Under DORA TLPT rules, the threat intelligence provider has to be external. PhishNet packages the threat picture your threat-led penetration test is built on, with sovereign provenance, sector relevance and evidence paths that can survive internal review, competent-authority scrutiny and third-party assurance.
This is not a generic geopolitical brief. It is a scoped threat-intelligence package for the entity, assets, sectors, geographies and adversaries that should shape the TLPT exercise design.
Actors, infrastructure clusters, lures, attack chains and targeting patterns relevant to the institution and its sector.
Brand impersonation, identity dependencies, attack-surface pressure, credential exposure and sector-adjacent incidents.
Source-backed packets, public-safe summaries and export-ready material for governance, assurance and test planning.
We can walk through the threat-intelligence layer, where it connects to the live evidence corpus, and how the output fits the wider DORA and TIBER-EU planning conversation.