Services
Intelligence services that end in a decision.
Eleven disciplines, one method and one standard of proof. Whether you need a name, a red flag, a verified alert, a mapped supply chain or a trained team, every engagement is led by a senior investigator and delivers findings you can act on.
- Disciplines
- Eleven services, one method
- Median delivery
- 11 days from tasking to finished report
- Urgent tasking
- First assessment within 24 hours
- Languages
- 41 working languages, native analysts
- Pricing
- Fixed fee agreed at scoping
What we do
Choose the question. We bring the discipline.
Most real problems cross more than one discipline. A fraud investigation becomes an asset trace. An alert becomes an attribution. Our teams are built to move between them without losing the thread.
Investigations & Attribution
Identify the people, networks and money behind fraud, extortion, leaks, harassment and hostile campaigns.
- Named subjects with stated confidence
- Hashed evidence bundle and referral packages
- Typically 2 to 4 weeks
Due Diligence
See through nominee structures to the real owners, past conduct and sanctions exposure of the people you deal with.
- Ownership traced to the ultimate beneficial owner
- Red flags ranked by severity
- Red-flag screen within 48 hours
Threat Monitoring
Continuous coverage of threats to your people, facilities, data and brand, with every alert verified by an analyst.
- 24/7 watch floor across 14 time zones
- Critical threats escalated within 60 minutes
- Monthly review with a named lead analyst
Protective Intelligence
Assess threats against principals, identify anonymous threat authors and reduce the exposure that makes targeting possible.
- Threat triage within 4 hours
- Structured threat assessment
- Exposure removal tracked to completion
Influence Operations
Detect, map and attribute coordinated inauthentic campaigns, with evidence that platforms and regulators can act on.
- Network maps with linking evidence
- Platform-ready takedown packages
- Rapid assessment within 72 hours
Dark Web Intelligence
Verify leak claims, track access sales and profile threat actors in criminal forums, markets and closed channels.
- Claims verified without buying data
- Actor profiles and blockchain tracing
- Two-week exposure assessment
Screening & Vetting
Confirm that hires, contractors and people seeking access are who they say they are, and that the history they present is their own.
- An identity integrity finding for every subject
- Discrepancies ranked, sourced and reviewed by an analyst
- 3 to 5 business days per subject
Insider Risk
Investigate access offered for sale, recruitment approaches, undisclosed affiliations and leaks, lawfully and under the direction of counsel.
- Starts from a specific trigger, never general monitoring
- Innocent explanations tested first
- First assessment within 24 hours
Supply Chain Intelligence
Map the suppliers behind your suppliers to expose forced labor, sanctions and diversion risk in the tiers your contracts never reach.
- Tiered supplier map with every link graded
- Evidence annex built for regulators and customs
- 3 to 6 weeks per product line
Geopolitical Risk
Verified events and country risk measured against your people, sites and routes by six regional desks.
- First verified situation report within 2 hours
- Events plotted against your own footprint
- Country assessments in 10 to 15 business days
OSINT Training
Hands-on tradecraft courses taught by the investigators who run our live cases, in person, online or in-house.
- Four core courses, an executive briefing and custom programs
- Exercises built from real investigations
- Maximum 16 students per class
Not sure where it fits?
Describe the problem, not the service. A senior investigator will tell you what open sources can realistically establish and design the engagement around your question.
- Confidential briefing with a senior investigator
- Candid view of what is achievable
- Written proposal with a fixed fee
Engagement models
Four ways to work with us.
Some clients bring us one question. Others need a standing capability. The model follows the need, and the standard of the work does not change.
Single investigation
One defined question, one fixed fee and a firm timeline. The most common way new clients start.
- Typically 2 to 4 weeks
- Interim updates at agreed points
Retained program
Reserved analyst capacity and priority tasking across any of our services, drawn down as questions arise.
- Pre-agreed rates and scope
- Tasking accepted within 24 hours
Monitoring subscription
Continuous threat, brand or dark web monitoring, scoped to the people, assets and names you need covered.
- 24/7 analyst verification
- Monthly threat review
Embedded analysts
Aldervane analysts working inside your team, under your policies, to build or extend an in-house capability.
- 3 to 12 month placements
- Backed by our full analyst bench
Every engagement includes
The same standard, whatever the service.
The size of an engagement changes the scope of the work. It never changes how the work is done.
- A named senior investigatorOne accountable lead from scoping to debrief.
- Written requirementsThe questions agreed in writing before collection starts.
- Ethics and legal screeningPurpose and proportionality checked on every request.
- Evidence integrityEvery item timestamped and SHA-256 hashed at capture.
- Red-team reviewEvery attribution challenged by an analyst who did not work the case.
- Stated confidenceEvery judgment carries a confidence level and its sources.
- Investigator debriefA walkthrough with the people who did the work.
- Data minimizationCase data deleted 90 days after closure unless a legal hold applies.
Pricing
Fixed fees. No open-ended billing.
We price the work at scoping, once we understand the question and what it will take to answer it. If the scope needs to change, we tell you why and agree it with you before any additional work begins.
| Engagement | Pricing basis | Typical commitment |
|---|---|---|
| Single investigation | Fixed fee per question | 2 to 4 weeks |
| Due diligence | Fixed fee per subject and depth tier | 48 hours to 15 business days |
| Screening and vetting | Fixed fee per subject and tier, or an annual program | 24 hours to 5 business days per subject |
| Supply chain mapping | Fixed fee by product line or supplier set | 3 to 6 weeks |
| Geopolitical risk | Fixed fee per assessment, or annual fee by footprint | 10 business days to 12 months |
| Retained program | Annual retainer, drawn down by tasking | 12 months |
| Monitoring subscription | Annual fee by people, assets and names covered | 12 months |
| Embedded analysts | Monthly fee per analyst | 3 to 12 months |
| Training | Per seat, or fixed fee per in-house cohort | Half day to 4 days |
Getting started
How an engagement begins.
From first conversation to work under way usually takes less than a week. Urgent matters can start the same day.
-
01 / Brief
Confidential briefing
You describe the problem to a senior investigator, who tells you candidly what open sources can and cannot establish.
-
02 / Screen
Ethics and legal check
We confirm the purpose is legitimate and the work proportionate. We decline roughly one request in seven.
-
03 / Propose
Written proposal
Within two business days you receive the scope, intelligence requirements, team, timeline and fixed fee.
-
04 / Begin
Kickoff
The team is assigned, your workspace is opened and collection begins against the agreed requirements.
Questions
Services FAQ
Which service do we need?
You do not need to know. Describe the problem and the decision it affects, and we will recommend the right combination. Many engagements start as one service and draw on others as the evidence develops.
Do you work for private individuals?
We work for organizations and their legal advisers. Individuals facing a serious threat or dispute can engage us through their lawyer, which also helps protect the work under legal privilege.
How quickly can you start?
Urgent matters can start the same day, with a first assessment within 24 hours. Standard engagements usually begin within a week of the first conversation.
Do you subcontract any of the work?
No. All collection and analysis is carried out by Aldervane employees on Aldervane infrastructure, under the same standards and the same confidentiality obligations.
Where do you work?
Our analysts work across 14 time zones and research sources in more than 140 jurisdictions. We do not take engagements that would breach sanctions or the law of the places where the work is done.
Start an engagement
Bring us the question nobody else could answer.
Tell us what you need to know and why. A senior investigator will scope it with you, tell you candidly what open sources can and cannot establish, and propose a plan with a fixed fee and a firm timeline.