A
Layer A — Detection
Who is retelling
DISARM-aligned narrative monitoring across 7 platforms. Coordination signals: synchronized posting, content cloning, URL co-amplification, bot velocity. Every retelling tagged against DISARM Red Framework v2.
Built in Ukraine · Operational since 2024
We watch the retellers.
We measure the retellings.
Retelnist is the cognitive intelligence platform that pairs DISARM-aligned detection of coordinated information operations with continuous measurement of their actual effect on your target population — so you know when a coordinated push is noise, and when it's a national security event.
Methodology aligned with the DISARM Framework, EEAS FIMI taxonomy, and NATO ACT cognitive superiority doctrine.
Discipline
Boutique threat intelligence
Layer A
DISARM-aligned detection
Layer B
Belief-shift measurement
Infrastructure
EU-sovereign by default
retelnist · RU-UA-COG · live
IO Pressure
0.88
peak V-score
Shift Events
14
last 40 days
High Severity
6
detected
IO Propagation Pressure · 40 days▲ high alert
day 1day 20day 40
Narrative
"Kyiv forces are deliberately targeting civilian infrastructure to discredit Russia"
Recent shift events
Jun 09Coordinated amplification spikehigh
Jun 05Cross-platform polarity fliphigh
Jun 01Organic engagement uptickmedium
retelnist · UA-POP-BELIEF · weekly
Belief Δ
+9pp
vs prev month
Survey pts
7
KIIS cross-ref
Trend
↑ rising
acceleration
Belief index · rolling 40 days↑ rising trend
day 1day 20day 40
Narrative
"Western support for Ukraine is waning and will collapse by end of year"
Recent shift events
Jun 08Survey realignment detectedhigh
Jun 03Belief plateau broken upwardmedium
May 28Cross-source corroborationmedium
retelnist · ACTOR-NETWORK · snapshot
Actors tracked
38
active nodes
Clusters
5
distinct networks
New actors
3
last 7 days
Actor activity · 40 days● 3 new nodes
day 1day 20day 40
Narrative
"NATO expansion caused the conflict — Russia had no choice but to respond"
Recent shift events
Jun 10New amplifier cluster emergedhigh
Jun 06Cross-network coordination linkhigh
Jun 02Dormant actor reactivatedmedium
Live signal
Watching a narrative in real time
Below is a live read of one tracked proposition from our RU-UA-COG project. The chart shows IO propagation pressure — derived from matched post frequency, coordination signals, polarity, and amplification asymmetry — over the last 40 days.
Narrative
"Ukraine is a Nazi or neo-Nazi state"
IO pressure index95% CI bandExpressed stance indexHigh shift eventMedium shift
Tracking window
40 days
Peak IO pressure
0.65
aggregate V-score
High-severity shifts
7
detected events
Shift events total
11
medium + high
The gap
The question every detection platform leaves unanswered
Detection tools tell you a coordinated operation is happening. That's necessary — and it's not enough.
The adversary doesn't run operations to be seen. They run operations to shift what populations believe, doubt, and decide. An operation that doesn't move the needle is noise. One that does is a national security event.
Today's platforms answer the first question. Retelnist answers both.
B
Layer B — Effect
Whether the retelling is working
V(x,t) score — a continuous measurement of how belief is moving against organic baseline. Frequency. Sentiment polarity. Identity coupling. Amplification asymmetry. When the retellers push, you see the needle move — or you see that it didn't.
∑
CWPI — The verdict
One number for decision-makers
Cognitive Warfare Presence Index combines both layers with statistical lag analysis. Reported with 95% confidence intervals. Bootstrap resampling. Every number carries its uncertainty.
Who uses Retelnist
Three buyer profiles
National StratCom Units
Know whether the retelling is working this week
You don't need to know whether Russian operators are pushing "Western support is weakening" — they are. You need to know whether the retelling is working this week, in which regions, against which narratives, when the shift began. Weekly briefs in EEAS-FIMI format, ready for your director's desk.
- Weekly EEAS-FIMI briefs
- Regional belief-shift tracking
- CWPI per narrative
EU / NATO Procurement
Report in your language, with auditable methodology
You operate inside doctrinal frameworks. You need tools that report in your language with auditable methodology and reproducible results. Retelnist exports DISARM-tagged threat briefs, STIX 2.1 bundles for FIMI ISAC sharing, and statistical reports your analysts can defend.
- STIX 2.1 export
- DISARM-tagged briefs
- Permutation-tested results
Fact-checking Networks
Working tool that respects your funders' standards
You see dozens of suspicious retellings a week. You can't afford Graphika or Logically. You need a tool that respects your funders' standards — DISARM-compliant, EU data sovereignty, transparent methodology, exportable. Analysts can manually correct AI suggestions.
- EU data sovereignty
- Analyst corrections
- EDMO-compatible exports
One retelling, traced end to end
Ukraine deployment · anonymized scenario
Illustrative scenario from active monitoring. Every number Retelnist reports carries its uncertainty, and the methodology is documented to the level your procurement team can defend.
- Step 01
Trigger
Layer A detects 47 accounts coordinated within a 72-hour window pushing variants of "Mobilization is unjust — rich buy out, poor die."
Signal
DISARM: T0049 (Flood), T0048 (Harass), T0091 (Recruit Bad Actors)
- Step 02
Effect measurement
Layer B shows V-shift of +2.3σ on proposition P-UA-12 ("Mobilization is unjust"), with identity coupling spike on the marker "fear of ТЦК."
Signal
Belief-shift confirmed on target proposition
- Step 03
Coupling analysis
18-hour lag between Layer A peak and Layer B shift. Permutation test: p < 0.01 shows the retelling's temporal precedence is consistent with influence.
