New Enterprise Associates), Canaan Partners, and Bessemer Venture Partners, while executive hires came from Symantec, McAfee, RSA Security and Mandiant. The company gained prominence after publishing joint reports with The Association of National Advertisers, Interactive Advertising Bureau and World Federation of Advertisers on sophisticated click fraud operations. In 2021 the company rebranded to HUMAN Security following acquisitions and strategic shifts influenced by corporate events like mergers involving Akamai Technologies and Cloudflare in the threat-mitigation market. High-profile briefings were delivered to policy forums including Congress of the United States, European Commission, UK Parliament and regulatory bodies such as Federal Trade Commission and Australian Competition and Consumer Commission.

Products and Technology

The product suite combined behavioral detection engines, challenge-response mechanisms, and telemetry integrations used by customers such as Adobe, Amazon (company), The Washington Post, NBCUniversal and Dropcam. Core components leveraged machine learning frameworks from research used at Stanford University, Massachusetts Institute of Technology, and papers presented at conferences including Black Hat, DEF CON, RSA Conference and USENIX Security Symposium. The technology integrated with adtech stacks like DoubleClick, AppNexus, OpenX and programmatic platforms developed by The Trade Desk and MediaMath. Deployment options included on-premises appliances, cloud connectors compatible with Amazon Web Services, Google Cloud Platform, and Microsoft Azure, and SDKs for mobile apps distributed through Apple App Store and Google Play. Features spanned bot detection, credential stuffing protection, account takeover prevention, and real-time forensic dashboards used by security teams familiar with tools from Splunk, Elastic, Datadog and PagerDuty.

Research and Threat Intelligence

WhiteOps (now HUMAN Security) published investigative research on operations such as Methbot and other schemes affecting GroupM, Omnicom Group, Publicis Groupe and independent publishers. Collaboration occurred with academic groups at Carnegie Mellon University, Columbia University, University of California, Berkeley, and New York University to analyze traffic patterns and attribution methodologies. Intelligence products included botnet mapping, attribution reports referencing actors tied to regions associated with investigations involving Operation Ghost Click, Carbanak and other botnet incidents previously studied by Kaspersky Lab, Symantec, and Trend Micro. The firm’s findings were cited in media outlets like The Wall Street Journal, Wired, Bloomberg, The New York Times and technical blogs maintained by OWASP and IAB Tech Lab.

Major Incidents and Cases

Notable cases included exposure of large-scale ad fraud operations that impacted campaigns managed by agencies such as WPP, IPG, Havas, and led to industry discussions involving Interactive Advertising Bureau and Media Rating Council. Investigations drew comparisons with past incidents like the Operation Phish Phry and reporting on malvertising linked to exploit kits previously documented by Proofpoint and FireEye. The company’s litigation support work contributed to civil suits and law enforcement actions coordinated with agencies such as Federal Bureau of Investigation, National Crime Agency (United Kingdom), Europol and regional prosecutors in the United States Department of Justice.

Corporate Structure and Funding

The corporate structure encompassed executive leadership with backgrounds referencing Uber Technologies, Airbnb, LinkedIn, and Zynga in senior product and sales roles. Funding rounds saw participation from venture capital firms including Insight Partners, General Catalyst, Iconiq Capital and strategic investors with ties to AT&T, Verizon, and Comcast Corporation. The company executed mergers and acquisitions of startups focused on bot defense and identity verification, strategically aligning with firms like PerimeterX, Shape Security, and Akamai to consolidate anti-fraud capabilities. Governance involved a board with members having prior directorships at Salesforce, Oracle Corporation, Cisco Systems and Palantir Technologies.

Partnerships and Clients

Partnerships extended to adtech companies such as Rubicon Project, Index Exchange, and verification vendors including Integral Ad Science and DoubleVerify. Enterprise clients spanned sectors represented by Bank of America, JPMorgan Chase, Citigroup, Verizon Communications and media conglomerates like Disney, ViacomCBS and Time Warner. Strategic alliances included integrations with analytics and security platforms such as Google Analytics, Adobe Analytics, CrowdStrike and Okta. Collaboration agreements were announced with standards bodies including IAB Tech Lab and advocacy organizations like Digital Advertising Alliance.

Legal Issues and Controversies

The company faced legal and public scrutiny related to the complexity of attribution in ad fraud, debates reminiscent of litigation involving Oracle and Google over tracking technologies, and privacy concerns paralleling discussions around Cambridge Analytica and regulations like General Data Protection Regulation and California Consumer Privacy Act. Questions were raised by industry stakeholders and privacy advocates represented by organizations such as Electronic Frontier Foundation and Center for Democracy & Technology about behavioral fingerprinting methods and data retention. The company provided expert testimony in regulatory inquiries and civil litigation while navigating export controls and compliance regimes overseen by Office of Foreign Assets Control and data protection authorities like Information Commissioner's Office.

Category:Cybersecurity companies Category:Companies based in New York City