McCrary Institute for Cyber and Critical Infrastructure Security

Cybersecurity Policy Research and Advisorymccraryinstitute.com

The McCrary Institute is an Auburn University research center delivering policy, applied research, and convening services on cybersecurity and critical infrastructure to federal agencies, defense commands, state/local governments, and critical infrastructure operators.

Company typePrivate
Founded2015
HeadquartersAuburn, United States
Headcount11–50
GTM typeB2B
OfferingServices

What McCrary Institute for Cyber and Critical Infrastructure Security does

The McCrary Institute for Cyber and Critical Infrastructure Security is an academic research center housed at Auburn University, founded in 2015, with offices in Auburn, AL (540 Devall Drive, Suite 401) and Washington, D.C. (1307 New York Ave NW). It operates end-to-end across cyber education, research, policy, and operations, producing applied research, policy briefs, task-force recommendations, and convenings such as the annual McCrary Cyber Summit and the Cyber Focus Podcast (a multi-season executive podcast hosted by Director Frank Cilluffo). Core research outputs include task forces on China-related threats, national security, law enforcement, and regulatory streamlining, plus coverage across 16 critical infrastructure sectors. Its flagship operational program is the Southeast Regional Cybersecurity Collaboration Center (SERC3), a regional hub supporting multi-state cyber coordination with an industry advisory board chaired by executives from NextEra Energy and the Tennessee Valley Authority.

The institute is led by Director Frank Cilluffo, with Ronald Burgess as Advisory Board Chairman, Marcus Sachs as Deputy Director for Research, John A. Kotolski as SERC3 Program Director, and Xiao Qin as Alumni Professor and Director of Computer Science and Software Engineering Graduate Programs. Its expert network (senior fellows) includes former NSA and FBI cyber leaders, the first U.S. national cyber director, and private-sector experts from Palo Alto Networks, AWS, Zscaler, and Halcyon.

Revenue flows from federal and state government grants (notably a $10M DOE award for SERC3 in April 2024 with $12.5M total project value), applied research contracts with federal agencies, military, and national laboratories, and corporate partnerships/sponsorships through programs like the SERC3 Industry Advisory Board and Project Glasswing. Customers and engagement partners include the U.S. Department of Energy, U.S. Secret Service NCFI, Alabama state and local governments (via SLCGP), the U.S. House Homeland Security Committee, U.S. Cyber Command, the National Security Agency, and the FBI Cyber Division. The institute is a non-commercial, grant-funded entity within Auburn University and does not sell commercial software or services; it monetizes via grant cycles, research contracts, sponsorships, and convening.

McCrary Institute for Cyber and Critical Infrastructure Security firmographics

Firmographics

Name: McCrary Institute for Cyber and Critical Infrastructure Security
Legal name: McCrary Institute for Cyber and Critical Infrastructure Security
Website: https://mccraryinstitute.com
Company type: Private
Founded year: 2015
Operating status: Operating
Headcount range: 11–50 employees
Short description: The McCrary Institute is an Auburn University research center delivering policy, applied research, and convening services on cybersecurity and critical infrastructure to federal agencies, defense commands, state/local governments, and critical infrastructure operators.
Ownership category
akta.pro rank

McCrary Institute for Cyber and Critical Infrastructure Security industry classification

Industry

Product category: Cybersecurity Policy Research and Advisory
NAICS: National Security (928110), Educational Support Services (61171), Colleges, Universities, and Professional Schools (6113)
SIC: Services-Educational Services (8200)
akta.pro primary industry: Critical Infrastructure Protection (CIP) & NERC-CIP Compliance (HDADAJAC)
akta.pro secondary industries: Cyber Defense & Information Security (National Security) (BPAIAHAE), Cybersecurity Learning Platforms (EDAFANAF), Cybersecurity (EDAAAPAC)

Keywords

Cybersecurity policy research
Critical infrastructure security
Applied research services
Cyber workforce training
Public policy advisory

Where McCrary Institute for Cyber and Critical Infrastructure Security is headquartered

Location

Headquarters

HQ city: Auburn
HQ country: United States
HQ region: North America

Offices2 records

Markets served

McCrary Institute for Cyber and Critical Infrastructure Security business model

Business model

GTM type: B2B
Offering type: Services
Cost components: Personnel, Operations, Technology or R&D, Marketing or Sales, Others

Revenue model

Government Grants and Funding: Federal and state government grants including DOE grants, federal appropriations, and cybersecurity grant programs (SLCGP)
Research Contracts: Applied research and services partnerships with government agencies, military, national laboratories, and industry clients
Partnerships and Sponsorships: Corporate partnerships with industry stakeholders including energy sector companies participating in SERC3 Industry Advisory Board

Go-to-market motion1 record

Distribution channels3 records

Marketing channels6 records

McCrary Institute for Cyber and Critical Infrastructure Security product offering

Product offering

Core offering

The McCrary Institute for Cyber and Critical Infrastructure Security is an academic research institute at Auburn University that conducts applied research, develops policy recommendations, and delivers cybersecurity training and education for government, military, critical infrastructure operators, and industry. It provides end-to-end capability across cyber education, research, policy, and operations, including the SERC3 regional collaboration hub, partnerships with the U.S. Secret Service NCFI, and the State and Local Cybersecurity Grant Program for Alabama.

