Our Story

Team Cymru Research NFP is an Illinois non-profit and a US Federal 501(c)3 organization. We are a group of technologists passionate about making the Internet more secure and dedicated to that goal. We work closely with and within Internet security communities, as well as with all manner of other organizations - after all, almost every organization in the modern world is connected to the Internet in some way or another, and they all need help to ensure that their parts of the network remain safe and secure.

If you have suggestions for additional materials we could produce or link to, you're always welcome to contact us!

Team Cymru Research NFP Directors

Rob Thomas

Rob Thomas is CEO and founder of Team Cymru, and a Cymru Fellow. Rob has worked as a network engineer, Unix kernel developer, systems administrator, and security architect at companies as diverse as Motorola, Sun, Cisco, and Ameritech. Rob has a passion for all things technical, and it shows in his dynamic writings and presentation style. Rob is proud to serve as CEO for this motivated team of Internet security analysts.

Dave Deitrich

Dave Deitrich is CTO and co-founder of Team Cymru, and a Cymru Fellow. He received his Bachelor's degree from the University of Illinois in 1993 and his Masters' degree from the Georgia Institute of Technology in 1995, both in Computer Science. Dave has worked as a network engineer and network security guru for Motorola, IBM and Cisco Systems before becoming a founding member of Team Cymru in 2005. He has a wide range of experience with different operating systems, network platforms and programming languages.

Rich Cummings

Rich is Team Cymru's corporate lawyer. Rich received his Juris Doctor from the University of Illinois and is admitted to the Illinois bar association. Rich also brings a wealth of sales and retail banking experience to our mission.

Friends of Team Cymru

Thank you!

Team Cymru is a community effort, and we couldn't do what we do without the support of a great community. How can you join this illustrious community? It's easy! Simply contact us with your idea for a donation to the cause of Internet security. What do we need? Any of the following:

  1. Bandwidth.
  2. Hosting.
  3. Newer equipment.
  4. IP space, especially for Darknets.
  5. Data (logs, flow data, etc.).
  6. Other things we've not considered!

This page lists those folks who have made significant donations to the efforts and projects of Team Cymru over the past 2 years. This includes hardware, bandwidth, hosting, data, or other donations that help us to keep going. There are many more folks who have made donations and have opted to remain anonymous. We respect their wishes, and appreciate them as much as those on this page.

In our view, these folks exhibit all that is good in our community. We will never hesitate to buy a good cup of coffee for these folks. :) If we have forgotten anyone, please accept our apologies and send us a note!

Team Cymru Partners

THANK YOU!  We couldn't do it without your benevolent support.

Team Cymru Affiliations

FIRST Member

How To Become a Friend of Team Cymru

Partnerships can take many forms - do not assume we're not interested in talking to you, or you don't have anything to offer us. If you're interested at all, let us know! We'll find a way to work with you, and help to keep your network safe and secure.

If you are interested in partnering with Team Cymru, please contact Team Cymru Outreach at outreach@cymru.com to find out how we can share information or improve your product or service.

Team Cymru RFC 2350 Profile

1. Document Information

This document complies with RFC 2350.

1.1. Date of Last Update

This is version 1.1 of 22nd August 2011

1.2. Distribution List for Notifications

This profile is kept up-to-date on the location specified in 1.3.

E-mail notification of updates are sent to:

Any questions about updates please address to the Team e-mail address: TI-Team@cymru.com.

1.3. Locations where this Document May Be Found

The current version of this profile is always available on https://www.team-cymru.org/About/rfc-2350.html.

2. Contact Information

2.1. Name of the Team

Full name:
Team Cymru, Inc.
Short name:
Team Cymru

2.2. Address

Team Cymru, Inc.
901 International Parkway
Suite 350
Lake Mary, FL 32746

2.3. Time Zone

Global; Main offices in US/Eastern (UTC-0500, UTC-0400 in Summer Time)

2.4. Telephone Number

CERT emergency telephone number: +1 847 378 3301

2.5. Facsimile Number

+1 407 878 7832

2.6. Other Telecommunication

Not applicable.

2.7. Electronic Mail Address

Please send incident reports which relate to the Team Cymru constituency, including copyright issues, spam and abuse to abuse@cymru.com.

Non-incident related mail should be addressed to support@cymru.com.

2.8. Public Keys and Encryption Information

Please encrypt any sensitive e-mail with the Team Cymru PGP key and send to: team-cymru@cymru.com

Please sign your messages using your own key which is verifiable using the public keyservers.

