We resolve unknowns. That means operator attribution from a handle to a real name using GitHub commit metadata, gmail enumeration, and public LLC filings. It means mapping breach exposure across government and corporate infrastructure. It means tracing an adversarial product back to a person, then producing a documented chain of custody a lawyer can use. We handle litigation OSINT, deanonymization, due diligence, cold case research, and country-scale intelligence packages. Every deliverable is source-cited. Every source is publicly collectible. The methodology is part of the product.
Coworker location, witness background, counterparty due diligence, asset tracing. Asbestos case research (ship rosters, cruise books, company histories), probate / estate support, IP litigation fact-finding.
Anonymous handle to real identity. GitHub commit metadata, noreply email resolution, GPG key recovery, timezone correlation across 17K+ repos, cross-platform username enumeration, Gravatar pipeline (116K hashes collected, 30K emails cracked).
Executive, counterparty, acquisition-target, or vendor background packages. Public filings, corporate structure, litigation history, regulatory enforcement, reputation signal, infrastructure footprint. Written dossier with annotated sources.
Archival pulls, obituary and genealogy correlation, family lead enrichment, name-uniqueness ranking (SSA cohort + multi-Census surname averaging). Documented methodology behind 1,900 LA Probation name dedup and Kirch V5 family-lead enrichment.
Jurisdictional profile for market entry, vendor evaluation, or geopolitical risk. Infrastructure, credential exposure ecosystem, regulatory enforcement patterns, local vendor ratings. Built on Carmen Sandiego corpus (260 countries, 5.5M domains).
EXIF analysis, file metadata extraction, PDF forensics, reverse image search (CLIP), authorship correlation. Contested-document and synthetic-media analysis for legal, journalism, and evidentiary workflows.
Every investigation is bounded by what's legally collectible. We do not pretext, compromise accounts, purchase breach data, or engage adversarial platforms. What we deliver stands up in a deposition because the source trail is part of the deliverable.
Read full details → Brief us on the subject →