Somewhere right now, in a private Telegram channel or a half-abandoned dark web forum, a crypto scam is being assembled. A pump is timed. A "pig butchering" script is rehearsed. The blockchain has not seen a thing yet. Cloudburst Technologies already has.
01 / WHO THEY ARE NOWThe firm that reads the room
Cloudburst Technologies sells a strange product: foreknowledge. From an office in Tribeca, a team of roughly eighteen people pulls in off-chain data at scale - chatrooms, forums, regulatory filings, the deep and dark web - and runs it through AI that classifies, translates, and connects it in close to real time. The output is a name, a location, a network, a warning.
The pitch is almost contrarian. The crypto-analytics industry built itself on watching the blockchain, which is public, permanent, and very well lit. Cloudburst decided to watch the places that are none of those things. Most security firms wait for the transaction. This one listens to the conversation that comes first.
Most blockchain analytics firms watch the chain. Cloudburst watches the chatrooms where the scams are planned.- the company's entire reason for existing, in one line
02 / THE PROBLEM THEY SAWThe chain tells you what happened. Not who.
On-chain analytics is brilliant at one thing: following the money after it moves. It can trace a stolen million across a dozen wallets. What it struggles to tell you is the part that actually matters to an investigator - who pressed the button, where they sit, and which of the forum's "high-value members" is really running the show.
That gap is expensive. Pump-and-dumps, money laundering rings, and romance-investment scams all share a tell: they are organized in the open, just not on the ledger. The plotting happens off-chain. By the time funds hit the blockchain, the crime is already old news and the perpetrators are already gone.
Cloudburst's bet is that the most valuable intelligence in crypto is the cheapest to ignore: the noise. The bragging, the recruiting, the coordination. Gather enough of it, parse it fast enough, and the future stops being a surprise.
03 / THE FOUNDER'S BETA man who did this before terrorism went crypto
Evan Kohlmann has spent more than two decades tracking threat actors through their electronic communications - first terrorist organizations, consulting for the FBI, the Department of Defense, and the DOJ along the way. He had already built one cyberintelligence company the hard way: he founded Flashpoint, wrote the original code himself, and reportedly started it from his bedroom.
So Cloudburst, founded in 2022, is less a pivot than a translation. The discipline that mapped extremist networks online turned out to map crypto-fraud networks just as well. Same dark corners, different currency.
He spent twenty years tracking terrorists online. Now he tracks the people running pig-butchering rings.- on Evan Kohlmann, Founder & CEO
He did not do it alone. The leadership bench reads like a deliberate hedge against every kind of trouble a crypto-intelligence firm can find: a chief technology officer with a background in Web3 and U.S. Army Military Intelligence leading engineering and data science, and an operations-and-legal chief who previously ran litigation at a major exchange. In a field where the product is evidence, having a former exchange litigator in the building is less a luxury than a load-bearing wall.
04 / THE PRODUCTAn OSINT machine with opinions
The platform does four things in sequence, and the magic is in the speed. It collects open-source and dark web data at scale. It enriches that data with AI - classifying, parsing, translating, and transcribing across languages and formats. It resolves entities, untangling who is who across sites and aliases. Then it scores risk and writes the report, autonomously.
What an analyst gets back is not a firehose but an answer: the administrators and owners behind a scheme, the high-value members, the geolocational breadcrumbs, the links to other illicit sites. The company says it can surface signals of market manipulation up to a week in advance - a claim worth treating as a stated capability rather than gospel, but a striking one all the same.
A short history of watching the wrong neighborhoods
05 / THE PROOFWho's writing the checks - and why it matters
Money is a blunt instrument for measuring conviction, but the cap table here is unusually telling. Coinbase Ventures and CoinFund are crypto-native validators. Borderless Capital led the Series A. And then there is In-Q-Tel - the not-for-profit strategic investor for the U.S. national security community - whose involvement opened a pathway for Cloudburst to support U.S. government agencies. When the intelligence world's venture arm shows up, it is rarely about the financial return.
Funding, stacked
The partnerships tell the same story from a different angle. The Chainalysis integration pairs Cloudburst's off-chain monitoring with the leading on-chain platform - the two halves of a single investigation. Membership in Crypto ISAC plugs its fraud detection into an industry-wide intelligence-sharing network. These are not logo-collecting exercises; they are the company quietly stitching itself into the plumbing of crypto compliance.
06 / THE MISSIONAutonomous intelligence, stated plainly
Cloudburst describes its goal as "pioneering the future of autonomous threat and financial intelligence." Strip the conference-stage gloss and it means something concrete: take the messy, multilingual, deliberately hidden world where financial crime is planned, and make it legible fast enough to act on. The "autonomous" part is the ambition - a system that does the collecting, enriching, and reporting so a human can spend their time deciding rather than digging.
Pioneering the future of autonomous threat and financial intelligence.- Cloudburst's stated mission
It is a mission with a built-in tension, the same one that runs through everything the company does. The crooks adapt. The forums move. The scripts get better. Intelligence is never finished; it is only current. Cloudburst is betting that automation is the only way to stay current against an adversary that never sleeps and rarely repeats itself.
07 / WHY IT MATTERS TOMORROWThe case for catching it early
Crypto is not getting smaller, and neither is the fraud attached to it. Regulators want enforcement tools. Exchanges want to keep bad actors out before, not after. Governments want attribution. All three are asking the same question Cloudburst was built to answer: who, and where, and how soon can we know? An off-chain lens that turns chatter into names is, increasingly, not a nice-to-have.
Return to that private channel where the scam was being assembled. The pump that was timed. The script being rehearsed. In the old model, all of it would have surfaced later - as a victim's loss, a regulator's post-mortem, a wallet trace that ended at a dead end. Cloudburst's entire proposition is to move that moment forward, from the autopsy to the warning. The blockchain still won't see it coming. Someone, finally, will.