Skip to content
Osint Daily
Osint Daily cover for Ardence, under Investigative data & public records, published 16 Oct 2026. The right side is a monogram because no capture is filed. All-source TRM platform. No public dollar.

01 · Product name

Ardence

All-source TRM platform. No public dollar price.

Published by TRM Labs.

In short

Ardence is TRM Labs' investigation platform, introduced in a blog post published 13 Oct 2026. The post says a case can start from a victim report, a wallet, a domain, or a question. Ardence Tradecraft proposes a research plan. The Ardence Data Network is reached through one TRM agreement, and teams draw down credits. The post does not print a dollar price. Access is a demo request. A claim in the workspace is a lead the investigator still has to corroborate.

Product pricing strategy

02

Premium

Ardence does not publish a rate card on the 13 Oct 2026 introduction. The commercial terms in that post are a single TRM agreement and credits drawn down as data is used. Sources vary by customer and jurisdiction, and the post says supplemental provider terms may apply. There is no seat price, no credit unit price, and no self-serve checkout on the page. Ask TRM for the quote and write down which sources the agreement actually includes. Do not paste a CLEAR or Accurint figure onto Ardence, and do not invent a credit price from the word credits. The page is a product announcement, not a public-records statute notice. It does not print an FCRA sentence.

Utility and features

03

The TRM Labs post “Introducing Ardence: The OS for fighting crime” is the public description opened for this listing. It says Ardence Tradecraft brings methods from TRM's investigators into the first decision of where to look. Ardence proposes what to establish, which sources to consult, and what needs corroboration. Investigators can review the plan and add their own skills. The Ardence Data Network is described as TRM blockchain intelligence plus a long list of other providers, including Censys, Shodan, Flashpoint, OpenCorporates, OpenSanctions, and many more named in the post. This listing does not treat that list as a promise that every customer receives every source.

  • A plan, then sources. Tradecraft proposes what to establish and which sources to consult. The investigator reviews that plan.
  • Credits, not a public price. One TRM agreement and a credit drawdown. The 13 Oct 2026 post prints no dollar amount.
  • Observation versus hypothesis. Claims cards are meant to show the evidence and the assumptions. A hypothesis still needs corroboration.

The post says teams reach participating sources through a single TRM agreement and draw down credits. Organizations choose which sources their teams can use. Availability varies by customer and jurisdiction, and supplemental provider terms may apply. Graph Intelligence is described as a way to ask questions of a large graph and inspect the source behind a connection. Libraries are prior work the team uploads. Automations schedule recurring research. Claims attach evidence cards to statements, and the post separates an observation about a record from a hypothesis that still needs investigation. No dollar amount is printed. The call to action is a demo request.

  1. 1

    Read the 13 Oct 2026 introduction and list the sources your agreement will actually include. The blog list is not your contract.

  2. 2

    Ask TRM which credit unit the quote uses. The post does not print a price.

  3. 3

    When a Claims card marks a statement as a hypothesis, leave it as a hypothesis until the source record is opened.

  4. 4

    Treat a takedown or Beacon alert as a request someone else still has to accept. The post says the recipient decides.

Caveats

04

A research plan from Ardence Tradecraft is a proposal. The post says investigators review it. It is not a finding. Claims are built to show supporting evidence, conflicting evidence, and the assumptions behind a statement. The post's own example separates an observation about a record from a hypothesis. Brief the hypothesis as unfinished until someone opens the source record.

The provider list is long and the post says availability varies. Do not tell a reader that Shodan or Flashpoint is inside their Ardence login because the blog names those brands. The disruption section says investigators decide what to submit within their authority and that receiving organizations decide whether to act. Beacon Network flagging of crypto addresses is described the same way: platforms review alerts, and any freeze follows the investigator's authority and the recipient's procedures. This listing does not turn that section into steps. The workspace was not open without a demo, so the buttons are not described here.

Potential use cases

06

  • A briefing treats the Ardence blog's provider list as the contents of the license. The 13 Oct 2026 post names many sources, including Censys, Shodan, and Flashpoint, and then says availability varies by customer and jurisdiction. Ask TRM which sources the agreement includes. Supplemental provider terms may apply. A name in the blog is not a connector you can assume is turned on. Write the quote's source list next to the date of the quote.
  • Tradecraft returns a research plan from a victim report, a wallet, a domain, or a question. The post says the plan covers what to establish, which sources to consult, and what needs corroboration, and that investigators review it. File the plan as a plan. When a Claims card separates an observation about a record from a hypothesis, keep the hypothesis out of the findings until the source record is opened. The card is the vendor's explanation, not a conclusion.
  • A manager asks what Ardence costs beside CLEAR. The introduction does not print a dollar amount. It describes one TRM agreement and credits drawn down as data is used. There is no public seat price and no FCRA sentence on that page. Request the demo quote and record the credit unit the vendor names. Do not borrow another investigative product's fee, and do not describe Ardence as a skip-trace.

Hard cases

The case where the first result is easy to over-read.

A disruption note becomes the action

The post says a finding can start a takedown request and that Beacon Network can flag a crypto address. It also says investigators decide what to submit within their authority, receiving organizations decide whether to act, and platforms review alerts. Stop the write-up at that allocation of decisions. Do not add steps, target types, or a freeze procedure. This listing did not open the workspace, so it cannot describe the button that sends the request.

Practitioners using it

Posts on X from people describing a concrete use. The quote is the post. Likes and reposts are the counts saved with it, not a live total. A label marks a creator, a maintainer, a data partner, or an investor.

Data partner

Data partner

Investor

Questions

How much does Ardence cost?

The 13 Oct 2026 post does not print a dollar price. It describes one TRM agreement and credits, and it asks readers to request a demo.

Is Ardence a U.S. public-records skip-trace?

No. The post describes an all-source investigation platform with blockchain intelligence and other providers. It does not print an FCRA notice.

Citations

07

Titled sources. These public pages are what the quotes on this listing come from.

When this listing changes, the letter says so.

Developments in OSINT. Confirm from your inbox before the first issue.

Only for this letter. Privacy

Related tools