Services

Privacy consulting for people who are targeted.

We reduce what can be found about you, lock down the accounts and devices you rely on, and train you to keep it that way. We keep as little of your information as the work allows.

Privacy consulting

For executives, journalists, activists, and the families and teams around them.

Most security work protects systems. This protects people: what can be found about you, who is looking for it, and what you can do about both.

Digital footprint reduction

  • Digital footprint audit: what an adversary can find
  • Data broker and people-search removal
  • Doxxing response: takedown requests, exposure reduction, account lockdown
  • Address and identity privacy: property records, registrations, mail handling

Threat modeling

  • Personal and family threat models
  • Organizational threat models for small teams, newsrooms and NGOs
  • A written risk profile with prioritized mitigations

Personal security training

Tailored to people who are targeted for who they are or what they know.

  • Secure and encrypted communications
  • Personal device hardening
  • Data security in high-risk countries
  • Travel security briefings: border crossings, travel devices, checks before and after a trip
  • Account security: hardware keys, password managers, SIM-swap protection, recovery paths
  • Anonymity: separate identities, Tor and VPN use, isolated workstations
  • Source protection and secure document handling for journalists
  • Social engineering and phishing resistance

Executive and family protection

  • Onboarding assessment of devices, accounts and home network
  • Home network hardening
  • Ongoing retainer: monitoring, periodic re‑checks, on‑call advice

Surveillance and spyware checks

  • Phone checks for stalkerware and mercenary spyware
  • Account access review: unknown sessions, forwarding rules, linked devices

Impersonation and breach monitoring

  • Impersonation and fake‑account detection and takedown
  • Breach and dark web exposure monitoring for credentials and personal data

Other services

Cybersecurity consulting
For organizations without a full-time security team: assessments and penetration tests, security program build-out, logging and detection, and compliance and insurance readiness.
Incident response
Plans, tabletop exercises and retainers before an incident; triage, containment, recovery and a root cause report after one. Business email compromise, ransomware, account takeover and insider data theft are typical.
Digital forensics
Malware analysis, and evidence from computers, phones, cloud and email handled under chain of custody, with reports and expert testimony for legal proceedings.
OSINT and investigations
Exposure assessments, due diligence on people and companies, and tracing who is behind a harassment campaign or a fraud.

Start a conversation

We take most new work by referral. Tell us who you are and what you need in a sentence or two, and leave sensitive details out. We will move to an encrypted channel before you share them.

Already a client? Reach us on Covert.IM.