Center for Long-Term Cybersecurity

What Center for Long-Term Cybersecurity does

The Center for Long-Term Cybersecurity (CLTC) is an academic research center housed within UC Berkeley's School of Information, founded in 2015 with a founding grant from the William and Flora Hewlett Foundation's Cyber Initiative. CLTC functions as a convening platform, research hub, and policy translator at the intersection of public-interest cybersecurity and AI safety. It serves decision-makers in government, frontier AI developers, and under-resourced community organizations — including nonprofits, K-12 schools, municipalities, and social-sector groups — by producing governance frameworks, threat research, and applied programs. The organization co-founded the Consortium of Cybersecurity Clinics in 2021 alongside MIT, Indiana University, and the University of Alabama, and operates the UC Berkeley Cybersecurity Clinic, the AI Security Initiative (AISI), the Public Interest Cybersecurity Program, the AI Policy Hub, the Data Metabolism Program, and the Daylight Lab (ML Fairness). It also convenes the annual Cyber Civil Defense Summit, hosts the Cyber Resilience Corps, and runs CyberCAN for cities and nonprofits.

Name

Center for Long-Term Cybersecurity

Legal name

Center for Long-Term Cybersecurity

Website

https://cltc.berkeley.edu

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

1–10 employees

Short description

The Center for Long-Term Cybersecurity is a UC Berkeley research center that produces public-interest cyber and AI security frameworks, threat research, and educational programs, serving governments, frontier AI developers, and under-resourced community organizations including nonprofits, schools, and municipalities.

Ownership category

akta.pro rank

Headquarters

HQ city

Berkeley

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Others

Revenue model

1. Private Philanthropy and Foundation Grants: CLTC operates primarily through private philanthropy. Founded in 2015 with a grant from the William and Flora Hewlett Foundation's Cyber Initiative, the center sustains operations through foundation grants, individual donors, and occasional cy pres court-awarded settlements.
2. Corporate Grants and Partnerships: CLTC receives support from technology companies including grants and funding from organizations like Okta for Good ($100,000 grant for Cybersecurity Futures 2030), Google.org, and other corporate donors.
3. Government and Institutional Funding: CLTC receives funding from government sources including the National Science Foundation, California Department of Technology, and partnerships with U.S. Department of Education for programs like PACE.

Go-to-market motion2 records

Distribution channels4 records

Marketing channels6 records

Core offering

CLTC is a nonprofit academic research center at UC Berkeley's School of Information that produces frameworks, standards profiles, research reports, and policy analyses on public-interest cyber and AI security. It offers pro bono cybersecurity clinic services to under-resourced nonprofits, municipalities, and schools, and operates the Consortium of Cybersecurity Clinics, a 60-member global network of university-based clinics. All research outputs are publicly available at no cost.

Product overview

CLTC is a premier research hub at UC Berkeley that operates as a platform of research programs, publications, and initiatives rather than a traditional product company. The core portfolio includes AI risk management frameworks (General-Purpose AI Risk-Management Standards Profile V1.2, Agentic AI Risk-Management Standards Profile), cybersecurity threat research (AIxCyber Threat Scenarios, Risk Thresholds reports), and policy analysis (State Cybersecurity Guidebook, State Legislative Tracking). Educational offerings center on the UC Berkeley Cybersecurity Clinic and the Consortium of Cybersecurity Clinics (60 member institutions globally). Public interest programs include CyberCAN for cities/nonprofits, Cyber Civil Defense Summit, and PACE partnership with the U.S. Department of Education for K-12 cybersecurity. The organization also produces corporate transparency tools, mutual aid security guides, and coordinates the Cyber Resilience Corps volunteer network.

