Black Phoenix conducts discreet intelligence operations for companies, governments, diplomatic missions and individuals operating in complex environments.
Our work combines on-the-ground human intelligence with open-source and technical collection to establish what is actually happening, verify information and answer questions that cannot be resolved from public sources alone.
Intelligence built around the question, the environment and the access required to answer it.
Develop and manage trusted sources to obtain information that cannot be found through open sources alone.
Establish facts around people, organizations, assets, networks and events.
Build a ground-level picture of locations, activities, movements and relationships.
Identify hostile collection, infiltration, manipulation and information leakage.
Investigate fraud, internal threats, sabotage, sensitive disputes and commercial risks.
Use OSINT, cyber and technical methods to support and verify human intelligence.
Open-source intelligence shows what is publicly visible. Human intelligence, technical collection, and verification help establish what is happening behind the scenes.
Investigations, fraud, internal threats, competitive intelligence and sensitive disputes.
Ground intelligence, investigations, verification and strategic reporting.
Personnel, local networks, hostile activity and mission-specific intelligence.
Sensitive investigations, due diligence, reputation and personal security intelligence.
Selected engagements showing how our intelligence work is applied in real-world situations.
Located an undisclosed medium-term liquid cash stash belonging to Hezbollah's Qard al Hassan holding up to $70 million in mixed currency underneath a residential building in Hezbollah's stronghold of Dahye.
Uncovered a joint cyber attack operation between Kataeb el Hezbollah's cyber team (Fatimiyoun) in Iraq and Hezbollah's cyber division targeting key Lebanese anti-IRGC/Hezbollah institutions, including the Presidential Palace, Ministries, and media outlets.
Uncovered a complex, multi-year Israeli cyber espionage operation gathering sensitive personal records and blackmailing material targeting a specific Lebanese sect.
Inspected a suspected industrial facility utilized by Hezbollah for clandestine rocket production.
Uncovered a planned Hezbollah surprise blockade intended to paralyze and shutdown the primary Beirut airport access road.
Executed targeted human reconnaissance to locate an illegal Hezbollah detention and interrogation facility operating in secrecy.
Identified an active embassy driver covertly leaking confidential diplomatic schedules, vehicle movements, and operational activity to Hezbollah networks.
Conducted deep-background vetting on a final-stage embassy applicant positioned for access to sensitive diplomatic communications and facilities.
Mapped and confirmed 3 main physical bases utilized by Hezbollah's cyber team in Lebanon.
A focused process from the initial intelligence question through collection, verification and reporting.
Establish what the client needs to know and what decision the intelligence will support.
Determine the appropriate combination of HUMINT, OSINT, technical collection and field activity.
Gather information through multiple channels and cross-check it before reporting.
Deliver concise findings, supporting evidence and relevant implications.
For ongoing matters, intelligence collection continues as the situation develops.
Tell us what you need to establish, verify or understand. We will assess the question, environment and appropriate collection approach.