CFLW Cyber Strategies

What CFLW Cyber Strategies does

CFLW Cyber Strategies B.V. is a Netherlands-based private company founded in 2019 by Dr. Mark van Staalduinen, operating from The Hague (HSD Campus) with a Singapore JV (CFLW Cyber Development, jointly controlled with Manifera Pte Ltd). The company provides open-source intelligence (OSINT) services to vetted law enforcement, cybersecurity, and financial-sector professionals, focused on the Dark Web and Crypto-Asset domains. Its core technology stack comprises three operational assets: Dark Web Monitor (an OSINT platform indexed against 1.2M+ darknet domains, with Wayback Machine functionality, originally developed by TNO and now exclusively licensed to CFLW); Crypto-Asset Analytics powered by GraphSense (transaction-flow analysis across blockchains and off-chain sources, delivered via the Iknaio partnership with Pathfinder and Automator applications); and BigPhish (phishing detection, real-time intelligence, and forensics, co-developed with TNO and launched in 2024). Distribution is gated by a CFLW Membership requiring due diligence and an organisational email address, accessed through platform.cflw.com, with events at HSD Campus and partnerships with INTERPOL, the EU STARLIGHT consortium, and government agencies in the Netherlands, Bavaria, Singapore, and Vietnam.

The business model is predominantly subscription-based with tiered pricing: Dark Web Monitor offers Test (two-week trial), Basic, Business, and Premium (API-inclusive) plans billed monthly, while Crypto-Asset Analytics offers Advanced (10,000 requests/month) and Professional (100,000 requests/month) packages at single-user or institutional coverage. Pricing is quote-based and not publicly disclosed. Supplementary revenue streams include capacity-building workshops and training partnerships (e.g., Dark Intel, government engagements), joint EU-funded R&D participation, and sponsored flagship events (CFLW Live 2024, 2025, 2026). The customer base spans government prosecution offices, police forces, ministries, regulatory agencies, and financial institutions; CFLW reports hundreds of investigators worldwide use the tools, with operational outcomes including the tracing of EUR 100M+ in illegal crypto-asset activity, identification of 373,000+ illegal micro-shops in OP Alice, and ~14,000 investigations enabled at the Bavarian ZCB in 2021. Headcount is stated at 1-10, with leadership consisting of Founder/Managing Director Dr. Mark van Staalduinen and Technology Director Eljo Haspels (appointed October 2021).

Name

CFLW Cyber Strategies

Legal name

CFLW Cyber Strategies B.V.

Website

https://cflw.com

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

1–10 employees

Short description

CFLW Cyber Strategies provides vetted open-source intelligence services for law enforcement, cybersecurity, and financial institutions, focused on Dark Web monitoring, crypto-asset analytics via GraphSense/IKNAIO, and phishing detection (BigPhish), delivered through a membership platform.

Ownership category

akta.pro rank

Product category

Cybersecurity Threat Intelligence

NAICS

Investigation and Security Services (5616), Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151), Other Scientific and Technical Consulting Services (54169)

SIC

Services-Computer Programming Services (7371), Services-Engineering, Accounting, Research, Management (8700), Finance Services (6199)

akta.pro primary industry

Fraud, Cybercrime Investigations & Brand/Dark Web Monitoring (BPAKAHAO)

akta.pro secondary industries

Cybercrime, Ransomware & Illicit Finance Intelligence (Crypto) (FSADALAL), Fraud Detection, Scam Prevention & Account Takeover (Crypto) (FSADALAF), Governance, Controls & Policy Automation (GRC for Web3) (FSAPAJAG)

Keywords

• Dark web monitoring
• Crypto-asset analytics
• Open-source intelligence
• Threat intelligence platform
• Blockchain forensics

