Global Internet Risk Observatory

See the Internet as national evidence.

Country-level domain intelligence, infrastructure posture and early-warning workflows for governments, regulators, security organisations and critical-infrastructure operators—delivered with evidence, provenance and confidence attached.

Connecting to Cloudflare evidence feed…
Observed country domainsvalidated foundations
Countries with evidenceof
Risk models loadedscores shown only with confidence
Threat indicatorsPendingnot inferred from inventory
Cloudflare refreshautomatic every 5 minutes
Interactive country intelligence

Explore validated evidence—and see what is still pending.

Select a country on the map or in the catalogue. GIRO publishes observed values, model-derived values and missing evidence as visibly different states.

Connecting
Live evidence
Validated foundation
Pending evidence
Live evidence picture

Charts that explain coverage, not decorate uncertainty.

These views are recalculated from the same Cloudflare response as the headline figures and country map.

Country evidence readiness

Validated coverage and risk-model readiness across the 195-country catalogue.

Countries with evidence
Countries with risk models

Validated country foundations

A logarithmic comparison keeps smaller national foundations visible without distorting the labels.

Waiting for Cloudflare country evidence…

Evidence completion

Observed or reconciled records relative to each country foundation.

Waiting for validated completion metrics…

Evidence freshness ledger

Country source, observation date and refresh policy remain attached to every foundation.

Loading provenance ledger…
Institutional capability

From observable infrastructure to accountable decisions.

One platform for national, sector, domain and delivery intelligence—designed to preserve the line between what GIRO observed and what its models infer.

National intelligence

Country cyber-risk

Exposure, abuse, infrastructure posture, confidence and comparative movement.

Early warning

Phishing & domain abuse

Indicators, look-alike clusters, suspicious-domain scoring and review queues.

Detection

Emerging threats

New infrastructure, behavioural and cross-country changes prioritised by confidence.

Posture

DNS, MX & TLS

National and sector security-control coverage, gaps and concentration risk.

Critical infrastructure

Sector threat maps

Government, finance, telecoms, energy, health, education and transport.

Longitudinal

Internet health

Append-only snapshots, historical deltas and reproducible evidence periods.

Delivery

APIs & intelligence feeds

Scoped JSON, CSV, STIX/TAXII and delivery operations for approved customers.

Research

Commissioned studies

Governed intake, collection, analysis, review and institutional delivery.

Assurance

Explainable scoring

Model version, factors, confidence, evidence identifiers and limitations.

Evidence assurance

Built for scrutiny, not black-box certainty.

Evidence

Observed and attributable

Source, collection method, timestamp, validation state and limitations remain attached.

Inference

Explainable and reviewable

Scores retain model version, confidence, contributing factors and evidence references.

Pending

Missing remains missing

GIRO never converts “not yet measured” into zero or presents an inventory as a threat count.

Design-partner & commercial access

Indicative access and cost structure.

Available for scoped pilots while country evidence coverage and customer-specific delivery controls are validated. Final proposals depend on geography, sectors, refresh frequency, retention, licences and service level.

8–12 week pilot

Design-partner pilot

£25k–£75k fixed scope
  • Selected countries and sectors
  • Governed dashboard access
  • Method and output validation
  • Executive findings workshop
Annual

Institutional intelligence

£36k–£120k per year
  • Country and sector dashboards
  • Historical intelligence
  • Exports and analyst workflows
  • Standard support and reviews
Annual

API & threat feeds

£60k–£300k per year
  • Scoped APIs or feeds
  • Delivery monitoring
  • Usage and redistribution terms
  • Integration support
Project

Commissioned study

£20k–£150k per study
  • Agreed research questions
  • Country/sector evidence scope
  • Reproducible methods
  • Reviewed report and briefing
Annual

National programme

£150k–£600k+ per year
  • National or regulated-sector scope
  • Custom integrations and SLA
  • Analyst and policy workflows
  • Executive and technical reporting
Custom

Commercial intelligence licence

Scoped proposal
  • Permitted-use licence
  • Data/feed refresh profile
  • Retention and geography terms
  • Customer-specific assurance
Pricing notice: Non-binding planning ranges for pilot conversations, not published quotations. No operational claim is made for a country until validated evidence is loaded.
Pilot engagement

Define a country, sector or intelligence question.

Notify-IC will return a scoped evidence plan, access model, timetable and commercial proposal.

Start a GIRO pilot conversation