Agencies
Every agency on the site, grouped by mandate — foreign intelligence, signals & cyber, military, domestic security, law enforcement. Within each group, sorted by country then by name. Pages marked in progress have stub entries; full references are being written progressively.
Coordination · 1
Foreign intelligence · 26
Australian Secret Intelligence Service
Australia's foreign human-intelligence service, established in 1952 and not publicly acknowledged by the Australian government until 1977.
General Intelligence Service
Egypt's principal foreign intelligence service, established under President Gamal Abdel Nasser in 1954 and historically a regional intelligence hub for the Arab world.
DGSE Service Technique
The signals-intelligence and cyber-collection arm of France's foreign-intelligence service — the Direction Générale de la Sécurité Extérieure. Substantially less publicly attested than the Anglo equivalents, but disclosed in detail through 2015 Le Monde reporting on French satellite-and-cable signals collection and through 2020–2024 academic and parliamentary documentation. The Service Technique operates France's strategic SIGINT collection infrastructure and the supporting cryptanalytic and cyber-operational capability.
Direction Générale de la Sécurité Extérieure
France's principal foreign intelligence service, reorganized from the SDECE in 1982 and combining human, signals, and paramilitary capabilities under the Ministry of the Armed Forces.
Federal Intelligence Service
The Federal Republic of Germany's foreign intelligence service, with origins in the post-war Organisation Gehlen and a controversial inheritance of personnel from the wartime Wehrmacht intelligence apparatus.
Research and Analysis Wing
India's principal foreign intelligence service, established in 1968 by separation from the Intelligence Bureau in the aftermath of the 1962 Sino-Indian War and the 1965 Indo-Pakistani War.
IRGC Intelligence Organisation
The intelligence organisation of Iran's Islamic Revolutionary Guard Corps, elevated to ministry-equivalent status in 2009 and operating in parallel — and at times in tension — with the civilian Ministry of Intelligence.
Ministry of Intelligence
Iran's principal civilian intelligence ministry, established in 1984 to consolidate the post-revolutionary intelligence functions previously handled by SAVAMA and revolutionary committees.
Iraqi National Intelligence Service
Iraq's principal civilian intelligence service, established in 2004 under US tutelage following the dissolution of the Saddam-era Mukhabarat services.
Mossad
Israel's foreign intelligence service — formally the Institute for Intelligence and Special Operations — reporting directly to the Prime Minister and responsible for foreign HUMINT, covert action, and counter-terrorism abroad.
General Intelligence Directorate
Jordan's principal intelligence service, reporting directly to the King and widely regarded among Western and regional services for counter-terrorism work in the Levant and the broader region.
Direction Générale des Études et de la Documentation
Morocco's foreign intelligence service, established in 1973 with a particular focus on the Western Sahara conflict, regional Maghreb relations, and Moroccan diaspora communities.
Reconnaissance General Bureau
The Democratic People's Republic of Korea's principal foreign intelligence and special-operations service, established in 2009 by consolidation of multiple predecessor agencies and the principal organization to which Western governments attribute substantial DPRK cyber operations.
Inter-Services Intelligence
Pakistan's principal intelligence service, military-led and unusual among comparable services in combining foreign-intelligence collection, counter-intelligence, and a substantial domestic political role within a single agency.
Foreign Intelligence Service
The Russian Federation's foreign intelligence service, direct successor to the KGB First Chief Directorate and headquartered at Yasenevo, southwest of Moscow.
SVR cyber operations
The Foreign Intelligence Service of the Russian Federation's principal computer-network-exploitation effort — the cyber-collection arm responsible for the 2014–15 White House and State Department intrusions, the 2016 Democratic National Committee initial access, the 2020 SolarWinds / SUNBURST supply-chain compromise, and the 2020–21 COVID-19 vaccine-research collection campaign. Publicly attributed to the SVR by the United States and United Kingdom in April 2021.
General Intelligence Presidency
Saudi Arabia's principal foreign intelligence service, headed by senior princes of the House of Saud across most of its history and reporting directly to the King through the Royal Diwan.
General Intelligence Directorate
Under the Assad governments (1971–2024), the principal civilian intelligence service of the Syrian Arab Republic and one of four parallel Mukhabarat services central to the regime's repression and the documented record of war crimes during the post-2011 civil war. The Assad government fell in December 2024.
National Intelligence Organization
Türkiye's principal foreign and domestic intelligence service, substantially reorganised under President Erdoğan into a politically aligned service with expanded authorities for foreign operations.
Secret Intelligence Service
The United Kingdom's foreign human-intelligence service, popularly known as MI6, established in 1909 as the foreign section of the Secret Service Bureau.
