FBI insider threat protection has been deployed across multiple bureau networks, the bureau and defense technology firm Everfox announced on September 23. The capability, spanning tens of thousands of endpoints, brings user activity monitoring and behavioral analytics online to improve detection of potential insider threats across the enterprise.
According to officials, the deployment is fully operational and is intended to bolster the FBI’s ability to spot unusual behavior that may indicate risk from within its own systems.
“Protecting the FBI’s people, information, and mission is non-negotiable,” FBI Director Kash Patel said. “Working with Everfox, we ensured our ability to detect and respond to insider threats across our most sensitive networks while meeting the highest federal security standards. This program has made us stronger, more resilient, and better prepared to protect the American people.”
“In today’s environment, insider-risk threats are increasingly complex and difficult to detect, making early visibility into unusual behavior essential for national security,” said Dave Wajsgras, Everfox chairman and CEO. “Our platform fuses behavior context with advanced analytics and is trusted across a multitude of defense and intelligence agencies. We deeply value our partnership with the FBI and our collective commitment to tackling insider risk with the seriousness it demands.”
FBI insider threat protection meets federal standards
Under the contract, the FBI retains mission ownership, governance, and strategic direction. Everfox is responsible for technical execution, engineering support, and product configuration, coordinating daily with FBI stakeholders.
Officials said the program brought the bureau into full compliance with Committee on National Security Systems Directive 504, which sets minimum federal requirements for insider-threat user-activity monitoring.
The FBI has pursued a range of technology upgrades in recent years to strengthen its cyber and counterintelligence posture. The bureau’s latest move aligns with broader federal efforts to modernize security across civilian and intelligence agencies.
Insider-risk monitoring remains a priority across the national security community as foreign intelligence services and criminal organizations seek access to sensitive systems. The approach mirrors strategies used in other cases in which Russian intelligence services have allegedly targeted U.S. networks and infrastructure.
Everfox continues to market its monitoring and analytics capabilities across government and defense networks. Information on the company’s broader portfolio is available on the Everfox website.