03 Intelligence & research
Digital Footprint & OSINT Investigations
Every senior figure has a public attack surface they did not choose and have never seen mapped.
Start a pilotData brokers aggregate it, property records expose it, old social accounts preserve it and conference biographies fill in the rest. Individually each item is trivial. Assembled, they are the raw material for a convincing approach to a finance team or a targeted attack on a home network.
We map what is discoverable about your organisation and named executives, rank it by how exploitable it actually is, and set out what can realistically be removed or reduced. Where a specific question needs answering rather than a general picture, we run it as a bespoke investigation.
01 What you receive
Deliverables.
Every engagement produces a written, sourced deliverable — not a dashboard login you will never open.
- Footprint report
- What is discoverable, where it sits, and how difficult it is to find.
- Exploitability ranking
- Findings ordered by real-world usefulness to an attacker, not by volume.
- Reduction plan
- What can be removed, what can be suppressed, and what realistically cannot.
- Bespoke investigation
- A specific person, entity or event researched and reported on request.
02 Method
How it runs.
- 01
Consent & scope
Executive assessments proceed on documented consent. We agree the subjects and boundaries.
- 02
Collect
Open sources, brokers, records, archives and technical infrastructure.
- 03
Rank
Each finding is assessed for how usefully it could be exploited.
- 04
Advise
Removal, suppression and behavioural change, with realistic expectations for each.
04 Common questions
Can you get information removed?
Some of it. Data broker records, certain search results and old accounts can often be removed or suppressed. Public registers, filings and press coverage generally cannot. We tell you which category each finding falls into rather than promising a clean slate.
Do executives need to consent?
Yes. Assessing a named individual’s footprint requires their documented consent, even when the organisation is commissioning it. In practice this also improves the result, because they can confirm what is genuinely theirs.
What is a bespoke OSINT investigation?
A specific question — is this person who they claim, what is the relationship between these two entities, what happened around this event — researched from open sources and answered in writing, with sourcing.
Tell us what you would want watched. We will scope a pilot on it, in writing, before anything is agreed.