Bureau of Intelligence and Research
The State Department's intelligence and analysis bureau — one of the smallest IC components but historically the most analytically respected. Roots in the post-1945 OSS Research and Analysis Branch consolidated into State.
Central Intelligence Agency
The principal foreign human-intelligence and covert-action service of the United States, created in 1947 as successor to the wartime Office of Strategic Services.
National Geospatial-Intelligence Agency
The United States agency responsible for the collection, analysis, and dissemination of geospatial intelligence, including imagery and mapping for both military operations and national policy.
National Reconnaissance Office
The United States agency responsible for the design, construction, launch, and operation of intelligence-collection satellites. The Agency's existence was officially classified until 1992.
Office of Intelligence and Counterintelligence
The Department of Energy's intelligence and counterintelligence component. Foreign-nuclear-programme analytical work; counterintelligence for the national-laboratory complex; the institutional bridge between the Intelligence Community and the DOE national-laboratory scientific establishment.
Office of Terrorism and Financial Intelligence
The Department of the Treasury's intelligence directorate, established 2004. The Office of Intelligence and Analysis within TFI is the formal Intelligence Community member; the broader directorate also houses the Office of Foreign Assets Control (OFAC), the Financial Crimes Enforcement Network (FinCEN), and Treasury sanctions enforcement.
Signals & cyber · 12
ASD Information Warfare Division
The offensive-cyber arm of the Australian Signals Directorate — formally established 1 July 2017 as a co-equal directorate within ASD, alongside the Signals Intelligence Division and the Australian Cyber Security Centre. The IWD operates Australia's offensive-cyber capability, conducting joint operations with the United States and United Kingdom Five Eyes partners. The Division's operational footprint against the Islamic State media-and-recruitment infrastructure across 2016–2018 was publicly acknowledged by the Australian Government and is the principal disclosed operational record.
Australian Signals Directorate
Australia's signals-intelligence and offensive-cyber agency, with origins in wartime Australian signals operations and a founding role in the Five Eyes partnership.
Communications Security Establishment
Canada's national signals-intelligence and cyber-security agency, with origins in the wartime Examination Unit and a founding role in the Five Eyes signals partnership.
MOIS OilRig cluster
The principal cyber-operational cluster attributed to Iran's Ministry of Intelligence and Security — the civilian-intelligence service, distinct from the parallel cyber capability of the IRGC Intelligence Organisation. Tracked across the threat-intelligence industry as APT34, OilRig, Helix Kitten, and Hazel Sandstorm. Operations focus on regional Gulf-state, Israeli, and Saudi-Arabian government and energy-sector targets; substantially weaker public attribution and indictment record than the parallel IRGC-IO cluster.
Aman Unit 8200
The principal signals-intelligence and cryptanalytic unit of the Israeli Defense Forces' Military Intelligence Directorate (Aman) — the largest single unit in the IDF by personnel, the institutional source of substantial Israeli cyber capability, and the joint partner with NSA TAO in the Stuxnet operation against the Iranian Natanz uranium-enrichment facility.
Government Communications Security Bureau
New Zealand's signals-intelligence and cyber-security agency, with origins in the post-war reorganisation of New Zealand signals work and a founding role in the Five Eyes signals partnership.
Signals Intelligence Agency
The United Arab Emirates' national signals-intelligence and cyber-security agency, established in 2012 as the National Electronic Security Authority (NESA) and subsequently reorganised under the SIA name; substantially staffed by Western contractors and former intelligence officers.
GCHQ Joint Threat Research Intelligence Group
The Government Communications Headquarters' computer-network-attack and information-operations unit — responsible for the disruptive and offensive cyber operations described in the 2014 Snowden disclosures, including online identity operations, deception and degradation campaigns, and the joint NSA-GCHQ operation against the Belgian telecommunications operator Belgacom.
Government Communications Headquarters
The United Kingdom's signals-intelligence, cryptography, and cyber-security agency, with origins in the wartime Government Code and Cypher School at Bletchley Park.
National Security Agency
The signals-intelligence and information-security agency of the United States, established in 1952 by classified executive order and disclosed publicly only in 1957.
NSA Tailored Access Operations
The Central Security Service's elite computer-network-exploitation arm — the operational unit responsible for offensive intrusion against foreign networks, target-specific implant development, and the bulk of the United States' cyber-collection programmes disclosed through the 2013 Snowden archive. Reorganised in 2016 into the Computer Network Operations Directorate; tracked in industry as the Equation Group.
United States Cyber Command
The United States unified combatant command responsible for the conduct of military cyber operations. The Commander of US Cyber Command is dual-hatted as the Director of the National Security Agency.
