#1 Watch
An analyst learns your business, then monitors the threat groups and campaigns most likely to target it. You get a brief once a month, and a phone call when something can’t wait.
- Monthly threat briefs written for your team
- Ransomware and threat-actor tracking
- Dark web and leaked-credential monitoring
- Alerts when you or a key vendor shows up
- Good fit for
- CISOs and IT leads at 200–2,000 person companies
- How it’s sold
- Monthly retainer
Details and case study →#2 Defend
We find what your company has exposed on the internet: abandoned servers, risky services and newly registered lookalike domains. Then we help get impersonating sites and accounts taken down.
- External attack surface reviews
- Lookalike and phishing domain monitoring
- Impersonation and takedown support
- Good fit for
- Security, marketing and legal teams
- How it’s sold
- Monthly retainer
Details and case study →#3 Expose
Targeted phishing relies on research: who works where, how email addresses are formatted, who recently joined the finance team. We do that research first and show you how a targeted campaign against you would likely work.
- Staff and org-chart research from public sources
- Email format discovery
- Phishing risk rating with practical fixes
- Good fit for
- Companies, red teams and pen test firms
- How it’s sold
- Fixed-price project
Details and case study →#4 Protect
Executives’ home addresses are often easy to find online. We document what a stranger can learn about your leaders and their families, then remove as much of it as possible.
- Personal footprint assessment
- Data-broker removal
- Good fit for
- Corporate security teams and family offices
- How it’s sold
- Project, then optional retainer
Details and case study →#5 Vet
Before you acquire, invest in or sign with a company, find out what it has not disclosed. Its security history and the people behind it, in one report.
- M&A and PE cyber and OSINT diligence
- Vendor risk reviews
- Sanctions and beneficial ownership checks
- Good fit for
- PE and VC firms, corp dev, compliance
- How it’s sold
- Fixed-price project
Details and case study →#6 Compare
Companies publish signals of their plans: new domains, job posts, filings and infrastructure changes. We analyze them to show where competitors are headed, using only public, passive sources.
- Competitor tech stacks and infrastructure
- Early signals of launches and expansion
- Ongoing competitor monitoring
- Market-entry and leadership research
- Good fit for
- Strategy, product marketing, corp dev and PE
- How it’s sold
- Retainer or project
Details and case study →#7 Respond
During a ransomware or extortion incident, we establish who the attackers are, whether they have honored past deals, and whether they took what they claim.
- Ransomware and extortion actor profiles
- Leak verification
- Good fit for
- Breach coaches, IR firms and cyber insurers
- How it’s sold
- Hourly or panel rate
Details and case study →#8 Trace
Open-source evidence, collected and documented the way counsel needs it.
- Asset tracing
- Preserving public statements
- Tracing counterfeit sellers
- Good fit for
- Law firms and brands
- How it’s sold
- Fixed-price project
Details and case study →#9 Travel
Threat and location research before your people travel or your event opens, with optional monitoring while it runs.
- Pre-trip threat and location briefs
- Event monitoring
- Good fit for
- Corporate security and event organizers
- How it’s sold
- Fixed-price project
Details and case study →#10 Share
Threat intelligence for organizations that will never have a CTI team, shared so nobody pays for it alone.
- Shared sector threat reports
- Research for NGOs, newsrooms and public agencies
- Good fit for
- Credit unions, regional healthcare, utilities, NGOs
- How it’s sold
- Subscription, grant or contract
Details and case study →