Headquarters

HQ city

's-gravenzande

HQ country

Netherlands

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales

Revenue model

1. Dark Web Monitor Subscription Plans: Subscription-based access to Dark Web Monitor with tiered plans including Test (two-week trial), Basic (personal account), Business (organizational access), and Premium (API access with all features). Delivered through CFLW Platform 24/7.
2. Crypto-Asset Analytics Subscription: Subscription plans for Crypto-Asset Analytics including Advanced (10,000 requests/month) and Professional (100,000 requests/month) packages, available as Single-user or Institutional coverage options.
3. CFLW Membership: Membership program required to access CFLW Community and services. Subject to due diligence and verification of professional background and organizational affiliation.
4. Training and Capacity Building: Training services for security professionals and law enforcement agencies on Dark Web investigations and crypto-asset analytics, including workshops and educational programs.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels8 records

Core offering

CFLW Cyber Strategies delivers subscription-based open-source intelligence (OSINT) services for monitoring the Dark Web and analyzing crypto-asset transactions, primarily serving vetted law enforcement, cybersecurity agencies, and financial institutions. Its flagship products — Dark Web Monitor, BigPhish, and Crypto-Asset Analytics powered by GraphSense and Iknaio — are delivered through the authenticated CFLW Platform and provide investigative capabilities for following illicit financial flows and disrupting cyber-enabled crime.

Product overview

CFLW Cyber Strategies provides a platform of intelligence services focused on combating cybercrime through dark web and cryptocurrency analytics. The core offerings include Dark Web Monitor (an OSINT platform for monitoring dark web criminal activities) and Crypto-Asset Analytics (powered by Iknaio and GraphSense for blockchain transaction analysis), complemented by BigPhish for phishing intelligence. These products are accessed through the CFLW Platform and are offered as subscription-based services with various tiers (Test, Basic, Business, Premium for Dark Web Monitor; Advanced and Professional for Crypto-Asset Analytics). The portfolio emphasizes operational technology for law enforcement and security professionals, built through partnerships with TNO, Iknaio, and various law enforcement agencies.

Differentiator

Problem solved

Functional benefit

Products and services

• Dark Web Monitor An open-source intelligence (OSINT) platform that provides strategic insights and operational perspectives into criminal and fraudulent activities arising from exploitation of the Dark Web. It serves as a wayback machine and search engine for the dark web, enabling investigators to monitor illegal activities and trace suspects across indexed darknet content for law enforcement and security professionals.
• Crypto-Asset Analytics (IKNAIO) Crypto-asset analytics service powered by GraphSense, providing transaction tracking, pattern recognition, fund flow assessment, and relationship identification between crypto-asset entities. Available in Advanced (10,000 requests/month) and Professional (100,000 requests/month) packages, with Single-user or Institutional coverage options.
• BigPhish Real-time and historical phishing intelligence service supporting three use cases: prevention through early phishing site detection, real-time intelligence for law enforcement, and forensics using Wayback Machine capabilities for historical campaign analysis. Developed from TNO research within the Dutch Police program on Phishing.
• CFLW Platform Central platform providing access to CFLW Intelligence Services including Dark Web Monitor, Crypto-Asset Analytics, and integrated Iknaio applications (Pathfinder and Automator). Supports membership registration and due diligence verification for security professionals with organizational email required.
• GraphSense Open-source platform specializing in the analysis of Crypto-Asset transaction flows using advanced data science techniques, available on GitHub. Provides a powerful API for custom, automatized Crypto-Asset forensic or compliance workflows and introduced TagPacks for collaborative attribution tagging across CASPs and entities.
• Training and Capacity Building Training services for security professionals and law enforcement agencies on Dark Web investigations and crypto-asset analytics, including workshops and educational programs. Validated by training workshop for Vietnamese Government (State Bank of Vietnam, Ministry of Public Security, Ministry of Finance) supported by US Government Agencies and UNODC.

Quantifiable outcome

• Over 1.2 million darknet domains discovered and monitored
• +4 more outcomes

Named customers6 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability10 records

Feature5 records

Partnerships

16 partnerships are on record, tiered important and core.

