Research · OSINT · Technology

We find out what is out there, before someone else uses it.

OSINT on your own attack surface, checks on vendors before you sign, technology and market research against primary sources. Public sources only, within the law, and written up so you can act on it.

Start a project

Prefer a call? +•• ••• ••• •• ••

A wooden desk with a typewriter and a lamp under a window looking onto green trees.

What we research

Public sources, read by engineers.

Bring us one question or let us map the whole picture.

OSINT exposure analysis

Before an attack comes the research: which subdomains and services are reachable, which addresses of your domain turn up in known data breaches, what your documents give away in their metadata, which keys sit in public code, and what a scammer needs for a convincing phishing mail. With your mandate, we collect what is public about your organisation and hand you a written report: every finding with its source, how serious it is and how to close it.

Certificate logs DNS Breach notifications

I want to see our exposure

Vendor & partner check

Before you trust a software vendor, an agency or a SaaS provider with your data or your project, we look at what is public: the company register, how long they have existed and who owns them, what they have built, where your data would be stored and with which subcontractors, and how their own public systems look from the outside. You get a written summary with sources and the questions to ask before you sign.

Company registers Public code TLS & headers

I want a vendor checked

Technology research

Which framework, which AI model, which hosting, which tool? We compare the options against primary sources, meaning documentation, pricing pages, licences and changelogs, note the date we checked each one, and give you a recommendation with the reasons. It is how we research our own guides and the AI models we evaluate for LearnATC.

Documentation Pricing & licences Prototypes

I have a technology question

Market & competitor research

What do your competitors offer online, on which technology, and how easy are they to find? We map the market from public sources: their websites and features, the technology they run on, how they show up in search, published prices and positioning, and the gaps you could use. For our own browser game Kronland we studied an established competitor this way, down to how it grows its game world, and measured it.

Websites & features Tech stacks Search visibility

I want to know my market

Lookalike domains & phishing pages

Scammers register domains that look like yours and build pages that look like your shop or your login. We look for lookalike domains and copies of your site in public certificate logs and domain data, analyse what runs on them, and report them to the hosting provider and the registrar so they are taken down. Finding out who is behind them is a matter for the police.

Certificate logs RDAP / WHOIS Abuse reports

Someone imitates us

JavaScript code in a dark editor, seen at an angle on a monitor.

Why us

What you can count on

Public sources only

We use what anyone could find: registers, certificate logs, search engines, documentation and public code. We log in nowhere, test nothing without a mandate and never buy leaked data.

Sources you can check

Every finding comes with its source and the date we checked it, as in our guides, so you can verify each one yourself.

Organisations, not private lives

We research companies, domains, systems and technology. Information about private persons, tracing people and evidence for court belong to licensed private detectives, and we leave them there.

Engineers who read the details

We read DNS records, certificates, code and documentation, not only search results, because we build and run the same kind of systems ourselves.

Go deeper

Blax SecurityWhen the research shows a gap, we close it.GuidesHow we research: every claim with its source and date.

A black notebook with a green elastic band next to a cup of cappuccino on a dark table.

Need to know something?

Tell us the question. We tell you honestly whether public sources can answer it, and what it takes.

You talk to Fabian Wagner, founder

No sales desk in between: he reads every enquiry himself.