Military intelligence · 15
Kommando Cyber- und Informationsraum
The Cyber and Information Domain Service of the German Bundeswehr — the sixth domain of the German armed forces, established 5 April 2017 as a co-equal service command with the army, navy, and air force. CIR consolidates the Bundeswehr's military computer-network-defence, offensive-cyber, signals-intelligence, electronic-warfare, and information-operations capability under a single unified command. Approximately 17,000 personnel as of 2024.
IRGC IO cyber operations
The principal cyber-operational arm attributed to the Islamic Revolutionary Guard Corps Intelligence Organisation — Iran's military-intelligence service, distinct from the civilian Ministry of Intelligence. The cluster is tracked across the threat-intelligence industry under multiple vendor labels including Charming Kitten, APT35, and Mint Sandstorm. Operations include sustained targeting of Iranian dissidents abroad, United States and Israeli government and academic targets, and the 2019–2020 operations against United States presidential-campaign personnel.
Military Intelligence Directorate
Israel's military-intelligence directorate, the largest of the three principal Israeli intelligence services, with primary responsibility for military intelligence and for signals intelligence through Unit 8200.
Lazarus Group
The umbrella threat-intelligence-industry designation for the cluster of cyber-operational activity attributed broadly to North Korea's Reconnaissance General Bureau. Treated here as a canonical entity in its own right — distinct from the institutional-unit pattern of the rest of the bestiary — because the institutional attribution within RGB is genuinely diffuse across Bureau 121, Lab 110, Bureau 180, Office 91, and additional sub-units, and because "Lazarus" has become the canonical referent in the forensic, journalistic, and indictment record in a way no single RGB sub-unit has.
RGB Bureau 121
The principal cyber-operational arm of North Korea's Reconnaissance General Bureau — the publicly-attested institutional source of a substantial share of the North-Korean-attributed cyber-operational footprint that the threat-intelligence industry tracks broadly under the Lazarus Group umbrella. Operates from forward bases inside China to circumvent the limited connectivity of the domestic DPRK network infrastructure.
GRU Unit 26165 (85th Main Special Service Centre)
The 85th Main Special Service Centre of the Russian Main Intelligence Directorate — the GRU's principal computer-network-exploitation and influence-operations unit. Indicted by the United States Department of Justice in July 2018 for the 2016 Democratic National Committee intrusion; tracked across the threat-intelligence industry as Fancy Bear, APT28, Forest Blizzard, and several other vendor labels.
GRU Unit 74455 (Main Centre for Special Technologies)
The Main Centre for Special Technologies of the Russian Main Intelligence Directorate — the GRU's destructive-cyber-operations unit. Responsible for the BlackEnergy / Industroyer attacks on the Ukrainian electricity grid, the NotPetya wiper attack of June 2017, the 2018 Olympic Destroyer attack against the Pyeongchang Winter Olympics opening, and VPNFilter. Indicted by the United States Department of Justice in October 2020 for six named officers.
Main Directorate of the General Staff
Russia's military-intelligence service, formally renamed the Main Directorate (GU) of the General Staff in 2010 but continuing in popular and journalistic use as the GRU. Subject to extensive Western-government attribution for cyber and direct-action operations since 2014.
Coast Guard Intelligence
The intelligence component of the United States Coast Guard, an Intelligence Community member since 2001. Maritime, port, and coastal-security focused.
Defense Intelligence Agency
The Department of Defense's foreign military-intelligence and all-source analytical service, supporting US combatant commands and the Joint Staff.
Marine Corps Intelligence Activity
The Marine Corps' intelligence component, headquartered at Quantico, Virginia. Provides expeditionary-intelligence support to Marine Corps operational units and serves as the Marine Corps' representative to the broader Intelligence Community.
Office of Naval Intelligence
The intelligence service of the United States Navy and the oldest continuously operating intelligence service of the United States Government, established by General Order No. 292 in 1882.
Sixteenth Air Force (Air Forces Cyber)
The United States Air Force's intelligence, surveillance, reconnaissance, and cyber-operations command, established October 2019 by the consolidation of the Twenty-Fifth Air Force (ISR) and the Twenty-Fourth Air Force (Cyber). The Air Force's Intelligence Community-component representation.
Space Force Intelligence
The intelligence component of the United States Space Force, admitted to the Intelligence Community on 8 January 2021. The most recent addition to the IC, focused on space-domain intelligence, foreign-space-system threat assessment, and intelligence support to Space Force operations.
United States Army Intelligence and Security Command
The United States Army's principal intelligence command, conducting signals, human, counter-intelligence, and information-operations missions in support of Army and theatre commanders worldwide.
Domestic & homeland security · 13
Australian Security Intelligence Organisation
Australia's domestic security service, responsible for counter-intelligence, counter-terrorism, counter-foreign-interference, and protection of Australia's national security inside Australia.
