Skip to main content
New · Pillar 3
Cognitive Warfare Tradecraft Reference™
62 maneuvers. 107 techniques. 253 graded exemplars. Every one mapped to DISARM.
Open the Pillar 3 hub →
New Assessment · 27 October 2026
Qatar: The Insured Target on the Gulf
94 pages266 graded sourcesKent-band forecasts to April 2027
Iranian missiles hit Al Udeid and Ras Laffan. Doha lost 17 percent of its LNG export capacity, stayed with Washington and bought more insurance. We price the US guarantee.
Read the assessment (PDF) →
ON THE RECORD MAY TO OCTOBER 2026 · ONE PAGE

Nine Moves Most Intelligence Firms Have Not Made

ADVERSARY INDEXCALLED BEFORE THE FACTASA EVIDENCE STANDARDCWTRPUBLIC ATTRIBUTION MEASUREMENT OF EFFECTFOUR ADVERSARIESAI GOVERNANCEDAILY BRIEF

Six months of dated, checkable work set beside what most vendors publish. Large vendors see more. None puts quarterly calls on the record.

Download the PDF
Live · Daily Adversary Brief
Six Adversaries. Watched Every 12 Hours.
Government advisories and vendor reports rank first; press follows. North Korea adds Korean, Japanese and Chinese sources.
Open the live brief →
Adversary Intelligence Library · Graded Dossiers
Nation-State & Cross-Domain Adversary Briefs
Russian reflexive control, PRC united-front and MSS operations, Iranian hybrid warfare, DPRK revenue networks. Fact kept apart from adversary claim under the ASA Evidence Standard, judgments on Kent bands.
Explore All Adversary Briefs →
New · October 29, 2026 · Four Briefings
Four Adversaries, Four Decisions
Volt Typhoon, Sandworm, Famous Chollima, CyberAv3ngers. Every judgment on a Kent band, costed actions from mid-market to the Fortune 100.
Read the four briefings →
On air · Cybersecurity Bridge · SiliconANGLE theCUBE
Jeff Bardin on Cybersecurity Bridge
Jon Oltsik asked where threat intelligence goes next. Jeff drew the line: what passes for CTI reports what adversaries did after they got in. Cyber intelligence tells you who is coming, why, and how to defend before they arrive.
Watch the episode →
Now open · Q4 order window
Obligate 2026 Funds Before December 11.
Fixed-price, PO-ready tradecraft, quoted through December 31. Deliver in 2026 or book Q1 2027 on a written 12-month credit.
days to the CR cliff

Open the order window →
New · Public Attribution Series
The Treadstone 71 Public Attribution Series
Public attributions tested against their evidence. Sources graded, judgments on a Kent band.
Open the series →
New report · 12 November 2026
Cold Front: Shahid Kaveh and the War on Refrigeration
Iran · IRGC Cyber Command · Cold chain
An Iranian state unit turned freezers into a weapon. France named Shahid Kaveh for the October sabotage of refrigeration controllers at about 700 stores. 53 pages, 19 judgments, 12 signposts.
Another cold-chain event strikes the United States or Europe by January 31, 2027.Highly likely · 85 to <95
New assessment · 11 November 2026
Novatek's Hand on the Beaufort Shelf
Polar LNG · Alaska · Sanctions
Polar LNG was sold to Alaska as American. Novatek moved the money, drafted the US sanctions licence request and fixed the plant site. 57 pages, 71 graded sources, 12 dated forecasts.
Novatek controlled Polar Train's strategic direction by late August 2026.Highly likely · 85 to <95
A standing watch on adversary narratives. Admiralty-graded sources, Kent-band judgments, STEMPLES Plus drivers. Weekly brief, monthly roll-up, quarterly tie-in to the Index.
Paid pilot · First watch October 19
The 30-Day Paid Watch →
Four Monday editions, a deep-dive on the narrative you name, one RFI, flash alerts and five seats, scored against criteria you sign on day one. $4,500, credited in full against an annual.

The Adversary Index (TAI) is live.

