Perimeter intelligence
Adversary infrastructure seen across the region's edge, shared the moment it appears.
Pre-launch · Central European Intelligence CommunityA community for sharing
A community for sharing
perimeter intelligence.
What's probing the edge of Central Europe's critical infrastructure, shared the moment we see it. Hosted in Switzerland, governed by Swiss law. We're assembling the founding members now.
Founding cohort forming · opening 2026
What's coming
Four streams, one perimeter.
At launch, members get one shared view of the region's edge. Here's what flows through it.
DNS sinkhole
Anonymised hits from the SENTINEL sinkhole — which networks resolved known-adversary infrastructure, the earliest signal of staging.
Deep dives
Campaign teardowns and attribution — the reasoning behind an indicator.
Preemptive indicators
A tiered query over adversary infrastructure mapped during staging. Query-only; no feed.
How it works
We build the tooling. We share it.
We built the sensors, the sinkhole, and the indicator platform to watch the perimeter. We share them rather than lock them away. Join, get the tools and the intelligence; your hits flow back anonymised. The more networks that share, the more every member sees.
Membership
Two ways to join.
Flat annual fees, regardless of size — the community is sized by sensor diversity, not headcount. Founding members shape the charter.
Member
DACH-anchored organisations. Host research pods on your own edge; receive anonymised attacker telemetry from the pod network, the monthly cross-DACH brief, and working-group seats.
Subsidiary Member
Subsidiary entities of an existing Member — one pod minimum, one analyst seat, full access to the community pool.
Be among the founding members.
Tell us who you are. We'll reach out as the founding cohort opens. One note when we launch, nothing else.
Swiss-hosted · sovereign
Central European reach. Swiss jurisdiction.
The community will span Central Europe; the platform never leaves Switzerland. Operated by CICS GmbH, Baar / Zug.