Product overview

The McCrary Institute is a cybersecurity and critical infrastructure security research institute at Auburn University, not a commercial product company. It offers a portfolio of research services, educational content, and collaborative programs including the Cyber Focus Podcast (executive-level podcast on cyber threats), Applied Research Services for government and industry clients, the Southeast Regional Cybersecurity Collaboration Center (SERC3) for regional collaboration, Policy Briefs and Reports on cyber policy, Cyber Training and Education programs (including partnership with Secret Service's NCFI), and Alabama State and Local Government Cybersecurity Services. The institute focuses on applied research, policy development, and expert convening rather than commercial product development.

Differentiator

Problem solved

Functional benefit

Brands

Cyber Focus Podcast: Executive-level podcast covering cybersecurity, national security, and critical infrastructure featuring interviews with senior government and industry leaders.

Products and services

Applied Research Services Applied research and services partnership supporting government, military, national laboratories, and industry clients to safeguard critical infrastructure through customer-driven research projects.
Southeast Regional Cybersecurity Collaboration Center (SERC3) Regional collaboration hub focused on cybersecurity for critical infrastructure, bringing together experts and stakeholders to address shared cybersecurity challenges across the Southeast United States. Includes an Industry Advisory Board with energy sector leadership.
Cyber Training and Education Cybersecurity training programs developed in partnership with U.S. government agencies including the Secret Service's National Computer Forensics Institute (NCFI) to enhance cyber workforce capabilities for government and law enforcement.
Alabama State and Local Government Cybersecurity Services Cybersecurity support services for Alabama state and local governments delivered through the State and Local Cybersecurity Grant Program (SLCGP), providing resources, planning, and coordination for under-resourced state and local entities.

Quantifiable outcome

39 bipartisan cyber policy recommendations released for incoming administration
+2 more outcomes

Companies that use McCrary Institute for Cyber and Critical Infrastructure Security

Customer profile

Named customers6 records

Segments4 records

Ideal customer profiles4 records

McCrary Institute for Cyber and Critical Infrastructure Security technology and API

Technology

Technology focussed No

API detail

Has API: No
API docs
API detail

Core technology

AI maturity

App detail

McCrary Institute for Cyber and Critical Infrastructure Security partnerships and signals

Strategic signal

Partnerships

Ten partnerships are on record, tiered core, major and minor.

Auburn University and Oak Ridge National LaboratorycoreStrategic or Co-development Partner · 18 April 2024DOE awarded $10 million grant to establish a cybersecurity research and operations center protecting the electric power grid. Total project value $12.5 million including partner contributions. Involves creating regional collaboration hub, experiments, and security technologies development.
U.S. Secret Service (NCFI)coreStrategic or Co-development PartnerCollaboration expanding cyber training and education programs with the National Computer Forensic Institute (NCFI) to enhance cyber workforce capabilities for government and law enforcement.
Cyberspace Solarium Commission 2.0coreStrategic or Co-development PartnerJoint release of 39 bipartisan cyber policy recommendations for the incoming presidential administration, incorporating insights from 40+ cybersecurity experts from both organizations.
Palo Alto NetworkscoreStrategic or Co-development PartnerDaniel Kroese, VP of Global Policy at Palo Alto Networks, serves as Senior Fellow. Company participates in AI frontier model initiatives (Project Glasswing) and provides expert policy input on AI and cybersecurity issues.
NextEra Energy and Tennessee Valley AuthoritymajorStrategic or Co-development PartnerExecutives Jennifer Flandermeyer (NextEra) and KC Carnes (TVA) appointed to lead SERC3 Industry Advisory Board, bringing decades of energy sector experience to guide regional cybersecurity collaboration.
HalcyonminorStrategic or Co-development PartnerCynthia Kaiser, Senior Vice President of Ransomware Research Center at Halcyon, serves as Senior Fellow. Represents private sector cybersecurity expertise in ransomware research.
Amazon Web Services (AWS)minorStrategic or Co-development PartnerAWS cybersecurity experts participate as Senior Fellows providing cloud security expertise and policy input on AI and infrastructure security.
ZscalerminorStrategic or Co-development PartnerPrivate sector cybersecurity experts from Zscaler serve as Senior Fellows contributing zero trust and cloud security expertise.
FBI Cyber DivisioncoreStrategic or Co-development PartnerFBI Assistant Director for Cyber Brett Leatherman appears on Cyber Focus podcast discussing joint operations, threat response, and public-private partnerships for critical infrastructure protection.
State and Local Governments (via SLCGP)majorStrategic or Co-development PartnerManages Alabama State and Local Government Cybersecurity Grant Program providing resources, planning, and coordination for under-resourced state and local entities.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