// PILLAR 1 · QUARTERLY STRATEGIC INTELLIGENCE SCORING · INAUGURAL RELEASE JULY 15, 2026 · Q3 REFRESH RELEASED OCTOBER 5, 2026, WITH THE CWTR INAUGURAL · NEXT RELEASE Q1 2027 · DOWNLOAD THE TIER 0 REPORT →

Published Works

Author Page on Amazon +
Books by Jeff Bardin: The Mind Domain · Tradecraft at Machine Speed · Comprehensive Manual for Multi-Domain Cyber Operations: Directives, Cognitive Integration, and Active Defense · The Quiet Siege · The Cyclone Inheritance and more.
The T71 Standard

Three Disciplines. One Doctrine.

Advanced Analytic Dominance

TREADSTONESEVENTY ONE™
Pillar 1 Analysis

Sixty-six structured analytic techniques, ICD 203 estimative language, and behavioral threat analysis applied to technical collection. Stylometrics and forensic linguistics support attribution of active threat actors.

Adaptive Cyber Lifecycle

FORESIGHTDRIVEN DISRUPTION™
Operational Framework

Detect, analyze, expose, counter, and contain. The production cycle that turns intelligence requirements into decision-ready reporting, run at the speed the decision needs.

Cyber Psychological Operations

COGNITIVEARMY DEPLOYMENT™
Cognitive Defense

Defense against influence operations and PSYOP. Narrative analysis, adversary cultural and psychological profiling, and the Cognitive Army model that trains communications, legal, HR, and security staff as first-line sensors.

Pillar 1 · The T71 Standard

The Treadstone 71 Adversary Index

Quarterly strategic scoring of nation-state and non-state adversaries on a 0 to 100 composite across eight sub-indices, set by crowd-forecast methodology. Tier 0 covers the Big Four at four tearline depths, free. Inaugural release July 15, 2026. Q3 refresh released October 5, 2026, with the inaugural Cognitive Warfare Tradecraft Reference and its first quarterly Tradecraft Report. Next release Q1 2027. The ASA Evidence Standard methodology white paper published September 15, 2026.

China89 Russia85 DPRK79 Iran77
The T71 Standard, Pillar 1: The Adversary Index
Operational Since 2002

Anticipate Threats. Dominate the Cognitive Domain

Strategic and cyber intelligence, counterintelligence, and cognitive warfare defense for organizations that need to read adversary intent before it lands. Consulting, adversary dossiers, published doctrine, and NICCS-listed training, from the same firm since 2002.

"If it does not change a decision, it is not intelligence.
If it does not arrive in time to change a decision, it is not useful intelligence."

What is intelligence? →
Founded2002
Continents Served4
Courses & Modules60+
Adversaries Scored42 in the Index
What We Do

Intelligence Services & Cognitive Defense

Four lines of work and one open standard, all on one method. Analysis and adversary dossiers on request, cognitive warfare defense, intelligence program builds, the frameworks that run all three, and the protocol that proves an effect.

🔍

Intelligence on Request

Rapid RFIs answered with sources, assumptions, and a stated confidence. Adversary dossiers that connect intent, capability, tradecraft, and targeting in one picture. Overwatch for standing warning between reports.

See intelligence services
⚔️

Cognitive Warfare Defense

Red-team engagements that pressure-test leadership decisions under narrative attack. Influence operations defense, cyber PSYOP analysis, and adversary cultural and psychological profiling.

See cognitive defense
🏗️

Intelligence Program Build

An intelligence function built to the Cyber Intelligence Capability Maturity Model: requirements, collection, analysis, reporting, and the workflows leadership reads. A fractional intelligence officer and platform selection when the team needs them.

See program build
📐

Frameworks and Tradecraft

STEMPLES Plus for adversary environment analysis. The Elicitation Protocol for interviews. The Adaptive Cyber Intelligence Lifecycle for the production cycle. Published, taught, and used on every engagement.

See the frameworks
⚖️

ASA Measurement of Effect · Open Standard

An open protocol for proving a counter-disinformation campaign changed what people believed or did: pre-registered baselines, comparison designs, pre/post instruments, behavioral indicators, and a Sherman Kent band on every effect claim. Free to apply, free to write into a contract. Draft for comment November 2, 2026.

See the open standard
🕵️

Talent Infiltration & Supply-Chain Recon Audit

A 14-day corporate counterintelligence audit. Synthetic recruiters, job postings that leak the stack, foreign-funded research ties, and contractor access, each verified and hardened. Every department scores 0 to 100 on a risk ledger. $24,500 fixed fee.