Signal
Temporal precedence established · p < 0.01
- Step 04
Verdict — CWPI
Confirmed cognitive operation with measurable impact. Brief auto-generated in EEAS-FIMI format. Counter-narrative team notified.
Signal
95% CI · bootstrap resampled
- Step 05
Closed loop
A calibrated training scenario on this exact retelling pattern is published into the inoculation module. Same propositions re-measured weeks later in trained vs untrained cohorts.
Signal
Talantir inoculation engine · McGuire 1961 methodology
The closed loop.
A platform that only detects gives you reports. A platform that only trains gives you hope. Retelnist pairs them — as a measurement system. Detect the retelling. Train the population on the technique. Re-measure the V-shift. You get statistical evidence that your program is building resistance, not just running courses.
Honest positioning
What Retelnist is, and what it is not
Retelnist is not the biggest platform. Graphika has more analysts. Logically has more contracts. Blackbird has US Government scale. If you need 200 reference clients, Retelnist is not yet that vendor.
They have
Detection only
- Graphika
- Logically
- Blackbird
Know that an operation is happening. Essential — not sufficient.
Retelnist adds
⊕ pairs bothDetection + Effect
- Continuous V(x,t) belief-shift measurement
- Statistical coupling — behavioral → belief
- EU-sovereign deployment by default
- Operational embedding in Ukraine
- Inoculation training with measurable outcomes
Know whether the retelling is working. The only platform that answers both questions.
Deployment & pricing
Pilot engagement
3-month structured pilot. Platform access, analyst onboarding, weekly briefs, methodology review.
Full deployment
Annual subscription per deployment + analyst seats. Volume terms for multi-deployment buyers.
Academic / NGO
Discounted pricing for verified non-commercial use. EDMO hubs and GFCN-affiliated organizations.
What you can verify
Methods documented to the level your team can defend
- DISARM Red Framework v2 — open-source, governance-shared
- DISARM tagging logic — published rules, auditable per-tag
- Bootstrap resampling N=1000, permutation tests, 95% CI on every value
- Audit trail — every tag, shift, and report logged with timestamp
- Coupling analysis methodology — published in technical brief
Why not everything is open
A cognitive intelligence platform has two failure modes. Publish all weights, and the adversary trains against your methodology. Publish nothing, and you become a black box no procurement officer can defend. Everything that can be open without arming the adversary, is open. Everything else is documented under NDA, in detail, for verified buyers.
Most cognitive security platforms are built by US/UK analytics firms watching the war from outside. Retelnist is built inside it.
Questions
The things buyers ask first
What is the V(x,t) score?
A continuous measurement for belief movement, where x is a tracked proposition and t is time. It combines frequency, sentiment polarity, identity coupling, and amplification asymmetry into a single value measured against an organic baseline — and estimates belief shift. Every reported value carries a 95% confidence interval from bootstrap resampling (N=1000).
What is CWPI?
The Cognitive Warfare Presence Index is a single number combining Layer A (behavioral activity) and Layer B (belief shift) with statistical lag analysis between them. It answers one question: Is this a coordinated operation that is actually working — or noise?
How does the coupling analysis work?
We model the lag between Layer A peak activity and Layer B belief shift. Permutation tests establish whether the behavioral push is causing the shift (not just co-occurring). A p < 0.01 threshold is required before we call a confirmed cognitive operation. p < 0.05 indicates high possibility of cognitive operation.
What makes this EU-sovereign?
Infrastructure runs on Hetzner Helsinki and Scaleway Paris. On-premises deployment is available for sovereign government clients. We are GDPR-compliant and provide data processing transparency documentation on request.
How does the training (inoculation) module work?
Built on Talantir, our scenario-based behavioral simulation engine, anchored in inoculation theory (McGuire 1961; van der Linden & Roozenbeek 2020). Scenarios are sourced from real DISARM-tagged retellings Retelnist observed targeting your population in the last 90 days, anonymized and ethically reviewed.
Why no self-serve demo?
Retelnist's work has operational sensitivity. We protect both our methodology and the operational privacy of current pilot partners. Every demo request is verified against organizational domain or existing referral. The 45-minute discovery call is with our methodology lead, not sales.
What DISARM version does Retelnist use?
DISARM Red Framework v2, the taxonomy adopted by EEAS, NATO StratCom CoE, and the FIMI ISAC. Tagging rules are published and auditable per-tag. LLM-assisted classification carries explicit confidence scores.
Who built Retelnist?
The methodology is co-owned by Glib Buriak, PhD, Ukrainian professor of economics and cognitive security researcher with multi-decade work on information operations doctrine. The platform is built by Andrii Zupko, founder of Talan.Tech, running parallel ventures in counter-UAS defense and behavioral simulation.
No self-serve demo. Here's why.
Request a verified briefing
Retelnist's work has operational sensitivity. We protect both our own methodology and the operational privacy of current pilot partners. Every demo request is verified.
- 01Submit organizational email and role
- 02Retelnist verifies via organizational domain or referral
- 0345-minute discovery call with our methodology lead — a working conversation about your environment
- 04If there's mutual fit: secured access to a live environment with pre-loaded Ukraine and Iran datasets
- 05Technical walkthrough and Q&A with your analyst team
For procurement, partnership, or methodology inquiries. PGP key available on request.
Pilot engagement
3 months
Structured pilot · one deployment
Govt & policy
On request
Annual subscription · analyst seats
NGO / Academic
Discounted
Up to 60% for verified non-commercial
Custom scenarios
Per-scope
Tailored training scenario development