Upstream Labs

We research Digital Impersonation & Deception.

Overview

Upstream Labs is a security research lab focused on Digital Impersonation & Deception — how attackers impersonate trusted brands, services, and identities to manipulate people online. Our work spans phishing, brand abuse, credential theft, and identity impersonation across browsers, email, and emerging channels — and the systems we build to detect them.

Research Areas

Where we focus

  • Phishing & Brand Abuse
  • Browser & App Security
  • Credential Theft & Data Exposure
  • Identity Impersonation & Abuse

People

Who we are

Ricardo Oliveira

Ricardo was the co-founder and CTO of ThousandEyes, a leader in Digital Experience Monitoring that was acquired by Cisco in 2020, where he co-authored several patents.

Before founding ThousandEyes, Ricardo earned a PhD in Computer Science from UCLA, where he published research at conferences such as SIGCOMM and IMC and created one of the first Internet routing hijack detection systems.

Ricardo is also an active angel investor, backing early-stage companies across cybersecurity, infrastructure, developer tools, and enterprise SaaS.

Careers

We're hiring researchers who enjoy thinking creatively and tackling complex problems.

Don't see your role? Get in touch.