All members of Team Cymru can read mail encrypted with the team-cymru@cymru.com key, so you may use it if you cannot find a key for a specific Team Cymru member.

2.9. Team Members

No information is provided about the Team Cymru team members in public.

2.10. Other Information

Further information about Team Cymru can be found at: http://www.team-cymru.org/About/.

Team Cymru is accredited by the Trusted Introducer for CERTs in Europe; see http://www.trusted-introducer.org/teams/team-cymru.html for details.

Team Cymru is a member of FIRST (Forum for Incident Response and Security Teams); see: http://www.first.org/members/teams/team_cymru/ for details.

2.11. Points of Customer Contact

The preferred method for contacting Team Cymru is via e-mail.

  • For general inquiries please send e-mail to info@cymru.com
  • For Abuse or security issues please use: abuse@cymru.com
  • For Network, server, or service issues please use: support@cymru.com
  • In an Emergency you can contact Team Cymru on: +1 847 378 3301

Team Cymru's hours of operation are generally restricted to regular business hours: 09:00 to 17:00 Monday to Friday except public holidays.

3. Charter

3.1. Mission Statement

Team Cymru Research NFP is a specialized Internet security research firm and 501(c)3 non-profit dedicated to making the Internet more secure. By researching the 'who' and 'why' of malicious Internet activity worldwide, Team Cymru helps organizations identify and eradicate problems in their networks.

3.2. Constituency


3.3. Sponsorship and/or Affiliation

Team Cymru Research NFP is an Illinois non-profit and a US Federal 501(c)3 organization. We are a group of technologists passionate about making the Internet more secure and dedicated to that goal. We work closely with and within Internet security communities, as well as with all manner of other organizations - after all, almost every organization in the modern world is connected to the Internet in some way or another, and they all need help to ensure that their parts of the network remain safe and secure.

3.4. Authority

Team Cymru coordinates security incidents on behalf of their constituency at their constituents' request.

4. Policies

4.1. Types of Incidents and Level of Support

All incidents are considered normal priority unless they are labeled EMERGENCY.

4.2. Co-operation, Interaction and Disclosure of Information

ALL incoming information is handled confidentially by Team Cymru, regardless of its priority.

When reporting an incident of sensitive nature, please state so explicitly, e.g. by using the label SENSITIVE in the subject field of e-mail, and if possible using encryption as well.

Team Cymru supports the Information Sharing Traffic Light Protocol (ISTLP see https://www.trusted-introducer.org/links/ISTLP-v1.1-approved.pdf) - information that comes in with the tags WHITE, GREEN, AMBER or RED will be handled appropriately.

4.3. Communication and Authentication

See 2.8 above. Usage of PGP/GnuPG in all cases where sensitive information is involved is highly recommended.

5. Services

5.1. Incident Response (Triage, Coordination and Resolution)

Team Cymru can assist system administrators in handling the technical and organizational aspects of computer security incidents.

5.2. Proactive Activities

See the following web pages for Team Cymru internet community services provided at no charge:

Team Cymru provides various also commercial services which are outlined at http://www.team-cymru.com.

6. Incident reporting Forms

Not available. Preferably report using encrypted e-mail.

7. Disclaimers


Team Cymru FAQ

Q: How do I pronounce "Cymru?"

A: This is the most common question we receive. :) "Cymru" is pronounced "kum-ree." It is Welsh (a Celtic language, distantly related to Gaelic) for "Wales."

Q: Why are you called Team Cymru?

A: Two of our founders have strong ties to Wales - Rob Thomas is of Welsh descent, while Dr. Neil Long is a born and bred Welshman. They, along with the other founding members of Team Cymru, felt that this choice of name and logo would be an appropriate tribute to their Welsh heritage, and to the long and storied history of Wales.

Q: Where is Team Cymru?

A: Team Cymru is a geographically-dispersed group of security professionals who are able to collaborate due to the benefits of the Internet. Our main office is in the Orlando, FL, US area. Our team members have presences in the UK; Poland; New Zealand; Arizona, US; Washington D.C., US; Illinois, US; Massachusetts, US; and California, US. We have pods of gear all over the globe. We find that our geographic dispersion provides nearly 24/7 coverage and leads to an increased quality of life for our employees.

Q: When was Team Cymru founded?

A: Team Cymru was founded by Rob Thomas as an Internet security think-tank in 1998. In 2004, Team Cymru, Inc. officially incorporated as a legal entity. The founding researchers are Rob Thomas, David Deitrich, Dr. Neil Long, and Stephen Gill. Team Cymru Research NFP was granted 501(c)3 status in 2009.

