Shutting the Door on Covert Networks: Why Consent and Proof Are Non-Negotiable

Google and its partners recently dismantled the XCPE botnet, an unconsented, malicious network built by covertly hijacking more than a million consumer devices. We applaud this takedown. Covert networks are dangerous, and exposing the bad actors behind them makes the internet safer.

3 min read

In its report, Google bluntly stated that claims of “ethical sourcing” must be backed by “transparent, auditable proof of user consent.” We agree. Bright Data set the standard for what a Consented and Responsible network looks like, and it is time the entire industry is held to this exact level of accountability.

Anyone can write “ethical” or “compliant” on a website. As recent takedowns prove, self-reported claims often hide a malicious reality. We believe in proving our claims under intense scrutiny. Here is the verifiable proof behind Bright Data’s network:

Self-reported ethics do not count for much. We are the only company in our industry whose network operations have been independently audited by a Big Four firm—PwC, a rigorous compliance audit we have successfully completed twice. Alongside our SOC 2 Type II, ISO 27001 certifications, and AppEsteem certification, we prove our practices rather than just promising them.

Consent cannot be a footnote, implied, or bypassed. Every IP in our network comes from a user who knowingly opted in on a stand-alone, dedicated screen, and who can easily opt out at any time. We are so transparent about this that we provide a dedicated online portal where anyone can check to see if their device is part of Bright Data’s network. Any internet connection appearing in that portal deliberately opted-in to participate.

Trust runs in both directions. Access to our network requires rigorous, human-reviewed Know Your Customer (KYC) verification. Furthermore, compliance and ethics are built directly into our network’s architecture. We actively detect, block, and attribute abuse in real time, because a network is only as trustworthy as the activity running through it.Our rigorous standards are documented in our Trust Center.

This infrastructure powers critical, world-changing operations. Our network is relied on by 50,000 organizations from cyber security, business, technology, non profits, and crisis response. Here are a few examples of what it empowers. Cybersecurity teams map the infrastructure of criminal networks, monitor malware, and detect digital fraud to protect organizations globally. Global brands detect counterfeit sellers, ensure accurate dynamic pricing, and verify ad placements. Technology leaders use the network to safely train, ground, and evaluate AI models. Our network actively powers non-profits and universities. It has been used to rescue people by locating online distress signals during the Turkish earthquakes, expose global illicit supply chains and human rights abuses, and uncover broadband pricing discrimination against low-income communities.

These critical use cases require a supply chain you can trust. We believe verifiable standards must become the baseline for everyone.