root@osintfirm-workstation: ~/public/index

OSINT analyst for hire.

We find, verify and brief the intelligence that's already public — so you can make decisions about people, companies and threats with facts instead of guesswork. Freelance, confidential, and built on lawful open-source methods only.

2 yrsOSINT & risk investigation
33engagements briefed
24 hrtypical first response
100%passive, lawful collection
$whoami

About

We're a private sector open-source intelligence agency working with law firms, insurers, investigators, journalists and businesses who need clear answers built entirely from publicly available information — never hacking, social engineering, or anything requiring unauthorized access.

Every engagement starts with a scoping call to confirm what's legal, relevant and proportionate before any collection begins. You get a plain-language report, not a wall of raw links.

Corporate due diligence Fraud investigation Threat intelligence Missing-person support Brand & exec protection
Based in
Remote — CA/US hours covered
Engagement
Freelance, project or retainer
Turnaround
48–72 hrs standard · rush available
Tooling
Shodan, Maltego, SpiderFoot, custom scrapers
Comms
email, secure PGP email, client portal
Legal basis
Passive OSINT only — no unauthorized access
$ls -la /services

Services

svc_01.log

Digital footprint audits

A full map of what's publicly discoverable about you or your organization — accounts, leaked credentials, metadata and exposed infrastructure — with a prioritized fix list.

svc_02.log

Threat & risk intelligence

Monitoring of forums, marketplaces, and social channels for chatter that targets your brand, executives or infrastructure, with early-warning alerts.

svc_03.log

Due diligence & background checks

Pre-investment, pre-hire or pre-partnership research into companies and individuals: corporate records, litigation history, sanctions and reputational signals.

svc_04.log

Fraud & scam investigation

Tracing scam operations, fake storefronts and impersonation accounts back to the infrastructure and identities behind them, packaged for law enforcement or platforms.

svc_05.log

Social media & persona investigations

Linking sock-puppet and pseudonymous accounts to real identities using cross-platform behavioral and metadata analysis — strictly from public data.

svc_06.log

Corporate & competitive intelligence

Structured research into competitors, markets and supply chains built entirely from public filings, hiring signals, and open data — no gray-area collection.

$cat methodology.log

Method

01

Scope & legal review

We define exactly what's being investigated and confirm it's lawful, ethical and proportionate before anything else happens.

02

Collection

A structured sweep across public records, search infrastructure, social platforms and technical sources — logged for a defensible chain of custody.

03

Verification

Every finding is cross-referenced against at least one independent source before it's treated as fact. Unverifiable leads are flagged as such, not hidden.

04

Reporting & briefing

A plain-language report with sourcing footnotes, plus a live walkthrough call so findings translate directly into a decision.

$tail -f case_log.txt

Case log

CASE #84471 — Fraud investigation — Retail sector

Fake storefront network traced to a single operator

A client was fielding chargebacks from a wave of look-alike storefronts. Domain registration patterns, shared analytics IDs and payment-page fingerprints linked 14 sites to one operator, who was reported to the relevant payment processors and shut down within 9 days.

CASE #115108 — Due diligence — Private equity

Undisclosed litigation surfaced pre-close

A pre-acquisition sweep of a target company's leadership surfaced an active lawsuit and a prior bankruptcy filing that had not appeared in standard KYC checks, filed under a legal predecessor entity in a neighboring jurisdiction.

CASE #216203 — Executive protection — Technology sector

Impersonation account identified before it escalated

Monitoring flagged an account impersonating a client's CFO soliciting wire transfers from vendors. Infrastructure analysis linked it to a broader impersonation ring, and the account was reported and removed inside 36 hours.

Due to confidentiality obligations and non-disclosure agreements (NDAs), the following case summaries are illustrative examples of the types of engagements and services offered. They are provided for informational purposes only and do not represent actual client engagements or disclose confidential client information.

$./contact.sh --secure

Get in touch

Email
contact@osintfirm.com
Signal
available on request
Response
within 3 business day
PGP fingerprint: ACB6 1446 F459 47F1 AB1F FF42 865D 9C74 99FC 6F2A