McCrary Institute for Cyber and Critical Infrastructure Security competitors and assessment

Company assessment

Direct peers

Cyberspace Solarium Commission 2.0: Co-producer of McCrary's 39-recommendation cyber policy roadmap in 2024. Operates as a direct peer in bipartisan cyber policy development, convening 40+ experts to produce actionable recommendations for U.S. administrations.
Aspen Cybersecurity Group: Multi-stakeholder policy initiative producing influential cyber policy recommendations. Comparable as a non-university convening body producing bipartisan cyber policy frameworks with senior government and industry leader participation.
Software Engineering Institute (SEI) at Carnegie Mellon: Federally funded R&D center at a university producing applied cybersecurity research and CERT coordination. Comparable as a university-based cyber research operation funded by federal contracts and producing tools, frameworks, and policy guidance.
Idaho National Laboratory (INL): DOE national laboratory leading critical infrastructure and OT/ICS cybersecurity research. Comparable in the DOE-funded critical infrastructure cybersecurity research space, including grid and industrial control system protection.

Broad incumbents

Center for Strategic and International Studies (CSIS): Larger, established Washington DC think tank with significant cybersecurity and critical infrastructure programs. Comparable in convening senior government and industry leaders and producing influential policy reports, but with broader issue coverage and larger permanent staff.
Atlantic Council: Major international affairs think tank with a prominent Cyber Statecraft Initiative. Comparable in producing cyber policy recommendations, hosting senior fellows, and engaging with government on critical infrastructure security.
RAND Corporation: Policy research organization with extensive cybersecurity and critical infrastructure work for federal clients. Comparable in producing applied research, policy analysis, and federal contracting on national security cyber topics, though much larger and broader in scope.
MITRE Corporation: Federally funded research and development center operating the CVE program and ATT&CK framework. Comparable as a federally-supported research organization addressing critical infrastructure cyber defense, though with substantially larger scale and proprietary IP.
Carnegie Endowment for International Peace: International affairs think tank with substantive cyber policy and technology programs. Comparable in producing policy reports, hosting senior fellows, and engaging governments on cyber and critical infrastructure topics.

Emerging players

Global Resilience Federation: Cross-sector information sharing organization for resilience and cyber threat intelligence. Comparable as a sector-spanning organization convening critical infrastructure operators on cybersecurity collaboration, complementing McCrary's SERC3-style regional model.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

McCrary Institute for Cyber and Critical Infrastructure Security financial estimates

Financial estimate

Revenue estimate

Valuation estimate

McCrary Institute for Cyber and Critical Infrastructure Security leadership team

Management profile

Number of profiles

Profiles5 records

McCrary Institute for Cyber and Critical Infrastructure Security funding detail

Funding detail

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

McCrary Institute for Cyber and Critical Infrastructure Security M&A and investment

M&A and investment

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about McCrary Institute for Cyber and Critical Infrastructure Security

What does McCrary Institute for Cyber and Critical Infrastructure Security do?

Is McCrary Institute for Cyber and Critical Infrastructure Security a public or private company?

McCrary Institute for Cyber and Critical Infrastructure Security is a private company. It is classified as state government owned and is currently operating.

When was McCrary Institute for Cyber and Critical Infrastructure Security founded?

McCrary Institute for Cyber and Critical Infrastructure Security was founded in 2015. It employs 11 to 50 people.

Where is McCrary Institute for Cyber and Critical Infrastructure Security based?

McCrary Institute for Cyber and Critical Infrastructure Security is headquartered in Auburn, United States, in the North America region.

How does McCrary Institute for Cyber and Critical Infrastructure Security make money?

Three revenue lines are on record. Government Grants and Funding is the primary driver. The others are research Contracts and partnerships and Sponsorships.

Who are McCrary Institute for Cyber and Critical Infrastructure Security's main competitors?

Direct peers on record are Cyberspace Solarium Commission 2.0, Aspen Cybersecurity Group, Software Engineering Institute (SEI) at Carnegie Mellon and Idaho National Laboratory (INL). Broad incumbents are Center for Strategic and International Studies (CSIS), Atlantic Council, RAND Corporation, MITRE Corporation and Carnegie Endowment for International Peace. Global Resilience Federation is listed as an emerging player.

Does McCrary Institute for Cyber and Critical Infrastructure Security have an API?

No public API is recorded for McCrary Institute for Cyber and Critical Infrastructure Security.

What industry is McCrary Institute for Cyber and Critical Infrastructure Security in?

McCrary Institute for Cyber and Critical Infrastructure Security's product category is Cybersecurity Policy Research and Advisory. Its primary akta.pro industry code is HDADAJAC, Critical Infrastructure Protection (CIP) & NERC-CIP Compliance, with a secondary code of BPAIAHAE, Cyber Defense & Information Security (National Security). Its NAICS code is 928110 and its SIC code is 8200.