ObscureIQ | The Firm
The Firm

An intelligence function that started with erasure.

ObscureIQ is a protective intelligence company. We protect high-risk people and organizations from digital threats that can become real-world harm: collection, analysis and reduction run against the exposure to harm pipeline on behalf of a named human being.

ObscureIQ · The FirmMMXXVI · Ref. FR-03
Origin

Two disciplines, held together on purpose.

Most privacy firms come out of cybersecurity. Most intelligence work happens behind closed doors. ObscureIQ began with the conviction that the two belong in the same room.

Investigators understand what makes a person findable. Privacy practitioners understand how to make them less so. Kept together, each discipline corrects the other, and the work is more honest for it.

The firm grew out of work the founders were already doing: Colby on threat actor identification and open source investigation, Jeff on the structure of the data broker economy. The first clients were referrals from people who knew that work and needed both halves of it. That has remained the pattern: the firm does not market, it is found.

What changed is not the capability but the name for it. Every service we have sold, from footprint wipes to narrative analysis, is one capability expressed at a different point in the same pipeline. The brand now names the capability rather than the products built on it.

Firm recordRef. FR-03
CategoryProtective intelligence, for the client
PracticesObscurity · ThreatWatch · Groundtruth
MetricThreat Surface Index. Methodology stated with every score.
Reference indexCODEX, 8,600+ data collecting entities
Published100+ Command Briefs and counting
LicensingAttribution performed under private investigator license
ChannelReferral. The firm does not advertise.
Fig. 1  The firm at a glance. Competitors sell software with analysts attached.
We do not promise erasure. We do not sell dashboards. We tell clients what we see, while it still matters.
Principals

The people doing the work.

Colby Scullion, redacted portraitPortrait · C. Scullion
Founder · CEO

Colby Scullion

Intelligence · OSINT

Colby leads the intelligence side of the firm. His work focuses on identifying threat actors, mapping digital footprints, and producing investigative reports clients and counsel can act on.

He runs BlackBear Recon, the firm's digital reconnaissance practice. His open source work has been published in industry case studies, including verification work in the aftermath of the New Year's Day Cybertruck incident. Background in intelligent automation and OSINT tradecraft. Based in the Pittsburgh region.

Jeff Jockisch, redacted portraitPortrait · J. Jockisch
Co-founder · Managing Partner

Jeff Jockisch

Privacy · Data broker research

Jeff leads the privacy and research side of the firm. He is one of the recognized experts on the commercial surveillance economy and the data broker industry that powers it.

He built CODEX, the firm's index of the entities collecting consumer data. He has provided expert testimony to legislative bodies, is a LinkedIn Top Voice in privacy, and writes the Tactical Privacy Wire on data exposure and decay. Background in data science, knowledge graphs, and the marketing and ad technology industries he later turned his attention against.

The team

Named analysts

Depth, not headcount

Every client is assigned a named analyst, and the analyst who scopes the work is the analyst who executes it. Senior practitioners stay close to every case.

Internal infrastructure, indexes, pipelines, and monitoring stacks handle what does not require human judgment, so analysts spend their time on what does. The model scales without becoming a platform.

Analyst names are shared with clients at intake, not published. The work the firm does, identifying adversaries and tracking targeting campaigns, makes that the right approach.

Why We Publish

The library is the proof, not the marketing.

The Command Briefs, vendor atlases, misidentification corpus, and narrative research function the way a think tank's publications do: public evidence of the analytic judgment clients buy privately.

Fig. 2  Public research mapped to private practice
Demonstrates

Reduce

Vendor atlases and the CODEX index: where the data actually sits, and who holds it.

Demonstrates

Watch

Breach and exposure reporting: what surfaced, when, and what it enabled.

Demonstrates

Groundtruth

Misidentification corpus and narrative research: how belief forms and hardens.

A prospect should not be able to tell where the research ends and the client work begins. In an intelligence firm there is no seam.
You do not just monitor. You interpret.
Client · Under retainer
Conduct

How we work. Who we take.

01

By referral, not by marketing

Almost every client comes to us through an introduction from someone who has worked with us before: counsel, security professionals, family offices, prior clients.

02

Every client starts with a confidential call

Before any scope or commitment, a private call to understand the situation, the exposure, and whether we are the right firm for the matter. Confidential by default, and privileged where counsel directs the work. You control what happens next.

03

Some matters are declined

Not every matter is a fit. We turn down work where the goals are unrealistic, where it would conflict with our values, or where another firm is better suited. That decision is made before scope or pricing.

04

Working through counsel is available

Work performed under counsel direction may be covered by attorney client privilege, depending on how the engagement is structured. We can introduce qualified outside counsel where none is in place. The structure suits matters warranting protections beyond an NDA.

05

Confidentiality is the default, not the upgrade

No resale of work product, and no case study without explicit consent. Encrypted channels. Internal systems reviewed and hardened on an ongoing basis.

06

Infrastructure underneath, practitioners in front

CODEX, internal pipelines, and monitoring stacks carry the parts of the work that do not require judgment. Analysts carry the parts that do. Faster turnarounds, more consistent output, more time on the work that matters.

07

Claims are stated the way findings are

Attributed, with confidence stated and scope noted. If something is unconfirmed, we say unconfirmed. Precision is more useful to a client than emphasis.

Clients

People whose exposure carries weight.

Clients fall into four broad profiles. Names are never disclosed. Sectors and roles are described only in the most general terms.

Profile 01

High net worth

Executives, investors, board members, family offices, and founders whose visibility is tied to wealth, ownership, or institutional position.

Profile 02

High profile

Public figures, journalists, judges, and elected officials whose name and likeness are matters of public discussion.

Profile 03

High touch

Attorneys, physicians, educators, public servants, and law enforcement professionals in routine contact with hostile or unstable individuals.

Profile 04

High risk

Federal agents, military personnel, activists, survivors, and whistleblowers operating under direct or persistent threat.

In their words · Speakers redacted at their request

I have gotten more than one threatening call because my work number is in every email… I have ObscureIQ scrub my data.
Client · Intelligence analyst
They tracked the actors doxxing and harassing my team. Two of three were identified with certainty, and the reports were delivered in a form law enforcement could act on.
Client · C-suite executive · Technology sector
I thought I was careful with my digital profile. I had used deletion services before. ObscureIQ was the first team to show me what my exposure still enabled.
Client · Founder · Private holdings
Next Step

The first step is a call.

A confidential call with us establishes your baseline exposure, your risk profile, and whether we are the right fit.

The conversation is private by default and you control what happens next. Counsel mediated introductions are welcome. Introductions from prior clients and trusted referrers receive priority response.

Counsel
Introductions on request
Handling
Encrypted intake. Off the record by default.