Focus
Four interconnected domains of Iranian state activity online. Each is its own discipline. Together they form a single system, and the analysis we publish in any one is informed by what we see across the others.
Four domains of Iranian state activity online.
Cyber Operations
Iranian state-aligned threat actors, their infrastructure, and their operations against targets inside and outside the country.
Information Operations
State media ecosystems, IRGC-linked information networks, coordinated inauthentic behavior, and the narratives Tehran promotes online.
Sanctions & Procurement
Front companies, financial evasion, beneficial ownership structures, and the procurement networks that sustain sanctioned activity.
Network Infrastructure
Iranian internet architecture, censorship and surveillance systems, connectivity patterns, and the AI-driven analysis we use to monitor conditions on Iranian networks at scale.