Maritime Intelligence

What the discipline covers

• Traffic and vessel behaviour monitoring based on public position data and port records.
• Analysis of the logistics chain: shipping agents, forwarders, consignees, depots and last-mile inland transport.
• Physical and access security at terminals, quays and service areas, subcontracted labour included.
• Ownership and corporate structure of owners, managers and operators, and its traceability across jurisdictions.
• Regulatory and sanctions risk applied to routes, flags and counterparties.

Scope

• Focus on Spanish and Western Mediterranean ports, extended to any route or counterparty a decision depends on.
• One specific unit of analysis per engagement: a route, a terminal, a counterparty or a shipment.
• Assessment based on public position data, port publications, corporate registers and open satellite imagery.
• Explicit exclusions: no port inspection, no certification, no cargo tracking on behalf of law enforcement.

Main risks and threats

• Container contamination and use of legitimate infrastructure for illicit trafficking.
• Opaque counterparties: cascading corporate structures with no verifiable commercial activity.
• Congestion, strikes or administrative restrictions that propagate delay along the whole chain.
• Access-control weakness at points served by high-turnover subcontracted personnel.
• Sanctions exposure reached through a flag, a manager or an intermediate charterer.
• Dependence on a single route or a single terminal without a tested alternative.

Relevant indicators and warning signs

• Position gaps or navigation behaviour inconsistent with the declared route.
• Frequent changes of name, flag or manager on the same hull, typical of deliberate opacity.
• Transhipments in low-coverage areas, or prolonged anchoring with no apparent commercial justification.
• Deviations from the baseline: what normal traffic looks like at that terminal, in that month, for that cargo type.
• Newly incorporated intermediaries with no track record inserted into an existing chain.
• Repeated documentary inconsistencies between consignee, cargo description and declared destination.

Application of OSINT

• Cross-referencing of public maritime traffic data with port records and notices to mariners.
• Reconstruction of the intermediary chain of a shipment from public documentation and registers.
• Verification of images and video of facilities through geolocation and comparison with open satellite imagery.
• Corporate analysis of owners and operators in commercial registers and published sanctions lists.
• Comparison against a baseline, so that a normal operational pattern is not read as an anomaly.

Zero101OSINT methodology

• Definition of the unit of analysis and of the decision it must support, before any collection.
• Baseline construction for the terminal, route or cargo type under review.
• Independent corroboration: no finding is issued on the strength of a single data provider.
• Documentary reconstruction of the counterparty chain, with every entity traced to a public register entry.
• Reliability rating per finding, with a distinction between anomaly, indicator and evidence.
• Deliverable structured for operational use: what to verify internally, in what order and with what threshold.

Open sources used

• Public position and port-call data, port authority bulletins and notices to mariners.
• Official port traffic and foreign trade statistics.
• Openly available satellite imagery for facility verification and berth occupancy.
• Commercial registers, sanctions lists and publications by regulatory bodies.
• Technical and regulatory documentation on port protection; every statement is traced to its source.

Applications for companies, organisations and security decision-makers

• Prior assessment of a maritime counterparty before contracting transport or representation.
• Vulnerability analysis of one specific route and of its realistic alternatives.
• Support for the review of access controls and of the chain of custody at a terminal.
• Context for insurance decisions, subcontractor selection or internal audit work.
• Documented basis for a due-diligence file that has to survive external review.

Products or analytical outputs Zero101OSINT can provide

• Route or terminal exposure report with findings, indicators and prioritised recommendations.
• Documented profile of a maritime counterparty: structure, public track record and opacity signals.
• Verified chronology of a port incident, with evidence and its reliability rating.
• Monitoring indicator set for the security or operations team.

Legal, ethical and reliability limitations