Services.
Obscurity and ThreatWatch are subscriptions. Groundtruth is available as a one-time investigation or a retainer. All three are held by the same named analyst.
Obscurity DEP
Digital Executive Protection- Finds what can be found about a client, their household and the organizations around them
- Drives it down and keeps it down
- Removal where a holder can be compelled, suppression where it cannot
- Measured by what stays findable afterward, not how many requests were filed
- Exposure Discovery the audit, scored on the Threat Surface Index
- Exposure Reduction removal and suppression, continuous across the year
- Tactical Privacy Training the habits only the client can hold down
- Bought
- Subscription, annual
ThreatWatch
Continuous threat intelligence- Watches the part of the problem that cannot be removed
- Covers hostile activity, impersonation, narrative, breach and stealer data, and changes in exposure
- Every finding is read by an analyst before it reaches the client
- The point is not the most alerts, but surfacing the changes that matter
- ThreatWatch core immediate alerts, reports on a cadence
- Event coverage raised posture around an appearance, a filing, a verdict
- Narrative and market scanning a first read on the stories forming near a client and the markets that name them
- NarrativeWatchBeta how a narrative forms, where it is likely to go, and what is moving in the spaces a client occupies before it reaches them
- Bought
- Subscription, three months minimum
Groundtruth Investigations
Investigations and attribution- Answers the question the other two raise: who is doing this, and what are they capable of
- Attribution under private investigator license
- Confidence stated on every finding
- Findings written in a form counsel can file on
- Runs to resolution rather than on a cadence
- Threat actor attribution who is behind it, under private investigator license
- Circle of Risk vetting the people through whom a client can be reached
- Bought
- One-time or on retainer
Read the transcript and frame timing
- 00:00–00:06
- Your company tests its systems. On purpose. The diagram shows an organization connected to endpoints, cloud services, remote access and third parties.
- 00:06–00:12
- Find the opening before someone else does. The remote-access path is marked for review.
- 00:12–00:19
- But a person has an attack surface, too. The same connections now describe a person and their personal exposure.
- 00:19–00:29
- Addresses. Filings. Household. The connections between them. The personal nodes show identity and filings, location, household, and breach data.
- 00:29–00:37
- Much of it is public. Some already circulates.
- 00:37–00:46
- Not how many records. What they make possible.
- 00:46–00:55
- Find it. Assess it. Act on what can change.
- 00:55–01:01
- Just how valuable is a digital risk audit?
- 01:01–01:11
- We expected 15 minutes. The review took 90.
- 01:11–01:17
- Then the client ordered the same assessment for their circle.
- 01:17–01:23
- A real test produces attention. Not alarm.
- 01:23–01:32
- Hard to find. Hard to hurt.
One connected method.
This is how the work fits together, not a second list of things to buy. Each stage feeds the next, the whole of it is held by one named analyst, and it is powered by CODEX, the Threat Surface Index and analyst judgment.
Discover
Find itDiscovery maps the information available about a client, their family, and the organizations around them. We identify exposed records, relationships, locations, routines, and vulnerabilities, then assess which information creates meaningful risk. The goal is not simply to catalogue what exists online. It is to understand how that information could be assembled and used.
It is the reconnaissance package an adversary would assemble, except we build it first. Every finding is assessed for what it makes possible rather than counted, and the audit says which records can be removed, which can only be suppressed, and which will not move at all, before any work begins.
- Cadence
- Opens, then annual
- Output
- Report and private readout
- Scored on
- Threat Surface Index
- Available
- On its own
Reduce
Reduce itReduction drives the public trail down by pursuing removals across data brokers and other exposed sources. We prioritize the information that creates personal, family, organizational, or physical risk rather than treating every record as equally important. This is not work for corporate executives only: it protects any high-risk person whose work, visibility, wealth, position, cause, or civic role makes them a target.
A statutory right is one instrument among four, and it does not reach everywhere. We take the route the holder answers to. Where nothing compels removal, the exposure is managed instead, with the same goal either way: make what remains less useful. The measure is not requests filed. It is what stays findable afterward, and how fast what returns is caught.
- Cadence
- Continuous, in year
- Instruments
- Four
- Measure
- What remains findable
- Extends to
- Household and circle
We do not rely on privacy law to reduce your exposure. There are often better options, and we use the best tool for the job.
Statutory rights
Deletion and opt-out rights where a jurisdiction provides them, filed and then verified rather than filed and reported.
Direct demand
Holders outside the reach of a statute, approached on the strength of knowing precisely who they are and what they hold.
Legal claims
Where a holding is actionable on grounds other than privacy statute, the matter proceeds under counsel direction.
Suppression
Where nothing compels removal, reduce reach and usefulness: de-indexing, source suppression, and added friction.
Monitor
Monitor what remainsThreatWatch continuously monitors the information and activity that cannot be removed. It tracks meaningful changes in exposure, hostile online activity, public narratives, impersonation, threats, and other signals that may indicate growing risk. ThreatWatch is not designed to produce the most alerts. It is designed to surface the changes that matter.
Collection runs across social and alternative platforms, video, forums, paste sites, anonymous boards, deep and dark web sources, news, breach and stealer data, and location-linked records, scoped to you, your aliases, your household, and the organization around you. Three things separate it from a monitoring product.
- Cadence
- Continuous
- Review
- 100% analyst
- Included
- Investigation hours
- Delivered as
- Command Brief
An analyst clears every finding
Monitoring products are built to scale on automation, which is why they send alerts. This is built to be read. What reaches you states the finding, the confidence, and the recommended response.
Collection is instrumented for you
Built against the specific ground the audit mapped: your filings, your properties, your household, the places your information actually circulates. An off-the-shelf platform returns the same results for a judge and a founder.
