Proposed plan comparison

Enrollment not yet open

Review proposed intelligence plans

Compare the proposed plan designs by depth, customization, analyst support, and organizational focus.

Compare the right level of intelligence support.

Cyber Threat Intelligence helps organizations understand relevant threats and vulnerabilities. Open Source Intelligence identifies security-relevant exposure across lawfully accessible public information. Plans are currently in development, and high-priority escalation is not active without an approved policy.

Intelligence plan comparisons

Cyber Threat Intelligence

Cyber Threat Intelligence proposed tiers

Review proposed plan details
Cyber Threat Intelligence plan comparison
FeatureEssentialProfessionalStrategic
Primary objectiveFoundational recurring threat awarenessOrganization-specific threat intelligence and decision supportCustomer-defined intelligence and executive decision support
Intended audienceSmall security teams; Operational leaders; Organizations beginning a formal threat-intelligence program; Teams needing concise, recurring awareness without extensive customizationSecurity and infrastructure teams; Organizations with defined OT, IT, or critical-infrastructure priorities; Teams needing recurring technical context and decision supportLeadership teams; Mature security programs; Critical-infrastructure operators; Organizations with complex or high-consequence risk environments
Coverage depthCore sector-relevant threats, vulnerabilities, incidents, and implicationsEssential coverage plus technology, actor, campaign, and impact contextProfessional coverage plus deeper tailored analysis and briefings
Organization-specific tailoringLimited — sector and topic focusedModerate to high — organization and priority drivenHighest — customer-defined approved requirements
Delivery formatRecurring intelligence briefingCustomized recurring intelligenceTailored intelligence and analyst support
Analyst interactionStandard written delivery; Limited clarification supportScheduled analyst clarification or outbrief support; Final availability to be approvedRecurring analyst support; Executive and technical outbriefs; Final availability to be approved
Executive summaryIncludedIncludedTailored executive briefing
Technical detailConcise technical summaryDetailed technical reportingTailored technical analysis and outbrief
High-priority escalationNot includedNot active; policy approval requiredPotential capability after policy approval
Pricing statusPricing to be announcedPricing to be announcedPricing to be announced
Enrollment statusEnrollment not yet openEnrollment not yet openEnrollment not yet open

Essential

Primary objective
Foundational recurring threat awareness
Intended audience
Small security teams; Operational leaders; Organizations beginning a formal threat-intelligence program; Teams needing concise, recurring awareness without extensive customization
Coverage depth
Core sector-relevant threats, vulnerabilities, incidents, and implications
Organization-specific tailoring
Limited — sector and topic focused
Delivery format
Recurring intelligence briefing
Analyst interaction
Standard written delivery; Limited clarification support
Executive summary
Included
Technical detail
Concise technical summary
High-priority escalation
Not included
Pricing status
Pricing to be announced
Enrollment status
Enrollment not yet open

Professional

Primary objective
Organization-specific threat intelligence and decision support
Intended audience
Security and infrastructure teams; Organizations with defined OT, IT, or critical-infrastructure priorities; Teams needing recurring technical context and decision support
Coverage depth
Essential coverage plus technology, actor, campaign, and impact context
Organization-specific tailoring
Moderate to high — organization and priority driven
Delivery format
Customized recurring intelligence
Analyst interaction
Scheduled analyst clarification or outbrief support; Final availability to be approved
Executive summary
Included
Technical detail
Detailed technical reporting
High-priority escalation
Not active; policy approval required
Pricing status
Pricing to be announced
Enrollment status
Enrollment not yet open

Strategic

Primary objective
Customer-defined intelligence and executive decision support
Intended audience
Leadership teams; Mature security programs; Critical-infrastructure operators; Organizations with complex or high-consequence risk environments
Coverage depth
Professional coverage plus deeper tailored analysis and briefings
Organization-specific tailoring
Highest — customer-defined approved requirements
Delivery format
Tailored intelligence and analyst support
Analyst interaction
Recurring analyst support; Executive and technical outbriefs; Final availability to be approved
Executive summary
Tailored executive briefing
Technical detail
Tailored technical analysis and outbrief
High-priority escalation
Potential capability after policy approval
Pricing status
Pricing to be announced
Enrollment status
Enrollment not yet open

