#1 Watch
Managed threat intelligence
An analyst learns your business, then monitors the threat groups and campaigns most likely to target it. You get a brief once a month, and a phone call when something can’t wait.
Details and case study →Services / #10 Share
Sector intelligence
Threat intelligence for organizations that will never have a CTI team, shared so nobody pays for it alone.
What you get
Benefits
01
Shared cost
Organizations in the same sector share the cost of one analyst’s coverage.
02
Specific to your sector
The groups, scams and lures hitting organizations that look like yours.
03
Practical steps
Every report ends with a few practical steps a small IT team can actually take.
04
Nonprofit and public sector work
NGOs, newsrooms and public agencies can bring us research questions under grants or contracts.
What’s included
What We Do
- Shared sector threat reports
- Research for NGOs, newsrooms and public agencies
How it works
How It Runs
- Step 1
Join
Organizations subscribe to their sector’s report.
- Step 2
Collect
We track activity aimed at the sector all month.
- Step 3
Publish
A monthly report goes to every subscriber.
- Step 4
Discuss
Optional group calls to talk through what changed.
Case study
A shared threat report for small credit unions
Eight small credit unions each wanted threat intel but none could justify paying for it alone. A shared monthly report gave all of them the same coverage at a fraction of the cost.
Example engagement. The client is fictional and details are illustrative, to show how this work typically goes.
8
credit unions sharing one report
1 call
group discussion each month
3
practical actions in every issue
The situation
Each credit union had an IT team of one to four people. They faced the same scams and attacks: fake login pages, phone fraud targeting members, and ransomware groups that go after financial institutions. None of them had the budget for a dedicated intel service.
What we did
We set up a shared monthly report covering the groups, scams and lookalike domains aimed at credit unions in the region. Each issue opens with a three-sentence summary and ends with three things a small IT team can do that month. An optional group call lets members compare notes.
What we found
Over the first few months, the most useful findings were lookalike domains imitating member login pages, a wave of text-message scams pretending to be fraud alerts, and a ransomware group that had started targeting small financial institutions.
What changed
Members started blocking lookalike domains before they were used and warned their own customers about the text scams before the messages arrived. The monthly call gave the IT leads a regular place to compare what they were seeing.
Related services
Discuss this service with an analyst
Tell us about your situation. We’ll confirm whether this service fits and agree on scope and price before any work starts.