Q. What is the relationship between Team Cymru Research NFP, Team Cymru, Inc., and Dragon Research Group?

A: Team Cymru Research NFP is an Illinois non-profit and a US Federal 501(c)3 organization which focuses on our community service activities. Being a 501(c)3 allows us to accept donations and give our donors the ability to potentially realize a tax savings on their donation. Team Cymru Research NFP is the primary sponsoring organization for the Dragon Research Group (DRG). Team Cymru Research NFP plays a facilitator role for the DRG, helps with funding, helps acquire resources and coordinates the volunteer candidate selection process. Note that community services are provided using resources of Team Cymru, Inc., for the benefit of the community, and are not necessarily a product of Team Cymru Research NFP. Team Cymru Research NFP currently does not have any staff.

Team Cymru, Inc. focuses on our commercial service activities and all Team Cymru staff are employeed by Team Cymru, Inc.

Q: Who owns Team Cymru?

A: Team Cymru is wholly and solely owned by its founding partners. Team Cymru will never trade control for funding or donations. We remain fiercely independent because we believe it is the only way we can be an impartial Internet security advocate.

Q: What does Team Cymru do to pay the bills?

A: Through the generous donations of gear, hosting, bandwidth and services from our numerous partners, Team Cymru is able to operate in a lean and efficient fashion. We have gained a wealth of experience, expertise, and insight, and it benefits the community if we share it.

Although the majority of our output is at no-cost, we do offer commercial services to fund our activities and ensure we are an on-going, vibrant company. In fact the chances are good that if you are using a security product or service, Team Cymru's insight quietly makes it a bit more robust, insightful, and secure.

See our Commercial Services site for more information on our commercial efforts.

Q: Are NFP donations ever used for commercial purposes?

A: No. In fact, quite the opposite. The costs of the community services we offer are made possible by our commercial activities.

Q: How do I contact Team Cymru?

A: Please see our contact page for a variety of methods of reaching us or contact us at info@cymru.com.

Q: What does Team Cymru do for the Community?

A: We endeavor to make the entire Internet more secure, more aware, and more reliable. We provide templates, sundry route-servers, and other projects in an effort to make you (yes, YOU!) safer while online. All of these are designed to support our shared mission to make the Internet - and the good folk who use it - more secure.

Our company began over a decade ago as a collaboration from within the IT Security world. From the very start we realized that our community needed practical support, provided without any strings and without any cost. We are incredibly proud of the breadth and depth of the various ways we continue to support the work our partners do all over the Internet.

We have over 25 different sets of services, software, templates, tools, alerts, data and tips, many of which have become hugely successful and have been rapidly adopted to become a core component in the work of multiple sectors of our community. All off these have always been provided at absolutely no cost to users. From widely available and informative public information services, through to highly technical and sometimes restricted monitoring and alerting tools, we do this because it is the right thing to do and because we are in a position to help.

In addition to such practical contributions we also work in partnership with a number of organizations that are engaged in investigation, internet governance, best practice and consumer advice. We are actively engaged with groups like the United Nations Interregional Crime and Justice Research Institute, Europol, the International Telecommunications Union and have a number of industry affliations. We fund and co-host, with INTERPOL, an annual conference at their headquarters facility in Lyon, France and we present at events all over the world.

Our staff are consulted by media organizations on a daily basis, primarily as we are seen as clueful and impartial. Our Business Intelligence Team writes extensively for numerous publications, both technical and more mainstream. We have trained ISPs, police officers and other security professionals from all corners of the globe. Our blog contributions, newsletters and email list postings allow us to contribute to the good fight in numerous areas.

Our offerings are detailed on this site but if you would like to receive more information or to speak with us about what might be of particular use for you, or if you have an idea for something more we can do, contact us at outreach@cymru.com.

Q: I thought you were the "Who and Why" guys?

We used taglines revolving around the "Who and Why" theme until early 2011. In an acknowledgment that we now focus on so much more than just the who and why of Internet criminality, including the wider aspects of when, where, and how, we now use the phrase "Insight that improves lives."

Q: Why isn't Team Cymru more well known?

A: Team Cymru made a conscious decision to work exclusively with trusted partners in the IT Security Community. We are comfortable and successful being the behind the scenes partner. However, within these circles we are well known, including being recognized as one of the 15 Most Influential in Security by eWeek.

Q: If I have other questions, who should I contact?

A: Please see our contact page for a variety of methods of reaching us. We pride ourselves on quick, concise responses to your inquiries.

Team Cymru

Copyright © 2017 Team Cymru. All Rights Reserved.