Open Source Intelligence

Open Source Intelligence proposed tiers

Review proposed plan details
Open Source Intelligence plan comparison
FeatureEssentialProfessionalStrategic
Primary objectiveFoundational recurring external-exposure awarenessOrganization-specific public-exposure intelligenceCustomer-defined public-source intelligence and research
Intended audienceSmall security teams; Organizations establishing external-exposure visibility; Teams needing concise OSINT findings without extensive customizationSecurity teams; Risk and compliance teams; Organizations needing recurring external-exposure monitoring; Teams with defined brands, domains, technologies, vendors, or leadership concernsLeadership teams; Mature security and intelligence programs; Critical-infrastructure organizations; Organizations needing tailored research and analyst support
Coverage depthCore public exposure, brand, breach-reference, and change indicatorsEssential coverage plus infrastructure, brand, vendor, and people-related riskProfessional coverage plus deeper research, analysis, and custom reporting
Organization-specific tailoringLimited — organization and topic focusedModerate to high — organization and indicator drivenHighest — customer-defined authorized requirements
Delivery formatRecurring external-exposure summaryCustomized recurring open-source monitoringTailored OSINT and analyst research
Analyst interactionStandard written delivery; Limited clarification supportScheduled analyst clarification or outbrief support; Final availability to be approvedRecurring analyst support; Executive and technical outbriefs; Final availability to be approved
Executive summaryIncludedIncludedTailored executive briefing
Technical detailConcise technical summaryDetailed technical reportingTailored technical analysis and outbrief
High-priority escalationNot includedNot active; policy approval requiredPotential capability after policy approval
Pricing statusPricing to be announcedPricing to be announcedPricing to be announced
Enrollment statusEnrollment not yet openEnrollment not yet openEnrollment not yet open

Essential

Primary objective
Foundational recurring external-exposure awareness
Intended audience
Small security teams; Organizations establishing external-exposure visibility; Teams needing concise OSINT findings without extensive customization
Coverage depth
Core public exposure, brand, breach-reference, and change indicators
Organization-specific tailoring
Limited — organization and topic focused
Delivery format
Recurring external-exposure summary
Analyst interaction
Standard written delivery; Limited clarification support
Executive summary
Included
Technical detail
Concise technical summary
High-priority escalation
Not included
Pricing status
Pricing to be announced
Enrollment status
Enrollment not yet open

Professional

Primary objective
Organization-specific public-exposure intelligence
Intended audience
Security teams; Risk and compliance teams; Organizations needing recurring external-exposure monitoring; Teams with defined brands, domains, technologies, vendors, or leadership concerns
Coverage depth
Essential coverage plus infrastructure, brand, vendor, and people-related risk
Organization-specific tailoring
Moderate to high — organization and indicator driven
Delivery format
Customized recurring open-source monitoring
Analyst interaction
Scheduled analyst clarification or outbrief support; Final availability to be approved
Executive summary
Included
Technical detail
Detailed technical reporting
High-priority escalation
Not active; policy approval required
Pricing status
Pricing to be announced
Enrollment status
Enrollment not yet open

Strategic

Primary objective
Customer-defined public-source intelligence and research
Intended audience
Leadership teams; Mature security and intelligence programs; Critical-infrastructure organizations; Organizations needing tailored research and analyst support
Coverage depth
Professional coverage plus deeper research, analysis, and custom reporting
Organization-specific tailoring
Highest — customer-defined authorized requirements
Delivery format
Tailored OSINT and analyst research
Analyst interaction
Recurring analyst support; Executive and technical outbriefs; Final availability to be approved
Executive summary
Tailored executive briefing
Technical detail
Tailored technical analysis and outbrief
High-priority escalation
Potential capability after policy approval
Pricing status
Pricing to be announced
Enrollment status
Enrollment not yet open

Need a one-time report instead?

Recon One also distinguishes defined-scope project reports from recurring intelligence plans.

Explore servicesDiscuss an intelligence requirement