Contributing to the sociological literature on protest policing at international summits, this article analyses security intelligence practices related to the 2010 G20 meetings in Toronto, Canada. Drawing from the results of access to information requests with policing and intelligence agencies at municipal, provincial and federal levels, the authors demonstrate the central role of intelligence and threat assessments in international summit policing. Focusing on intelligence practices and police training targeting the ‘anarchist threat’, they show how intelligence agencies conflated anarchism with criminality and targeted this purported menace for strategic incapacitation through a process referred to here as threat amplification. After analysing intelligence and police training for the Toronto G20, the authors discuss the implications of their findings for the sociology of protest policing. Comparing the ideas of strategic incapacitation and ‘intelligent control’, they suggest that the enfolding of security intelligence into international summit policing has intensified the practice of ‘making up’ threat categories and strategically targeting groups that fall outside the institutionalized spectrum of negotiation and accommodation.