We watch threat formation, not only triggers
Keyword triggers catch what has already been said about you. Watching formation catches what is taking shape before it carries your name: the grievance forming, the community coalescing, the framing being tested.
Investigate
Investigate what movesInvestigation examines emerging threats in greater depth. Our analysts identify connections, assess credibility, investigate who may be behind the activity, and determine whether isolated incidents are part of a broader pattern. Technology helps collect and organize information at scale, but analysts determine what that information means in the context of a client's actual risk.
Attribution is performed under a private investigator license, which is what makes lawful identification available at all and where automated tools stop. Findings are documented with confidence stated per finding and delivered in a form counsel and law enforcement can act on. Where a response is warranted, it is scoped to the matter and authorized by the client in writing before anything is done.
- Cadence
- By investigation
- Held by
- Senior investigator
- Licence
- Private investigator
- Confidence
- Stated per finding
Advise
Turn it into a decisionThe last stage turns exposure data, monitoring and investigative findings into a judgment a client can act on. They learn what changed, why it matters, how credible or serious it is, and what deserves attention now rather than later. The value is clarity while there are still options, not a stream of raw data to interpret alone.
An intelligence function has one native deliverable, and this is ours. Everything the firm produces arrives as a Command Brief, written to the same standard whether it concerns one client or the whole market: bottom line first, figures attributed, confidence stated, scope bounded, numbered and retained.
- Format
- Command Brief
- Standard
- Bottom line first
- Confidence
- Always stated
- Retained
- Numbered and archived
We do not promise erasure. Some records will not move, and the audit names those before work begins.
We do not sell a dashboard. And no firm can honestly prove that a warning prevented an attack that never happened, so we will not claim it. What we will tell you is what changed, how confident we are, and what deserves action while you still have options.
Three ways to work with us.
Whether you want to understand your exposure, establish ongoing protection, or investigate a specific threat, we tailor our services to your needs.
Understand your exposure.
A comprehensive audit of what others can find about you and how that information could be used. You receive a detailed report, a private briefing, and an exposure assessment with clear recommendations for reducing risk. No ongoing commitment.
- Best for
- Understanding your current exposure
- Timeline
- Weeks, not months
- You receive
- Report, private briefing, Exposure Index
Reduce exposure. Monitor threats.
Continuous protection that combines exposure discovery, ongoing information removal, and threat monitoring. A dedicated analyst oversees the work, tracks changes, and keeps you informed. Three service levels provide protection appropriate to your needs.
- Best for
- Individuals facing ongoing or elevated risk
- Duration
- Annual, renewable
- Coverage
- Three levels of protection
Get answers to specific threats.
Groundtruth investigates specific incidents, individuals, or campaigns. Our investigators follow the evidence to establish what's happening, who may be responsible, and what the findings mean for your security. Reports are prepared to support decisions, including action by legal counsel.
- Best for
- Specific threats or active situations
- Duration
- Based on the investigation
- You receive
- Documented findings and risk assessment
Three more ways to work with us, and the three levels of Ongoing ProtectionOpen ▼
Retainer
Standing availability for clients under persistent pressure, including household and office coverage, with capacity held rather than requested.
Sponsored Coverage
An organization sponsoring individual coverage for leadership, boards, or employees at elevated risk. The organization funds it. The client is still the client.
Under Counsel
Work performed under counsel direction may be covered by attorney client privilege, depending on how the engagement is structured. We can introduce qualified outside counsel where none is in place. Suits matters warranting protections beyond an NDA.
Levels apply to Ongoing Protection. What changes is how much analyst you get and how close the relationship is, not how much of the internet we look at.
Managed
For leaders whose exposure demands deeper attentionRemoval across 1,000+ brokers with the discovery work that matters once a profile carries weight. Dark web scanning goes deeper than a consumer search, and the audit is analyst-driven rather than generated.
- Broker removals, 1,000+ sources
- Private audit session and action plan
- Advanced dark web scanning
- Dedicated account manager
- Circle of Trust available
Advanced Analysis
For people already threatened, or facing elevated ongoing riskEverything in Managed, plus what matters when someone is actively at risk. Dark web coverage expands to stealer log analysis, and the work moves from cleanup to containment.
- Everything in Managed
- Stealer log analysis
- Account takeover analysis
- Social media and threat sweep
- Active Threats report
Integrated protection
Both programs, working togetherObscurity and ThreatWatch run together: hard to find and hard to hurt, held by the same named analyst, with capacity held rather than requested.
- Everything in Advanced Analysis
- Continuous monitoring entire
- Standing analyst access
- Held capacity
- Attribution and countermeasures
Circle of Trust is scoped per member at any level · Organizations sponsoring coverage for a group are scoped separately
We do not replace the teams you already have.
A response network built for threats that cross boundaries
When a threat requires a broader response, ObscureIQ can work with the teams a client already trusts or draw on its formal network of vetted partners across executive protection, cybersecurity, physical security, legal, communications, and investigations. We help bring the right capabilities together around one understanding of the threat.
Built to strengthen existing defenses
ObscureIQ does not replace cybersecurity or executive protection teams. It gives them the context and intelligence they cannot generate from inside a single function, helping every part of a client's security program act from a more complete picture.
Bring the situation. We will tell you what is possible.
A confidential call with us establishes your baseline exposure, your risk profile, and which stage your situation actually calls for. Some clients arrive with a known threat. Others want to understand what their footprint enables before anything happens.
Almost nobody arrives knowing what can and cannot be de-weaponized, because almost nobody has mapped the ecosystem. Working that out is what the call is for. Not every matter is a fit, and we say so before scope.
- Phone
- 855.763.7273 · 855.76.ERASE
- info@obscureiq.com
- Counsel
- Introductions on request
- Handling
- Confidential by default. Privileged structures via counsel.