Product documentation
What the Operator Brief contains
One operator, $39, delivered as a branded PDF within 24 hours. Eight sections, listed here in full with an example of the evidence in each. You should not have to ask what you are buying.
Want to see it before you buy? View sample (fictional company, for demonstration only)
The deliverable
A written brief, researched by a person
The Operator Brief is not an automated report. When you order one, an analyst researches that operator against sources that are not in the public profile, writes up what they find, and delivers a PDF to your account library within 24 hours.
That is why it can answer questions the instant products cannot: who owns this company, whether they or their parent appear on a screening list, and whether what they claim about themselves matches what their infrastructure actually shows.
Contents
The eight sections, in full
Identity and corporate control
Who the operating company actually is, and who controls it: registered legal name, jurisdiction, entity status, and the ownership chain up to the ultimate parent.
Example evidence — Legal entity “Example Networks B.V.” · Netherlands · status ISSUED · direct parent “Example Holding N.V.” · ultimate parent “Example Group S.A.” (Luxembourg)
Conditional. Many smaller operators have no registered entity match. We say so plainly, and show what was searched — a miss is a finding, not a gap we paper over.
Screening status
The operator and every parent in its ownership chain, screened against published sanctions and export-control lists, with false-positive triage.
Example evidence — Operator: no match across screened lists · Parent chain: no match · Lists screened and their vintage are named in the section
Always present, including when the result is clear. Where there is a match we show how distinctive the name is and whether the country corroborates, because name-based screening produces false positives on generic names. A match is a prompt to verify, never an allegation.
Infrastructure evidence
The complete Infrastructure Snapshot for this operator: observed PTRs, coverage, activity, hostname clusters, tenant density, carving, prefix rows, sample hostnames and parents, and the observation date.
Example evidence — 224,864 observed PTRs · 6.78% coverage · 12,420 hostname clusters · activity: sparse
Always present where reverse-DNS evidence exists. Field definitions are the same ones published for the Snapshot and are not redefined here.
Address space, block by block
Their announced address space broken out per block: which are routed, which resolve, which are dark, and which have been carved up and delegated away.
Example evidence — 203.0.113.0/24 · announced · 41% resolves · 12 clusters — live · 198.51.100.0/24 · announced · 0% resolves — dark
Conditional on the operator holding enough blocks to be worth a table. Where they hold five or fewer we say that in one line rather than padding the page.
Naming and tenancy
Analysis of the full reverse-DNS record for their ranges, not a twelve-name sample: which parent domains their space resolves to, how concentrated it is, and what the naming convention says about how the space is used.
Example evidence — 82% of resolving addresses carry names under one third-party parent · remaining 18% across 31 distinct parents
Conditional on reverse-DNS evidence existing. Reverse-DNS artifacts and numeric fragments are excluded, so what you see is names somebody chose.
Claims versus observed
What the operator says about itself on its own site, set against what the evidence shows, including where the two diverge — plus a plain line on what they are and are not a good fit for.
Example evidence — Site claims “our own data centres in four countries”. Observed: address space resolves predominantly to one third-party host. Divergence noted with the page it came from.
Always present. This section is written, not generated.
Analyst read
The findings, in plain language: what this operator appears to be, why it may matter, what to watch out for, and the recommended next step before you commit to anything.
Example evidence — “Worth shortlisting for regional capacity, but verify who operates the facility before contracting.”
Always present. It is a judgment and is labelled as one. There is no score, no rating and no ranking anywhere in the Brief.
Provenance and limits
Every source named with its vintage, what was searched and not found, required attributions, and the standing limits on what observed routing and naming can establish.
Example evidence — Sources, dates, and the explicit list of what this Brief does not establish
Always present.
How it differs
Against the $19 Infrastructure Snapshot
| Snapshot · $19 | Operator Brief · $39 | |
|---|---|---|
| Produced by | Instant, automated | An analyst, by hand |
| Delivered | Immediately on the page | PDF to your library, within 24 hours |
| Ownership and parent company | Not included | Section 01 |
| Sanctions and export-control screening | Not included | Section 02 |
| Reverse-DNS evidence | Summary plus 12 sample names | Full record analysed |
| Per-block address map | Not included | Section 04, where they hold enough blocks |
| Their claims vs the evidence | Not included | Section 06 |
| Written judgment | None — evidence only | Section 07 |
| Available on | Operators with reverse-DNS evidence | Any operator in the directory |
The Brief is available more widely than the Snapshot, not less. Ownership, screening and published claims do not depend on reverse-DNS data, so a Brief can be researched for operators the Snapshot is not offered on.
Delivery
What happens after you order
1 · Order
Pay $39 by card. If we cannot research the operator, you are told before any charge.
2 · Research
An analyst assembles the Brief from sources beyond the public profile.
3 · Delivered
A branded PDF, watermarked to your account, within 24 hours.
4 · Yours
It stays in your account library and re-downloads at no extra cost.
Limitations
What it does not tell you
- It is research, not certification. The Brief tells you what the public and observed record shows about an operator. It does not audit them, inspect a facility, or verify a contract.
- Screening is name-based. A match means a name resembles one on a published list. It is a prompt to verify directly, never a finding of wrongdoing, and we show you the corroboration so you can judge it.
- Corporate records are only as current as the registry. Ownership chains come from published registry data and can lag real changes in control.
- Absence of evidence is not evidence of absence. An operator who publishes no reverse DNS, or has no registered entity, will show thin in those sections. That is a real finding about visibility, not proof that nothing is there.
- It is a point in time. Every Brief carries the date it was researched. Infrastructure and ownership both change.
- If we cannot research a useful Brief on an operator, we tell you and refund you rather than send you a thin one.
Order a Brief from any operator profile.
Find the operator you are researching, then order the Brief from their page.