ObscureIQ | ThreatWatch · Continuous Protective Monitoring
ThreatWatch · Continuous threat intelligence

ThreatWatch makes
you hard to hurt.

Continuous threat intelligence that identifies hostile signals early. Our analysts find what automation misses, filter out the noise, and bring you the signals that matter. We measure success by how early you know.

ObscureIQ · ThreatWatchMMXXVI · Ref. TW-01
Fig · TW
The category

Continuous threat intelligence

Standing collection and analysis of hostile signals around a named person or organization: what is being said, by whom, and whether attention is turning into intent. The term a security team or a CISO will already recognize.

The program

ThreatWatch

Our continuous threat intelligence program monitors information about you, your aliases, and your household. Our analysts identify and assess potential threats, filter out irrelevant noise, and deliver meaningful findings through tailored Command Briefs rather than automated alerts.

Coverage

What it watches.

Collection instrumented for you, your aliases, your household, and the organization around you, not run from a template.

01

Social and alternative platforms

Accounts, mentions, and the communities where hostility toward you would form first.

02

Forums, paste sites, anonymous boards

The places identifying details surface before they move anywhere else.

03

Deep and dark web

Breach corpora and stealer data, read for your exposure rather than scanned for volume.

04

Names, aliases, addresses, phones

Exposure tracking on every identifier that resolves to you or your household.

05

Narrative and impersonation

The story before it carries your name: the grievance forming, the framing being tested, the fake account created.

06

Organizational footprint

The company, the board, the staff: the surfaces an adversary routes through to reach you.

What Makes It Different

Built to be read, not to alert.

01

An analyst clears every finding first.

Monitoring products scale on automation, which is why they send alerts. Nothing reaches you that an analyst has not read. What arrives states the finding, the confidence, and the recommended response.

02

Collection is instrumented for you.

Built against the specific ground your exposure occupies: your filings, your properties, your household, the places your information actually circulates. An off-the-shelf platform returns the same results for a federal judge and a founder.

03

We watch threat formation, not only triggers.

Keyword triggers catch what has already been said about you. Watching formation catches escalation while it is still talk, before it turns to logistics.

04

Investigation is included, not upsold.

Dedicated investigation hours are included in ThreatWatch. When a potential threat emerges, the same team investigates it under a private investigator license. No separate contract or additional approval is needed to get answers.

Components

The watch and its instruments.

ThreatWatch core

Continuous analyst-read monitoring

The standing coverage across everything above, delivered as monthly structured reporting plus immediate escalation when something warrants it.

Adversary Watch

Standing watch on identified actors

Once an investigation names them, they stay under observation, and the record is kept in a form counsel and law enforcement can use.

Event Monitoring

Raised posture around a moment

A public appearance, a filing, a launch, a verdict. Coverage concentrates around the date and stands down after.

Before, during, after →

Add-on Programs

Two programs now in beta.

The subscription already takes a first pass at narrative and at the markets that name you. These are that work done properly, bought on top of the watch rather than inside it.

NarrativeWatch · Beta

How a story forms, and where it goes next

The base watch tells you a narrative is forming near your name. NarrativeWatch follows how it formed, how it is evolving, and where it is likely to go. It also reads the narratives moving through the spaces you occupy, your sector, your institution, your issue, that have not reached you yet but may. At that point the work stops being threat intelligence and starts being advice about a position.

ProbabilityWatch · Beta

Who is making the claim, and who is betting on it

Our systems already scan prediction and probability markets for claims and positions that reference you. What that scan does not do is read a trend across them, or establish who is writing the questions and putting money behind them. ProbabilityWatch is the deeper service: the pattern over time, and the people underneath it.

The Smaller Watches

Not every situation needs the full watch.

Two automated services, separate from ThreatWatch and deliberately more limited: no analysts in the loop, which is what keeps them small.

DoxxAlert · Standalone

Address and private line

A narrow, automated watch on the two exposures that most often precede a physical approach: your home address and your private phone number appearing where they were not before. Continuous scans, no intervention, often the first watch a household stands up.

Tripwires · Standalone

One item per wire

Each tripwire is programmed for exactly one thing: a phrase, a crypto address, a card number, anything that would mean trouble if it surfaced. Automated scans across our deep and dark web archives, where social and bad-actor chatter happens.

When a smaller watch trips on something that warrants judgment, ThreatWatch and the analysts behind it are one call away. How the method fits together.

The Deliverable

What reaches you is a judgment.

Monthly structured reporting, and between reports, alerts only when an analyst decides you need one.

Every finding states what changed, how confident we are, and what deserves consideration. If the deliverable were a feed you had to monitor yourself, you would have bought the wrong thing.

Specimen · Analyst alertAnalyst reviewed
ClassificationEscalation, assessed credible
FindingAccount activity shifted from commentary to logistics
CorroborationCoordination confirmed across two platforms
Lead timeClient notified with time to act
Fig. 1  Format of an analyst alert. Illustrative, not a client matter. Confidence is stated, not implied.
How It Starts

We establish what's normal,
then watch for what changes.

Fig. 2  The first sixty days and beyond
Phase 01 · Build the watch

Know what to look for

We identify your relevant names, aliases, household connections, properties, public records, and the sources where your information circulates. If you've completed an Exposure Discovery audit, we start with that map.

Phase 02 · Establish a baseline

Understand what's normal

Our analysts establish patterns of routine attention, exposure, and hostility. This baseline helps us distinguish ordinary activity from changes that may signal a developing threat.

Phase 03 · Continuous monitoring

Recognize what matters

We continuously monitor, assess findings, and deliver structured monthly intelligence reports. Significant developments are escalated immediately. Coverage continues for as long as you need it.

The Month

What a month looks like.

The monthly report is a Command Brief, not a dashboard export. Five questions, answered in order, every month.

Between reports, silence means the analysts read everything and none of it warranted your attention. That silence is a deliverable too, and it is the one a feed can never give you.

Specimen · Monthly reportCommand Brief format
Exposure
What changed on your surface: new records, resurfaced listings, removals confirmed
Hostility
The read on attention pointed at you, and whether it moved
Narrative
Stories forming near your name, and their specificity
Actions
Requests and referrals made on your behalf, and what they returned
Recommended
What deserves consideration next, with confidence stated
Fig. 3  Report structure. Bottom line first, figures attributed, confidence stated.
Obscurity · ThreatWatch

Exposure reduction and threat monitoring, working together.

Obscurity reduces what others can find about you. ThreatWatch identifies emerging threats and provides early warning. Together, they make you harder to find and harder to hurt. One dedicated analyst coordinates both, with response capacity already in place. For clients facing sustained pressure, this is often the right approach.

How our protection programs work →

Next Step

Know when attention turns toward you.

A confidential call establishes what should be watched and at what posture.

Some clients arrive with a known threat, others with a feeling they cannot substantiate. Both are reasons to call. We build the watch around your circumstances, not a generic list of threats.

Counsel
Introductions on request
Handling
Encrypted intake. Off the record by default.