As a kid, Pasha Kravtsov was an avid gamer, and got upset when other kids cheated. “I always wanted to understand: How were they doing that?” he told Payload.
As an adult, he’s still asking that question—but now his sights are set a bit higher. As True Anomaly’s cybersecurity director, Kravtsov leads a team of 27+ people working out how to stop someone from breaking into a spacecraft.
Side quests: Kravtsov spent his teen years reverse-engineering games, finished high school early, and joined Cloudflare’s support team at age 17. His parents even had to sign the offer letter. Within a year he’d moved to security, where he worked on a bug that leaked private data from sites using Cloudflare.
He left after the company’s 2019 IPO and bounced between startups. Then, Russia invaded Ukraine, where Kravtsov’s family is from. “Commercial satellites became battlefield infrastructure overnight,” he said.
When a former colleague shared that his company was working to counter a recently-launched Russian military sat, Kravtsov wanted in.
Cheat code: He joined True Anomaly in early 2023 as its first security engineer—with no aerospace or defense background—and built the encryption for the company’s first mission. “A lot of the problems I was working on, you can’t just Google,” he said.
Commercial software can feel like “an abstraction layer on an abstraction layer,” he said. But in defense space, “it’s very, very clear what the stakes are.”
“A bad day at Cloudflare didn’t mean a physical effect,” Kravtsov said. In orbit, a hijacked satellite could go “somewhere where it’s not supposed to be,” with real consequences for national security missions.
Multiplayer mode: The team got its biggest test earlier this year. True Anomaly was one of the first companies to face NOAA’s new, stricter cybersecurity requirements for spacecraft licenses—arriving shortly before the company’s Mission X-3 launch. Kravtsov worked out a plan with the agency and led the effort to meet the requirements, all while keeping the X-3 flight test on schedule.
As the rules push the rest of the industry to increase the focus on security, he said he hopes companies drop one stubborn assumption along the way.
“What I want to see is challenging the status quo of ‘if you can’t touch it, it can’t be hacked,'” he said. “Which is not accurate.”

