Leyes Built the Spotlight. Then It Learned to Turn It Off.

The odd thing about a publicist is that success leaves evidence. A founder gets the profile. The profile gets indexed. A stranger learns the founder’s city, colleagues, habits and family connections. One person sees credibility. Another sees a map. Leyes began in 2019 on the first side of that equation, helping entrepreneurs, artists and brands become easier to find. The company now makes its case on the second: some people have become much too easy to find.

That reversal is the useful way to understand Leyes. The Miami company now presents itself as a private cyber-intelligence firm focused on “identity risk governance,” a phrase that sounds as if it belongs in a board packet because that is exactly where Leyes wants it. Its clients are people for whom a loose phone number, copied voice or exposed relative can become a business event: founders, public figures, wealthy families, family offices and organizations with reputations worth attacking.

The work starts outside the ordinary corporate perimeter. Leyes maps what data brokers, platforms, public records and open-source intelligence reveal. It looks for connections among those traces, reduces what can be removed, hardens credentials and access, watches for reappearance, and prepares for impersonation or a false narrative. The old PR operation, Leyes Media, still handles the opposite problem: how to be seen on purpose.

“We exist to make sure that being seen does not make you vulnerable.”Kevin Leyes, founder

The first business sold attention

Kevin Leyes did not arrive through the usual cybersecurity route. He grew up in working-class neighborhoods outside Buenos Aires, learned to code young and tried several small businesses. A clothing venture failed. Sneaker resale brought in cash. A custom-jewelry company serving Argentina’s trap scene finally worked well enough, he has said, to finance Leyes Media.

The agency’s promise was legible: get clients recognized. It sold PR, social media, content and media placement to founders, brands, artists, models and creators. The company says the agency has served more than 5,000 clients and at one point generated more than $3 million in annual revenue. Those are company-reported figures, not audited accounts, but they show the shape of the machine: lots of campaigns, lots of names pushed into public view.

The first failure was the clothing line. The more expensive lesson came later. Leyes says he put money, energy and trust into a team whose values did not match his, then watched it come apart. His copyable conclusion is less glamorous than a growth hack: alignment is scarce, and hiring for velocity can create a bill that arrives after the work is won.

Then the applause started leaking data

The change of mind came from the work itself. Leyes says the more visibility his agency created, the larger the target around certain clients became. Press can establish authority and improve search results. It can also confirm a location, put relatives in the same paragraph, and give an impersonator better material. The company’s pivot was not an abandonment of publicity. It was an admission that publicity has side effects.

There was a second nudge. In later interviews, Leyes described losing investments to crypto scams, rug pulls and failed NFT projects. Marketing had taught him how narrative produces value. Fraud taught him how quickly narrative can counterfeit it. By 2025, LeyesX was being described publicly as the umbrella around cyber intelligence, the media agency and creator services. In early 2026, the company published a 29-page framework that gave its new thesis a formal name.

The framework treats identity as infrastructure. Its most distinctive idea is that risk should be managed across digital, physical and relational surfaces rather than divided among a cybersecurity vendor, a reputation agency and a worried assistant. Leyes calls the person the “human node.” The language is severe, but the point is simple: attackers do not respect an organization chart.

A service, not a magic eraser

What does the customer actually buy? First, an exposure map. The firm searches data-broker listings, platforms and intelligence surfaces, then correlates signals that might be harmless alone and dangerous together. Second, it runs suppression and removal workflows. Third, it reconstructs likely attack paths and hardens access. Finally, it monitors for what returns and prepares a response for misinformation, deepfakes, impersonation or a breach.

This is closer to a private digital security detail than a piece of downloadable software. The current site uses an invitation-style confidential review, and its legal terms describe customized private fees and best-effort advisory work. Published profiles have placed packages between roughly $10,000 and $100,000 a month. At that price, the buyer is not purchasing cleaner search results alone. The buyer is purchasing prioritization, discretion and someone responsible for the whole mess.

That puts Leyes in an untidy market. A customer could instead assemble an executive-protection consultant, a threat-intelligence provider, a data-removal subscription, a crisis-communications firm and a conventional PR agency. Leyes argues that the combination is the advantage. The same team can decide when a client should become more visible, when a fact should become less accessible, and how one choice changes the other.

The contradiction is the product: build a reputation strong enough to travel, then remove the breadcrumbs that should not travel with it.

The part a smaller company can copy

Most readers will not need a five-figure monthly security detail. The operating logic still travels. Begin with exposure, not tools. Search the founder, family members, old companies, domains, leaked credentials and public records as an adversary would. Sort discoveries by usefulness to an attacker, not by how embarrassing they feel. Remove the easy pieces. Harden the accounts that connect everything. Assign an owner. Check again.

The lesson is especially relevant before a publicity push. A founder preparing for a funding announcement can audit exposed personal data before the story lands. A family office can map the staff and relatives who sit just outside formal security controls. A creator can prepare proof-of-origin and impersonation procedures before a fake account attracts an audience. The ordering matters. Prevention is usually quieter than cleanup.

Where the model fits - and where it does not

Leyes is best suited to a narrow condition: the client’s identity carries enough financial or reputational value that personal exposure becomes operational risk. A public founder can lose a deal to a viral fabrication. A wealthy family can be targeted through a child, assistant or leaked address. A creator can watch a cloned account monetize an audience built over years. In those cases, the border between “cyber,” “reputation” and “personal” is mostly an accounting fiction.

The model is less persuasive when the problem is ordinary privacy, a standard corporate security gap or a desire to make every unflattering fact vanish. Leyes itself does not promise guaranteed outcomes. Information can be copied, republished or preserved outside anyone’s control. Data removal without behavior change is temporary. Narrative management without credible evidence can become theater. And combining publicity with protection demands careful boundaries: the incentive to create attention must never outrun the duty to reduce risk.

Leyes has moved quickly from agency to framework, and the framework is still young. Its published research was self-funded, its client work is mostly confidential, and the public record offers more claims than independently measured outcomes. Yet the observation underneath the company is difficult to dismiss. For two decades the internet trained ambitious people to turn themselves into media. It gave them dashboards for attention and almost no dashboard for the danger attached to it.

The publicist noticed because he was standing closest to the spotlight. Every success made the room brighter. Eventually he could see what had been hiding at the edge of it.