Trusted collaboration
accelerating defensive
decisions and protection
across interconnected sectors.
Built on trust. Driven by intelligence. Focused on mission.
ABOUT
CYBER DEFENCE ALLIANCE
The CDA is a shared operational capability supporting a close alliance of financial institutions and interconnected organisations deliver individual and collective cyber defence, cyber security, cyber resilience and digital fraud.
We specialise in network defence intelligence, cybercrime investigations, advanced automation, supply chain assurance, insider threat, and cyber geopolitics.
Through shared intelligence, expertise and resources, we work to reduce threats, limit the impact of cyber-attacks and disrupt adversaries and their networks. We strengthen cyber security and resilience while delivering timely, precise insight into new and emerging threats; all with a clear focus on protecting the public.
The Alliance works with governments, law enforcement, intelligence and security agencies and telecommunications operators in the collective effort to secure a safer digital future.
Our trusted core operates at a level few organisations can match. Year on year, we play an expanding role in national and international law enforcement success, both as a driving force and a key collaborator.
Established in the UK in 2015 as a not-for-profit organisation by a coalition of four international banks with law enforcement support, we have grown steadily and are entirely member owned and driven.
We are a tight team of permanent staff and member secondees headquartered in Canary Wharf, London and operate within the UK, EU and North America, with partners in the Far East and Australia.
OUR CAPABILITIES
Innovation and Automation
We turn open-source data into actionable intelligence, powered by bespoke tools that identify, enrich, analyse and securely share insight at scale.
With advanced data analytics, real-time monitoring and automated alerting, we proactively uncover digital risks across a wide range of online environments.
Network Defence Intelligence
Subject matter experts in cyber threat intelligence and adversary TTPs, the team enables CDA members to strengthen their cyber defences with high-quality, targeted intelligence on threats to their networks and supply chains.
Focused on delivering actionable intelligence, we empower members to actively hunt threat actors within their environments—moving beyond generic TTPs to precise, real-world insight that drives decisive action and resilience.
Cybercrime Investigations
We build an end-to-end understanding of high-impact cyber-enabled fraud targeting our members, their clients and customers – identifying opportunities to detect, target, disrupt, and mitigate threat actors and Cybercrime-as-a-Service operations.
Leveraging collective intelligence, we produce targeted packs for law enforcement that deliver actionable insight, exposing the true scale of offending and enabling decisive disruption.
OUR APPROACH
Grounded in adaptability and credibility the CDA mindset focuses on the threat and turning intelligence into decisive action to protect our members and their customers, enhancing operational effectiveness and reducing risk.
We operate with a counter‑offensive ethos – identifying, targeting, and disrupting adversaries and their networks acting against our members. In so doing we support the continuous collaborative fight to degrade and constrain hostile whilst increasing preparedness and resilience.
We are constantly Watching, Hunting, Guarding, Analysing and Collaborating.
The CDA’s success is driven by high‑confidence intelligence, cutting through noise to deliver precise, measurable outcomes. Every action is deliberate, every signal carefully validated in our determination to deliver meaningful operational impact.
Our Alliance has a formal commitment to collective defence. Indeed, our Article V principle ensures that when one member faces extreme pressure, the Alliance mobilises collectively to defend and support them; acting as a unified, coordinated force.
Our values are built on agility, impact, mission focus, and security – with our members’ operational security at the core of everything we do.
OUR PURPOSE
To protect our members, their clients, customers and the societies they serve.
OUR MISSION
To generate and share intelligence that drives action through trusted collaboration to:
- Deliver insight on emerging threats
- Strengthen cyber resilience
- Reduce impact
- Counter adversaries
- Protect public confidence
- Preserve credibility in the digital economy
- Strengthen national ans regional resilience
- Safeguard critical services