Tucked away in the Senate Armed Services Committee’s annual defense policy bill is a provision that proposes a unique partnership between the US government and civilian hackers. Experts and former military officials view this initiative as a vital solution to tip the scales against China, which boasts a much larger bench of cyber operators than the United States.
Leveling the playing field in the digital war: Partnering with the private sector to bridge the personnel gap with Beijing
The committee seeks to authorize a pilot program to assess the feasibility of conducting cyber operations using civilian contractors. These contractors would use their own infrastructure to gain access to target systems while remaining under the operational direction and authority of US Cyber Command (CYBERCOM). While the provision must still be reconciled between the Senate and the House before becoming law, its introduction marks a significant shift in Washington’s defense strategy.
The need for this move is driven by the harsh reality on the ground: China holds a 10-to-1 personnel advantage over the US in the cyber domain. In a context where military cyber operators are in short supply, private sector support is considered the only way to scale American capabilities to the qualitative and quantitative levels required to meet Asian threats.
Access operations under military oversight: Defining the scope and limits of the new pilot program
Unlike destructive cyberattacks, the proposed program is limited to the „access” phase. In digital warfare, penetrating a system is an incredibly time-consuming process that can take months or even years. Operators must identify breaches, map networks, and maintain a covert presence until an order to strike is given. By outsourcing this monitoring and access maintenance stage to contractors, military personnel would be freed up to focus on the „mastery” of cyber warfare and the execution of offensive effects.
The major benefit of this structure is that the federal government retains direct control over operations, avoiding scenarios where private companies might act on their own. However, the simple act of unauthorized entry into a foreign network, even without causing immediate damage, can be perceived by adversaries as an offensive action, raising complex legal questions about what constitutes an attack in virtual space.
Ethical dilemmas and the risk of retaliation: Navigating international norms and the safety of civilian infrastructure
Implementing this program is not without controversy. Some experts warn that involving civilian contractors in military operations could trigger direct reprisals against private infrastructure. If a company uses its own network to support military actions, it could become a legitimate target in a conflict. There are also concerns that this strategy could undermine international norms that the US has sought to promote, particularly the protection of civilian infrastructure from state attacks.
On the other hand, proponents of the project argue that the American private sector represents the greatest competitive advantage over China. Using infrastructure and tools developed by companies would allow for much faster innovation, bypassing lengthy public procurement processes. In their view, moving beyond traditional partnerships and into „true teammates” is the only way the United States can dominate a domain characterized by permanent technological evolution.