• Dutch Blockchain Coalition (DBC)importantStrategic or Co-development Partner · 14 July 2022CFLW joined DBC as partner with Dr. Mark van Staalduinen as Safety theme-lead. Partnership focuses on secure and reliable blockchain ecosystem, tackling abuse and fraud, and fostering trusted cyberspace.
• Iknaio Cryptoasset Analytics GmbHcoreTechnology or Integration · 5 July 2022Cooperation agreement to co-create seamless solution combining CFLW's Dark Web analytics with Iknaio's cryptoasset analytics capabilities. Provides customers access to both services, bundling products in joint offering. Synchronizes tools (Pathfinder, Automator, Dark Web Monitor) for integrated investigative workflow.
• Complexity Science Hub Vienna (CSH)coreTechnology or Integration · 22 June 2022MoU signed to extend Dark Web Monitor pilot in Bavaria with GraphSense blockchain analysis. CSH contributes blockchain experts for cryptocurrency analysis capabilities, enhancing ZCB investigators' ability to follow Bitcoin and other cryptocurrencies.
• Dark IntelimportantImplementation/ SI/ Consulting Partner · 7 June 2022MOU for Dark Intel to utilize CFLW's Dark Web Monitor in developing new training materials to increase investigative capacity among security professionals. Dark Intel provides global training in technology investigations and Darknet. CFLW grants training accounts for capacity building.
• TAU Express Pte LtdcoreStrategic or Co-development Partner · 4 October 2021Partnership Collaboration Agreement to develop new technologies for combating high-tech financial crime. Working on Project BIANCO (Breaking Illicit virtual Asset Networks with Crypto analytics and Open sources). Combines CFLW's OSINT with TAU's AI-enabled Intelligence Analytics. Co-funded by GlobalStars programme of EUREKA Network.
• STARLIGHT (EU H2020 Project)importantStrategic or Co-development Partner · 1 October 2021CFLW participates in 4-year EU-funded STARLIGHT project coordinated by CEA. 52 partners from 18 European countries working to enhance EU's strategic autonomy in AI for law enforcement agencies. Budget of EUR 18.8 million (EUR 17 million funded by EU).
• Singapore Government (Cyber Security Agency, etc.)importantStrategic or Co-development Partner · 3 March 2021Collaboration through Netherlands-Singapore Roundtable on Combating Financial Crimes. Supported by Ministry of Justice and Security, ABN AMRO, TNO, HSD. Focus on virtual asset intelligence, KYC facilities, and collaborative mechanisms.
• CyberDevOps Pte Ltd (CFLW Cyber Development)coreStrategic or Co-development Partner · 1 January 2021CyberDevOps rebranded to CFLW Cyber Development. Joint venture by Manifera Pte Ltd and CFLW Cyber Strategies BV. Continues as strategic partner in Singapore providing software development services and cybersecurity operations.
• CointelimportantTechnology or Integration · 9 October 2020Partnership to engage expertise and tooling to combat crimes involving dark web and virtual assets. Combined cryptocurrency analytics and dark web intelligence for enhanced investigative capabilities. Led to Eljo Haspels joining CFLW as Technology Director.
• Bavarian State Ministry of Justice / ZCBcoreStrategic or Co-development Partner · 27 July 2020MoU signed to accelerate strategic law enforcement capabilities. ZCB started operational pilot with Dark Web Monitor. Partnership led to significant investigations and media attention (Süddeutsche Zeitung coverage). Extended with GraphSense in 2022.
• The Hague Security Delta (HSD)importantStrategic or Co-development Partner · 9 January 2020CFLW became Network Partner of Dutch security cluster HSD. Network includes businesses, governments, and knowledge institutions working on innovative security solutions. CFLW located at HSD Campus in The Hague.
• TNO (Netherlands Organisation for Applied Scientific Research)coreTechnology or Integration · 13 November 2019TNO licensed Dark Web Monitor to CFLW (then CyberDevOps) as exclusive service provider for law enforcement agencies. TNO developed the original proof of concept in 2013; CFLW translates it to operational technology. Partnership renewed for five additional years. CFLW originated as R&I spinoff from TNO in 2019.
• Partners for International Business Programme (PIB) - Blockchain Solutions Netherlands-SingaporeimportantStrategic or Co-development Partner · 21 June 2019CFLW joined public-private consortium with ABN AMRO, Rabobank, TNO, Ledger Leopard, Kryha, Unchain.io, and HSD to connect Dutch and Singapore blockchain ecosystems. Coordinated by Dutch Blockchain Coalition with support from Dutch ministries.
• INTERPOLcoreStrategic or Co-development PartnerCFLW participates in INTERPOL Working Group on Darknet and Cryptocurrencies since 2018. Contributes to taxonomy development for dark web and virtual assets. International cooperation enables reaching law enforcement community worldwide.
• CDO Connects (CyberDevOps Pte. Ltd.)coreChannel Partner/ Reseller/ DistributorSingapore operations conducted through CDO Connects. ACRA registered entity (201842216E) providing CFLW services in Asia Pacific region.
• Delft University of Technology (TU Delft)importantStrategic or Co-development PartnerResearch collaboration on network structures in dark web. Explorative study with TU Delft developed core-periphery algorithms for analyzing darknet service relations. TU Delft researchers discovered EUR 100M+ in illegal crypto-asset activities.

