Protective intelligence is the discipline of understanding threats to people: who is behind them, what they may intend, whether behaviour is escalating, and what should be done next.
Greywing provides the analytical layer between an overwhelming volume of signals and the small number of matters that genuinely warrant attention.
In this section
Incidents, messages, reports, and referrals are logged and reviewed against consistent criteria so that routine noise is separated from information requiring analyst attention. Triage is a documented judgement, not a filter applied silently.
Where an individual, account, or group warrants continued attention, a structured record is maintained: chronology, observed behaviour, communications, associations where evidenced, and changes over time. Attribution is expressed according to available evidence and stated confidence.
Lawful, proportionate monitoring maintains continuity around known concerns and emerging activity, so that a change in tone, frequency, proximity, or specificity is recognised rather than missed.
Potential relationships between accounts, individuals, incidents, organisations, locations, and previous activity are examined and represented clearly, including where a relationship is possible rather than established.
Experienced analysts assess intent, capability, fixation, grievance, proximity, escalation indicators, and context. Assessments describe what the available intelligence supports, and what it does not.
Public exposure, published information, travel, appearances, and events are assessed for the risks they create and the intelligence requirements they generate.
Intelligence is packaged for the people who must act on it. Where appropriate, we support escalation to a client's security team, legal advisers, platforms, or law enforcement. We do not replace those functions.
Contact
Conversations are treated as confidential from the first contact.