what we do
OSINT investigations into online misconduct
We take fragmented reports and turn them into structured, sourced case files. Every conclusion traces back to an artifact that anyone reviewing the file can inspect themselves.
case types
What we investigate
Harassment & Targeted Abuse
Coordinated pile-ons, sustained harassment campaigns, ban evasion and alt-account networks used to continue targeting a person or community.
Doxxing & Privacy Exposure
Tracing the origin and spread of leaked personal information, identifying redistribution points, and documenting exposure scope for takedown requests.
Impersonation & Deception
Fake staff accounts, spoofed brands, catfishing personas, and fabricated credentials used to gain trust or access.
Sexual Misconduct Indicators
Documentation of predatory behavior patterns in chat logs and public interactions. Matters involving minors are referred to law enforcement.
Community & Staff Vetting
Background review of public online history for organizations deciding on moderators, staff, partners, or contributors.
Incident Reconstruction
Rebuilding a disputed timeline from screenshots, logs, archives, and public posts to establish what actually happened and when.
methodology
How an investigation runs
Intake & scoping
We record the reported conduct, the platforms involved, and any artifacts you already hold. We tell you up front whether the matter is something we can meaningfully investigate.
Preservation
Evidence is captured and stored before it can be deleted. Screenshots, links, and transcripts are timestamped and attached to the case number.
Open-source collection
Publicly available information only: profiles, posts, archives, public registries, cached pages, and platform metadata that anyone can access.
Attribution & correlation
Handles, writing patterns, timing, avatars, and reuse of identifiers are compared across platforms and against prior cases in our registry.
Analysis
Dialogue and evidence are reviewed for key factors, motive indicators, escalation, and coordination. Findings are graded by confidence.
Findings package
A written dossier is delivered to the affected party or the organization responsible for moderation, with recommended actions and stated limits.
what you receive
The findings package
- Unique case number for reference and follow-up
- Subject dossiers with verified handles, aliases and linked accounts
- Chronological timeline of documented incidents
- Preserved evidence with capture timestamps and sources
- Behavioral assessment: patterns, motives, escalation risk
- Confidence ratings and an explicit list of what could not be verified
- Recommended moderation or safety actions for the receiving party
hard limits
What we will not do
- We do not access private accounts, devices, or data
- We do not purchase or use breached datasets
- We do not publish home addresses, workplaces, or family details
- We do not organize or endorse retaliation against subjects
- We do not investigate minors as subjects — those matters go to authorities
- We are not law enforcement and issue no legal determinations