See the talent audit
🛡️

Executive Shield

A five-day counter-OSINT and elicitation audit of a principal, run with zero network access. You read the targeting file an adversary builds: pattern of life, deepfake training material, and the approach routes through aides and family. $15,000 flat per principal, $45,000 for a cohort of four.

See Executive Shield
💉

Narrative Inoculation & Pre-Bunking Sprint

Ten business days ahead of an M&A close, an earnings call, or a regulatory review. Stakeholder trust nodes mapped, adversary injection routes modeled, and three pre-bunking assets placed before the hostile narrative starts. Fourteen days of monitoring follow. $28,000 flat.

See the inoculation sprint
Free Tools

Seven Free Assessments

Score your program, test your assumptions, and measure your exposure before you talk to anyone. No registration. Results on screen.

Free · Readiness Score

📊 Intelligence Readiness Score

Three scores in one pass: intelligence program maturity, cognitive resilience, and OSINT exposure. A gap list follows each score.

Run the readiness score
Free · Simulation

🎯 Decoy's Dilemma

A reflexive control simulation. See whether prepared information steers a decision you believe is your own.

Run the simulation
Free · Exposure Audit

👁 OSINT Shadow-Footprint

What an adversary can collect on your organization from open sources, and which items to pull first.

Audit open exposure
Free · Profiler

🌐 STEMPLES Plus Profiler

Build an adversary environment profile across the STEMPLES Plus dimensions and read the indicators of change.

Profile a threat actor
Free · Bias Check

🧪 Cognitive Bias Validator

Check a draft assessment for the common analytic biases and for ICD 203 estimative language.

Check an assessment
Free · Maturity Score

📊 Cyber Intelligence CMM

Score your intelligence program against the Capability Maturity Model and see what the next level requires.

Score your program
Free · AI Audit

🤖 Sovereign AI Audit

Assess whether your analytic AI pipeline keeps data, prompts, and outputs under your control.

Audit your AI pipeline

// FLAGSHIP COURSE

AI-Augmented Cyber Intelligence Tradecraft

Five days. Sixty-six structured analytic techniques. Anthropic Claude worked into each stage of the Adaptive Cyber Intelligence Lifecycle, with the analyst holding the judgment. Graduates leave with a working production workflow and the analytic writing standard to match.

DBNARMCADUMMVHT CARMMRAITBPCIDD +22 more

// PROJECT OMEGA · UNIT ENGAGEMENTS BOOKING NOW

Project Omega In-Person Residency

A five-day residency for units and teams: adversary cultural and psychological profiling, integrated behavioral threat analysis, and cognitive defense planning against hybrid threats. Delivered on your site or at a scheduled cohort.

Client Voice

What Participants Report

Published accolade

"The instructor, Jeff Bardin, is a top-notch teacher who has the actual experience and credentials."

Course Participant · Cyber Intelligence Tradecraft
Published accolade

"This is hands down one of the best cyber training I have attended."

Course Participant · In-Person Training
Published accolade

"The Treadstone 71 cyber counterintel course was eye-opening."

Course Participant · Cyber Counterintelligence
In the Press

Media Citations

Interviews and coverage of Treadstone 71 analysis on Iranian cyber and influence operations, and on intelligence practice.

Training

NICCS-Listed Tradecraft Training

Sixty-plus courses and modules, online and in person, listed in the CISA NICCS catalog and aligned to IAFIE standards. Certifications in cyber intelligence, counterintelligence, cognitive warfare, and analytic writing.

★ Flagship · 5-Day · AI-Augmented

AI-Augmented Cyber Intelligence Tradecraft

Five days, 66 structured analytic techniques, AI-assisted production with the analyst holding the judgment. Reserve seats now.

Course details
Online · Self-Paced

Online Certifications

Self-paced certifications with optional mentor support. Access starts on enrollment.

Browse the online catalog
In-Person · Unit Programs

Unit & Command Programs

Team courses delivered on site to one tradecraft standard, scoped to the unit's mission and rules of engagement.

See in-person courses
Workshops · Intensives

Skills Amnesty & Intensives

Short intensives for working analysts, and the Skills Amnesty program for trading outdated methods for current tradecraft.

See workshops
Start Here

Put Intelligence in Front of the Decision

Send the question, the sector, and the decision it feeds. You get a scoped reply from an analyst, with a timeline and a price.

Direct line: 424.234.3629