Canadian Security Intelligence Service
Canada's principal civilian security and intelligence service, established in 1984 to separate intelligence work from the Royal Canadian Mounted Police following the McDonald Commission.
Direction Générale de la Sécurité Intérieure
France's principal domestic intelligence and counter-terrorism service, raised in 2014 to cabinet-attached status under the Minister of the Interior.
Federal Office for the Protection of the Constitution
The Federal Republic of Germany's domestic security service, established in 1950 with a constitutional mandate to monitor anti-democratic and anti-constitutional activity.
Intelligence Bureau
India's domestic security service, with origins in the 1887 Central Special Branch of the British Indian Government and one of the world's longest continuously operating intelligence services.
Israel Security Agency
Israel's domestic security service, responsible for counter-terrorism, counter-espionage, and the protection of Israeli officials and infrastructure inside Israel and in the West Bank and Gaza.
Direction Générale de la Surveillance du Territoire
Morocco's domestic security service, responsible for counter-intelligence, counter-terrorism, and substantial domestic political-surveillance functions.
New Zealand Security Intelligence Service
New Zealand's domestic security and counter-intelligence service, established 1956 and operating alongside GCSB under the consolidated Intelligence and Security Act 2017.
Federal Security Service
The Russian Federation's principal domestic security and counter-intelligence service, successor to the KGB and headquartered at the Lubyanka in Moscow.
Security Service
The United Kingdom's domestic security service, popularly known as MI5, responsible for counter-intelligence, counter-terrorism, and protection of national security inside the United Kingdom.
Department of Homeland Security
The cabinet department created in 2002 to consolidate US domestic-security functions; its Office of Intelligence and Analysis is the department's Intelligence Community member.
Federal Bureau of Investigation
The principal domestic intelligence and federal law-enforcement agency of the United States, with statutory authority for counterintelligence, counter-terrorism, and federal criminal investigation.
Transportation Security Administration
The US transportation-security agency, established in 2001 in response to the 9/11 attacks; responsible for passenger and baggage screening at US airports and broader transportation-system security.
Law enforcement · 4
Bureau of Alcohol, Tobacco, Firearms and Explosives
The federal law-enforcement agency responsible for the enforcement of US firearms, explosives, arson, and alcohol-and-tobacco statutes. Documented in this corpus through the 1992 Ruby Ridge investigation and initial encounter, the 1993 Waco Siege ATF raid, and the post-2009 Operation Fast and Furious "gun-walking" controversy.
Drug Enforcement Administration
The principal United States federal agency for the enforcement of controlled-substances law. The Office of National Security Intelligence within DEA was added to the Intelligence Community in 2006.
Federal Air Marshal Service
The covert in-flight law-enforcement arm of the Transportation Security Administration — sworn federal officers (GS-1801 series) who fly armed and undercover on selected US commercial flights to deter and defeat hijacking and other onboard threats. Created in 1962 as the FAA's Sky Marshal Program, formalised as the Federal Air Marshal Service in 1985, expanded dramatically after 11 September 2001, transferred from TSA to ICE in November 2003, and returned to TSA in 2005. Coverage of commercial flights is well under one per cent; secondary VIPR teams deploy at surface-transportation hubs.
United States Marshals Service
The oldest US federal law-enforcement agency, established 1789. Responsible for federal fugitive apprehension, federal court security, witness protection, and federal prisoner transport. Documented in this corpus through the August 1992 Ruby Ridge encounter, the post-2007 aerial-IMSI-catcher "Dirtbox" programme, and the 2018 Securus location-tracking client relationship.
How the index is organised
This index groups every intelligence agency on the site by mandate — foreign intelligence, signals & cyber, military, domestic security, law enforcement, with coordination services at the top. Within each group, entries are sorted by country and then by name. The grouping mirrors the per-country agency lists so the typology stays consistent across the site. Each card shows the agency's country of origin, its formal name and acronym, and a short editorial description. Click through to the agency page for the full reference entry — founding date, statutory basis, jurisdiction, parent ministry, headquarters, official channels, and a structured account of role, history, and notable operations footnoted to primary sources.
Coverage spans foreign-intelligence services (the CIA, SIS, DGSE, BND, GRU, SVR, MSS, RAW, and so on), domestic-security services (MI5, FBI, BfV, ASIO, DGSI), and signals-intelligence agencies (NSA, GCHQ, CSE, ASD, GCSB, FAPSI's successors). Entries marked in progress are stubs awaiting full reference treatment; they are kept on the index so the navigation between related services is preserved while the detailed text is written.
If you know the country but not the acronym, start at the Countries index. If you are looking for an operation, scandal, or theme that crosses agencies, see the Dossiers. The methodology page documents how operations are categorised as confirmed, alleged, or disputed.