Differentiator

Problem solved

Functional benefit

Brands

• UC Berkeley Cybersecurity Clinic: A practicum-style course at the UC Berkeley School of Information that trains students to provide pro bono digital security assistance to organizations that face cyber threats but have limited capacity to defend themselves
• AI Security Initiative (AISI)
• Public Interest Cybersecurity Program
• Consortium of Cybersecurity Clinics
• CyberCAN (Cybersecurity for Cities and Nonprofits)
• Cyber Civil Defense Summit
• Cyber Resilience Corps
• AI Policy Hub
• PACE (Partnership for Advancing Cybersecurity in Education)
• Data Metabolism Program
• ML Fairness / Daylight Lab

Products and services

• General-Purpose AI Risk-Management Standards Profile A research framework providing risk-management practices and controls for identifying, analyzing, and evaluating risks of general-purpose AI (GPAI) models, complementing NIST AI RMF and ISO/IEC 23894. Version 1.2 was developed with input from over 150 stakeholders through consultations and workshops.
• Agentic AI Risk-Management Standards Profile A framework establishing governance controls, risk identification methods, and measurement frameworks for AI agents capable of autonomous decision-making. Introduces six autonomy classification levels (L0-L5) with corresponding governance requirements for threats including self-proliferation, deceptive alignment, and cascading compromises.
• Toward Risk Thresholds for AI-Enabled Cyber Threats A report proposing Bayesian networks as a structured approach for developing and evaluating AI cyber risk thresholds, demonstrating how probabilistic modeling can integrate heterogeneous evidence and enable continuous updating as threats evolve.
• Whole-of-State Cybersecurity Guidebook A guidebook mapping community cyber defense programs across U.S. states, focusing on cybersecurity clinics, Regional Security Operation Centers (RSOCs), and state cyber corps, with ROI analysis and implementation guidance for state governments.
• Tracking Cybersecurity Policy Developments Across State Legislatures A first-of-its-kind empirical analysis of every cybersecurity-related bill enacted across all 50 states during 2025 legislative sessions, identifying 99 bills establishing 393 new cybersecurity rules mapped to NIST CSF 2.0 functions.
• AIxCyber Threat Scenarios: 2027-2029 Three speculative threat scenarios exploring how advanced AI will alter the cybersecurity threat landscape over the next three years, covering AI-enabled social engineering, automated zero-day exploitation, and supply chain attacks via indirect prompt injection.
• UC Berkeley Cybersecurity Clinic A practicum-style course at the UC Berkeley School of Information that trains students to provide pro bono digital security assistance to nonprofits and social-sector organizations facing cyber threats, having trained 300+ students and served 50+ organizations since 2018.
• Consortium of Cybersecurity Clinics An international alliance of cybersecurity clinics co-founded by CLTC in 2021 to share best practices and expand the clinic model. Has grown to 60 member clinics across 28 U.S. states, D.C., Canada, Taiwan, Peru, Sri Lanka, and Pakistan, serving 2,200 students and 700 organizations in 2024-2025.
• Partnership for Advancing Cybersecurity in Education (PACE) A public-private partnership between CLTC and the U.S. Department of Education to improve K-12 digital infrastructure cybersecurity by mobilizing EdTech companies to enhance product security through secure-by-design principles.
• Cyber Civil Defense Summit An annual gathering of cyber defenders, academics, and practitioners to advance community cyber defense, with regional summits planned for 2026 in New Jersey (East), Louisiana (Central), and Arizona (West).
• ML Fairness Bootcamp A week-long algorithmic fairness curriculum developed by the Daylight Lab that trains students to identify, discuss, and address risks posed by machine learning algorithms, including hands-on Python labs for detecting racial bias in healthcare algorithms and gender bias in hiring.
• Corporate Reporting Template for Data Governance, Cybersecurity, and AI Excel-based template for voluntary corporate disclosure on data governance, cybersecurity, and AI, designed for the mobile health market but adaptable to other industries, based on Delphi study with 20 international experts.
• Securing Mutual Aid: Cybersecurity Practices and Design Principles for Financial Technology A guide providing cybersecurity best practices for mutual aid organizations (food banks, disaster relief, bail funds) and design principles for secure financial technology platforms serving these communities.
• AI Security Initiative (AISI) A CLTC program advancing AI risk management in the public interest, producing frameworks including the GPAI Profile and Agentic AI Profile, and researching AI-enabled cybercrime, threat scenarios, and risk thresholds.
• Public Interest Cybersecurity Program A CLTC program helping communities that rely on technology for public life receive cybersecurity protection, hosting the Cybersecurity Clinic, CyberCAN initiative, and Consortium of Cybersecurity Clinics.
• CyberCAN: Cybersecurity for Cities and Nonprofits An initiative helping local governments and nonprofits understand and address cybersecurity challenges, providing vulnerability assessments and strategic recommendations for under-resourced organizations.
• Cyber Resilience Corps A program mobilizing cyber volunteers nationwide to defend organizations that power communities, listed as a key resource in CISA's 'CI Fortify' Initiative.