Scale indicators7 records

Recent moves10 records

Expansion highlights7 records

Emerging players

• OSINT Industries: OSINT investigation platform for due diligence, fraud, and law enforcement use cases, with adjacent dark web and identity intelligence capabilities. Comparable to CFLW in serving vetted investigators with subscription-based OSINT tooling.

Direct peers

• TRM Labs: Blockchain intelligence platform for crypto compliance, fraud detection, and law enforcement investigations. Overlaps with CFLW's GraphSense-based transaction analytics and investigator tooling.
• Elliptic: Crypto compliance and blockchain analytics provider serving financial institutions and law enforcement with transaction screening and investigation tools. Closely comparable in customer base and use cases to CFLW's crypto-asset analytics.
• Chainalysis: Leading blockchain analytics platform providing transaction monitoring, investigation, and compliance tools to law enforcement and financial institutions. Directly comparable to CFLW's Crypto-Asset Analytics offering but with much broader commercial reach and significantly larger funding.
• Crystal Intelligence: Blockchain analytics and crypto compliance firm (formerly Blockchain Intelligence Group) providing transaction monitoring and investigation tools to law enforcement and financial institutions. Overlaps with CFLW's Crypto-Asset Analytics in scope and customers.
• IntelligenceX: OSINT search engine and data archive for dark web, leaked databases, and public records used by investigators and journalists. Comparable to CFLW's Dark Web Monitor as a wayback/search capability for dark web content.
• Flashpoint: Threat intelligence platform with deep dark web, illicit community, and vulnerability intelligence offerings for enterprise and government security teams. Comparable to CFLW's OSINT-driven dark web and threat intelligence services.
• DarkOwl Vision: Darknet intelligence platform providing comprehensive dark web data collection, monitoring, and search capabilities. Directly comparable to CFLW's Dark Web Monitor in functionality and customer profile (law enforcement, security teams).

Broad incumbents

• Kroll Cyber Risk: Global risk consultancy with a significant cyber investigations and incident response practice serving legal, financial, and law enforcement clients. Comparable in investigative use cases though much broader in scope and scale than CFLW.
• Recorded Future: Large-scale threat intelligence platform covering dark web, cybercrime, and crypto threats across a much broader customer base. Comparable to CFLW's dark web OSINT capabilities but as part of a wider intelligence portfolio targeting enterprise security.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/channel/UCFLGSKuYJ_waQBjFWPpQlJQ
• LinkedInlinkedin.com/company/cflw

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CFLW Cyber Strategies