Representative End User Clients
Representative Automation Clients
Representative Software Clients
Launch advances BeyondTrust’s mission to drive identity security innovation, uncover emerging threats, foster collaboration, and empower defenders worldwide.
BeyondTrust, the global leader in identity security protecting Paths to Privilege™, announced the formal launch of its dedicated cybersecurity research team, BeyondTrust Phantom Labs™. The launch of Phantom Labs marks a strategic milestone in BeyondTrust’s mission to advance identity security innovation, uncover emerging threats, foster industry collaboration, and help shape standards that empower defenders with actionable insights worldwide.
Building on years of real-world threat analysis, vulnerability disclosures, and identity-focused security innovation, Phantom Labs is tasked with “thinking like an attacker” to expose the ways threat actors escalate access and maintain control. With the addition of new research leadership and specialized hires, Phantom Labs is accelerating the company’s ability to help defenders proactively understand, detect, and disrupt identity exploitation in increasingly complex hybrid and cloud environments.
BeyondTrust’s expanding research mission focuses on delivering key contributions to the global cybersecurity community:
Original threat research and vulnerability discovery.
Guidance for defenders, including mitigation playbooks and hardening recommendations.
Collaboration with product teams to drive innovation across the BeyondTrust portfolio.
Phantom Labs formalizes the work of BeyondTrust’s existing security researchers, whose investigations have uncovered critical vulnerabilities and provided threat intelligence used in real-world incident response, including intelligence that helped Okta investigate and contain a high-profile breach.
Recent contributions include:
Discovery of stealth privilege escalation risks in Microsoft Entra guest accounts.
Development of data science–driven detection models to identify session hijacking.
Release of the Paths to Privilege research framework, now integrated into BeyondTrust’s platform.
Ongoing collaboration with the Adventures of Alice & Bob podcast to help educate the market about unknown risks and contribute to the global cybersecurity community.
To further accelerate its identity security innovation and research momentum, BeyondTrust has made strategic new hires and elevated key internal experts into critical roles:
Kinnaird McQuade, an industry-leading expert in cloud identity security, has joined BeyondTrust as Chief Security Architect. McQuade's security research has produced popular open-source tools including Cloudsplaining, which has been downloaded more than 40 million times. This work has helped shape how modern security teams identify and contain attacks such as data exfiltration, lateral movement, and privilege escalation—particularly in hybrid and cloud environments where identity is the new perimeter.
Fletcher Davis, a leading offensive security researcher and red team specialist, will lead Phantom Labs. Davis brings extensive experience in simulating advanced threat actor behavior, uncovering cross-domain identity risks, and exposing hidden paths to privilege in complex enterprise environments.
BeyondTrust’s research momentum is guided by Marc Maiffret, Chief Technology Officer at BeyondTrust and a pioneering force in vulnerability research and cybersecurity innovation. With decades of experience in offensive and defensive security—including discovering some of the first major Microsoft vulnerabilities and co-founding one of the earliest vulnerability management platforms—Maiffret brings a uniquely attacker-informed perspective to the company’s mission.