01
Agreement and scope
Bilateral NDA and proposal with scope, rules of engagement and windows defined in writing. Nothing starts without authorization.
← All services// Services · Intelligence
OSINT and Intelligence
Collection and analysis of open source information to map the attack surface, track threat actors and protect your digital exposure.
// What it is
What it is about
OSINT (Open Source Intelligence) is the collection and analysis of public information, such as websites, social media and records, to map risks, targets and threat actors.
It is the same reconnaissance work an attacker does before acting. We do it first, so you know what is exposed and can reduce that exposure.
// When to hire
When it makes sense
- To map what an attacker would find about your company before attacking.
- To investigate fake profiles, fraud or threats against the brand and its people.
- As a reconnaissance step before a pentest or a red team operation.
// How we do it
From first contact to delivery
A predictable flow, under NDA, with the client informed at every step.
02
Collection
Gathering in open sources on the targets defined in the scope.
03
Analysis
Cross-referencing of the information to identify exposures, attack vectors and the actors involved.
04
Reporting
Findings prioritized by risk, with recommendations to reduce exposure.
// Deliverables
What you get
- Map of the attack surface and of the digital exposure.
- Intelligence report with sources and evidence.
- Recommendations to reduce exposure.
Every engagement starts with a bilateral NDA. We do not disclose client names, vulnerabilities or incidents without written authorization, and sensitive communication uses encrypted channels (Signal and PGP).
// Related services
You may also like
Dark Web Monitoring
We continuously check whether data of your company or your social accounts is exposed on the dark web: credentials, documents and sensitive information.
See the servicePentest and Intrusion Testing
Our team runs real intrusion tests on networks, applications and infrastructure to identify and exploit vulnerabilities before the adversary does.
See the serviceSocial Media Protection
Full protection of accounts on Instagram, LinkedIn, Facebook and other platforms against cloning, takeover, phishing and profile hijacking.
See the service