This is the same problem as white-hat security: you need people who know an awful lot about how bad guys work but are good guys. Security has developed a legitimate market over the years, but that took time.

You could try to ask independent consultant(s) who you trust to work on that problem and let them grow that practice. The problem is that they would need to have access to marketing platforms.