Know what is likely to threaten you before deciding what to defend.
Threat reports are everywhere. Most of them describe what is happening to someone else.
FLODISQ turns internal information, trusted external sources and structured analysis into an organisation-specific view of the actors, methods and scenarios that matter to you.
Not another threat feed. Intelligence that changes priorities and drives action.
From data to decisions
Collecting more indicators does not automatically improve security.
Intelligence becomes valuable when information is verified, placed in context and connected to actual vulnerabilities, business processes and decisions.
- Data
Raw observations, incidents, logs, reports and external signals.
- Information
Relevant data organised around the organisation, sector and question.
- Intelligence
Analysed conclusions about likely actors, methods, scenarios and impact.
- Action
Prioritised measures with ownership, timing and expected risk reduction.
The questions we help answer
Every engagement starts with a decision that needs to be made. The intelligence requirement defines what must be known to make it well.
- Which threat actors have a credible reason and capability to target us?
- Which business services, data and dependencies are most exposed?
- Which tactics, techniques and procedures are most plausible?
- Which vulnerabilities could turn a threat into a real incident?
- What would a realistic attack scenario look like from start to finish?
- Which mitigations reduce the most relevant risk first?
- What assumptions are driving our current security priorities, and are they still valid?
A structured intelligence method
FLODISQ uses a transparent and repeatable analytical process. The method is designed to deal with incomplete information, challenge assumptions and reduce the influence of intuition and bias.
- 01
Define
Clarify the decision, scope, intelligence requirement and critical assumptions.
- 02
Collect
Build a focused collection plan across internal sources, incidents, open sources and relevant threat reporting.
- 03
Validate
Assess source credibility, contradictions, uncertainty and missing evidence.
- 04
Analyse
Develop and test hypotheses, map actors and TTPs, identify drivers and compare plausible scenarios.
- 05
Prioritise
Rank threats using consistent likelihood, impact and relevance criteria linked to the risk method.
- 06
Advise
Translate conclusions into owner-assigned actions, short-term mitigations and formal risk decisions.
We state assumptions, uncertainty and alternative explanations. Conclusions are designed to be challenged, updated and used.
What an assessment delivers
Executive threat picture
The threats and decisions that matter most, explained without unnecessary technical detail.
Threat actor analysis
Relevant actors, intent, capability, drivers and likely targets.
TTP mapping
Credible methods mapped to MITRE ATT&CK where useful.
Threat scenarios
One to three realistic attack paths showing access, progression and business impact.
Threat-vulnerability connection
Where credible threats meet weaknesses in technology, people, process or supply chain.
Prioritised action plan
Actions for 30, 90 and 180 days, including owners, dependencies and measurable outcomes.
Assumptions and confidence
What is known, what is inferred and how confident the conclusion is.
Decision-ready reporting
A concise management view and enough evidence for security, risk and technical teams.
Three ways to buy threat intelligence
Answer a focused question, build a defensible threat picture for the whole organisation, or keep that picture current over time.
Threat Intelligence Brief
For a specific service, decision or emerging concern.
- Focused intelligence requirement
- Targeted source collection and validation
- Top threats and relevant TTPs
- One plausible scenario
- Immediate mitigation priorities
- Executive briefing
Organisation Threat Assessment
For organisations that need a defensible threat picture.
- Scope and requirement workshops
- Internal and external source review
- Threat actor and driver analysis
- Threat-vulnerability mapping
- Up to three attack scenarios
- Prioritised 30/90/180-day roadmap
- Management report and specialist appendix
Continuous Threat Intelligence
For organisations that need intelligence to remain current.
- Defined intelligence requirements
- Monthly monitoring and relevance assessment
- Material-change alerts
- Quarterly threat review
- Updated priorities and mitigations
- Access to analyst review sessions
Add depth where decisions require it
Add depth where the organisation’s decisions require it. Modules can be combined with any package or purchased separately.
| Module | Starting price | Purpose |
|---|---|---|
| Threat scenario workshop | From €2,750 | Interactive session to challenge assumptions and develop concrete attack scenarios. |
| Executive threat briefing | From €1,500 | A concise board or management session focused on relevance, impact and decisions. |
| MITRE ATT&CK & TTP mapping | From €4,500 | Detailed mapping of credible techniques to existing controls, detection and testing priorities. |
| Sector threat baseline | From €5,000 | A reusable baseline of sector actors, drivers, threats and recurring scenarios. |
| Threat intelligence operating model | From €9,500 | Requirements, sources, roles, workflow, review rhythm, templates and governance for an internal capability. |
Human judgement, accelerated by AI
FLODISQ uses an AI Threat Analyst to help structure sources, identify connections, maintain consistency and accelerate recurring analysis.
Human analysts define the intelligence requirement, challenge assumptions, validate relevance and remain accountable for the conclusions.
AI increases analytical capacity. It does not replace source criticism, contextual judgement or responsibility for the advice.
Pricing model
Starting prices depend on scope, availability of internal evidence, number of business services, sector complexity, depth of TTP mapping, workshop requirements and monitoring frequency.
| Service | Starting price | Indicative duration |
|---|---|---|
| Threat Intelligence Brief | From €3,500 | 1–2 weeks |
| Organisation Threat Assessment | From €12,500 | 4–8 weeks |
| Continuous Threat Intelligence | From €2,500 per month | Minimum 3 months |
| Threat scenario workshop | From €2,750 | Half day |
| Threat intelligence operating model | From €9,500 | 3–6 weeks |
All prices exclude VAT and travel. Commercial threat-feed subscriptions, dark-web access, specialist data acquisition, forensic work, penetration testing and implementation of mitigations are excluded unless explicitly included.
What changes after the analysis
Security priorities are linked to credible threats rather than generic lists
Decision-makers understand why a threat matters to the organisation
Technical teams receive clear scenarios and relevant TTPs
Risk owners know which decisions and actions belong to them
Assumptions and uncertainty are visible instead of hidden
Threat intelligence becomes part of risk review, testing and investment decisions
Threat intelligence should change what you do next.
Tell us which decision, service or uncertainty you need to understand. FLODISQ will turn available information into a defensible threat picture and an actionable next step.