ObscureIQ | Briefings
OBSCUREIQ HARD TO FIND · HARD TO HURT N MMXXII
The Library

What we found. What it meant.

The brief is what an intelligence function is for. Briefings is where ours are held: the public library, the reference work underneath it, and, behind a credential, the material written for one client in particular.

Command Brief · CB-141Analyst reviewed
Subject
Device telemetry in a consumer platform
Bottom line
Assessed as a material change to location exposure
Confidence
High, two independent sources
Affects
Clients with household devices in scope
Action
Named in the brief, not implied
Fig. 1  Brief header, illustrative. Every brief states its bottom line, its sources, and its confidence before it states anything else.
ObscureIQ · BriefingsMMXXVI · Ref. BR-02
Access

Most of this opens over time.

Research is written for a client first. From there it moves down the scale on a schedule the system enforces rather than a promise we remember to keep. A few briefs publish straight to the public. A few stay client-only permanently, because the subject does not cool.

Client

Written for a client. Some material stays here permanently.

→
Subscriber

Paid subscription to the library.

→
Registered

An email address is enough.

→
Public

Open, no credential.

→
Every item in the library carries its current rung. The Command Brief Explorer lists the corpus whether or not you can open it, because you should be able to see the kind of work we produce before you decide whether to pay for it. A locked brief still states its subject, its date, and its bottom line in one sentence.
The Library

Four bodies of work, four different jobs.

These are not four formats of the same thing. Each one answers a different question, and knowing which question you have is the fastest way in.

Section 01Get an answer

Command Briefs

A specific question, investigated and answered.

152Briefs, October 2026
5Field guides

A growing body of intelligence on breaches, surveillance, targeting methods, emerging technology, legal rulings, and threats to clients. Explore the corpus by topic, keyword, entity, or brief number. Clients can also commission a brief on the question in front of them, which creates new research rather than unlocking existing work.

ClientSubscriberRegisteredPublic
Section 02Decide what to do

PHALANX

The defensive playbook. What to implement, and what not to.

230Control cards
27Tactics
6Attack stages
392Brief citations

A practical framework for reducing exposure, disrupting targeting, and preparing for what gets through. Every control is filed by threat, exposure pathway, protection posture, difficulty, persistence, and stage of attack, and tagged to the variable of the Index it moves. Twenty of them are marked not advised, which is the part most playbooks leave out.

PHALANX holds no analysis of its own. It indexes it: each control cites the briefs, guides, and evidence behind it, and says whether each source is context, implementation, evidence, or a warning.

ClientPublic, partial
The guides · written before the playbook, still in use Privacy guides · the practical how-to library →
Section 03Understand a system

Research Hubs

Start with the larger picture, then go as deep as you want.

Topic hubs explain a complex threat in plain language, then connect you to the briefs, evidence, and datasets underneath. The main hub is open to anyone. The deeper spokes are where the research layer sits: CODEX mapping of the data-supply ecosystem, along with structured work on privacy law, litigation, surveillance, and the intelligence trade.

Public hubDeeper spokes
Section 04Follow what is moving

Current Analysis

What is moving right now, tracked and scored.

The breach record is the live half. Roughly 950 breaches whose data has been observed in circulation rather than merely disclosed, each scored on the Breach Risk Index, each opening into what was exposed and what the combination enables. It changes as the evidence changes, which is the point: a score moves when the circulation does, not when we change our minds.

Vector Correction, our public channel on Substack, is the written half. It tests claims moving through the news, social media, and the privacy industry, separating the stated premise from what the evidence actually supports. Other series run alongside it.

Registered readers receive selected analysis and briefs as they open. Paid subscribers receive broader access to the Command Brief library and subscriber editions.

Tactical Privacy Wire content is being folded into the brief corpus, where it is searchable alongside everything else and moves down the access scale on the same schedule. The name may return for a monthly edition.

PublicRegisteredSubscriber
The breach record · updated as datasets surface Circulating breaches · observed in circulation, and scored → The Breach Risk Index · how a breach is scored → The archive · what we wrote before the brief format Privacy posts · the blog, kept →
PHALANX sits second on purpose. A playbook is only worth opening if you already believe the intelligence under it is real, which is what the first section is for.
Why we publish

The library is not content marketing. It is the same analysis clients buy privately, run on questions of general interest and released under the same standards. One hundred and fifty-two briefs as of October 2026. A prospect should not be able to tell where the research ends and the client work begins, because in an intelligence firm there is no seam.

Standard

How a brief is written, every time.

The same five standards govern a public brief on a breach and a private brief on your household. That is the only reason the public library is worth reading.

Fig. 2  How a brief is written, every time
Standard 01

Bottom line first

The assessment opens the document. A reader who stops after the first paragraph still has the answer.

Standard 02

Figures attributed

Every number carries its source. Where we could not source it, we say so rather than round it into the text.

Standard 03

Confidence stated

High confidence, assessed credible, or unconfirmed and monitoring. The reader is told how much weight the judgment can carry.

Standard 04

Scope bounded

What the brief covers, what it deliberately does not, and what would change the assessment.

Standard 05

Numbered and retained

Every brief carries a document number and stays in the library, including the ones later revised. Revisions are noted, not quietly replaced.

Contents

One room, three levels of access.

The public work and the client work are produced by the same analysts to the same standard. What separates them is who the question belonged to.

Level 01 · Open

The public library

No credential. Published because the work stands as evidence of judgment.

  • Command Briefs, released set
  • Content hubs
  • Research data set summaries
  • Tactical Privacy Wire, free edition
Level 02 · Credentialed

Your room

For current clients. Your matter, held in the same format as the library.

  • Your Exposure Discovery audit and its refreshes
  • Alert history and monthly reporting
  • Full vendor atlases and CODEX extracts
  • Investigation reports and exhibits
Level 03 · Commissioned

Principal Advisory

A brief written on the question in front of one client rather than the question in front of the market.

  • Commissioned Command Briefs
  • Standing distribution
  • Counsel-directed delivery
  • Subscription edition, under consideration

Access is granted to named individuals, not to organizations. Credentials are issued when work begins and revoked when it ends, unless the client asks otherwise.

Sign in

Current clients, and counsel acting for them, receive credentials at intake.

Email
Access code

Interface in development. Until it opens, briefs reach clients through their analyst.

Request access

Not yet a client?

The open library needs no credential and will be readable by anyone. The client room and the advisory stream are issued to named individuals at current clients, through counsel where that structure applies.

If you want the brief stream, the shortest path is the same call every client starts with.

Counsel
Introductions on request
Handling
Encrypted intake. Off the record by default.