Services

Engagements are scoped and priced based on complexity and time. Retainer arrangements are available for ongoing intelligence needs. All work is performed directly by the principal analyst.

Threat Research

Actor profiling, infrastructure mapping, and campaign tracking. Useful when you need to understand who is targeting you, how they operate, and what they’re likely to do next.

• Threat actor profiling and TTP analysis
• Infrastructure pivot and attribution research
• Indicator enrichment and validation
• Targeted threat landscape assessments

Intelligence & OSINT

Open-source collection and structured analysis — identifying exposure, adversary presence, and early warning signals across the surface, deep, and dark web.

• Brand and executive exposure monitoring
• Credential and data leak identification
• Dark web presence assessment
• Pre-engagement due diligence research

Exposure Assessment

A structured review of your external attack surface — what an adversary sees before they ever touch your network. Covers internet-facing assets, exposed credentials, and third-party risk, delivered as a written report with risk-ranked findings and remediation guidance.

• External attack surface enumeration (domains, IPs, exposed services, shadow IT)
• Credential and data leak identification
• Third-party and supply chain exposure review
• Misconfiguration and unintended exposure identification
• Risk-ranked findings with actionable remediation steps

Suitable as a one-time baseline or periodic refresh. Commonly paired with Intelligence & OSINT for ongoing monitoring.

Investigation Support

Technical support for active fraud, intrusion, and cybercrime investigations. Structured to complement internal teams or legal counsel — not to replace them.

• Digital evidence gathering and preservation guidance
• Cybercrime actor attribution
• Financial fraud trail reconstruction

Advisory Services

Practitioner-level guidance for organizations building or maturing a CTI function. Covers program design, tooling selection, and team skill development.

• CTI program design and maturity assessment
• Intelligence requirements development
• Platform and tooling evaluation
• Vendor and feed assessment

Training

Hands-on, practitioner-focused training for analysts and security teams. Delivered on-site or remotely; custom curriculum available for team-specific needs.

• OSINT tradecraft and methodology
• Threat actor research techniques
• Intelligence writing and dissemination

Law enforcement and active military personnel receive training at no charge. If you serve and have a need, reach out.

Referrals

Not every need is the right fit for a one-person shop. If your situation calls for a larger team, a different specialty, or capabilities outside our scope, we’ll say so and point you toward someone who can actually help. No runaround.