Quantifiable outcome

• Consortium of Cybersecurity Clinics grew from founding in 2021 to 60 member clinics serving 713 community organizations and 2,238 students in 2024-25 academic year
• +3 more outcomes

Named customers5 records

Segments5 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability10 records

Feature4 records

Partnerships

Four partnerships are on record, tiered major, minor and core.

• Okta and State of WashingtonmajorStrategic or Co-development Partner · 8 December 2025Partnership to protect nonprofits from cyber threats, including CyberCAN Washington program providing regional assessment of nonprofit cybersecurity and strategic recommendations.
• Cooperative AI FoundationminorStrategic or Co-development Partner · 1 September 2025CLTC researchers have been involved in grants for cooperative AI research, including work on agent cooperation and multi-agent collaboration frameworks.
• U.S. Department of EducationcoreStrategic or Co-development Partner · 2 May 2024CLTC and the U.S. Department of Education announced PACE (Partnership for Advancing Cybersecurity in Education) to improve K-12 digital infrastructure defensibility through EdTech vendor collaboration and secure-by-design principles.
• Consortium of Cybersecurity ClinicscoreStrategic or Co-development Partner · 1 January 2021Co-founded in May 2021 by CLTC, MIT, Indiana University, and University of Alabama to support the growth of the clinic model in cybersecurity. Network has grown to 60 clinics globally across 28 U.S. states plus D.C., Canada, Taiwan, Peru, Sri Lanka, and Pakistan.

Scale indicators7 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Center for Security and Emerging Technology (CSET): Georgetown University-based research center producing policy research on AI and emerging technology security. Operates the same university-anchored research, framework-publishing, and policy-convening model as CLTC.
• Harvard Berkman Klein Center for Internet & Society: Harvard-based research center producing research on cybersecurity, AI governance, and digital policy. Closely comparable convening and framework-publishing role to CLTC, with a similar cross-disciplinary talent model.
• MIT Internet Policy Research Initiative: MIT-based research initiative focused on internet and cybersecurity policy with strong ties to MIT faculty. Shares CLTC's university research center structure and AI/cyber policy framing.
• Aspen Cybersecurity Group: Multi-stakeholder convening body focused on cybersecurity policy and workforce, with a Cyber Civil Defense-style summit model. Compares closely with CLTC's Cyber Civil Defense Summit convening role.

Broad incumbents

• Atlantic Council Cyber Statecraft Initiative: Think tank cyber policy program convening governments and industry on cyber strategy. Shares CLTC's convening and policy-research mandate but is not university-affiliated and covers a broader geopolitical scope.
• Carnegie Endowment for International Peace: Global think tank operating technology and international security programs including AI/cyber governance. Overlaps with CLTC's AI Policy Hub and policy work but at a much larger scale and broader scope.
• RAND Corporation: Major policy research organization with dedicated cybersecurity, AI, and critical infrastructure divisions. Compares with CLTC's applied research function but operates at significantly larger scale across many policy domains.
• CSIS (Center for Strategic and International Studies): Major bipartisan policy research organization running prominent cybersecurity and technology programs. Comparable convening and policy-briefing function to CLTC but across a much wider portfolio and at global scale.
• New America: Civic and technology policy think tank with programs on digital rights and public-interest technology, including a Public Interest Technology University Network. Overlaps with CLTC's public-interest cybersecurity framing but with broader thematic coverage.
• World Economic Forum Centre for Cybersecurity: Global multi-stakeholder platform convening governments and industry on cyber policy. Mirrors CLTC's Cyber Civil Defense Summit convening role at a global scale and with a much larger institutional platform behind it.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xtwitter.com/CLTCBerkeley
• YouTubeyoutube.com/channel/UC3EsDrem24nYARGkC2XBv_A
• Facebookfacebook.com/CLTCBerkeley
• LinkedInlinkedin.com/company/cltcberkeley

Revenue estimate

Valuation estimate

Number of profiles

Profiles15 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Center for Long-Term Cybersecurity