Building toward a licensed private investigation agency

An AI investigator with a full digital forensics lab

SleuthX is not yet a licensed private investigation agency; licensure is in progress.Describe what happened in your own words. Our AI investigator examines your accounts and devices and writes a report of what it found, how it found it, and with which tools.

Private and confidential. We don't sell, share, or train models on your case data.

GIAC-certified digital forensics lab9 GIAC certifications →

Two ways to use SleuthX

Drive it yourself, or hand it to our team.

Same forensic methodology, same defensible output, same chain of custody, whichever path fits where you are right now.

Self-serve

Drive it yourself

Best when you're hands-on, want to learn what happened, or have a tight budget. The AI investigator handles the forensic work; you steer.

  • • AI investigator with the full forensic toolkit
  • • Self-paced, no booking needed
  • • $200/mo, billed monthly, with $200 of usage credit each month included
  • • Prepared to evidentiary standards; examiner review marks it court-ready
Try SleuthX now

Concierge

Have us drive it

Best when you're in crisis, on a deadline, or just want a credentialed human to take the case off your plate.

  • • Credentialed examiner takes the case end-to-end
  • • Device packages from $2,500 (1, 2 to 3, or 4 to 5 devices); $550/hr beyond
  • • Same forensic output and chain of custody
  • • Fixed price, confirmed in writing before any work starts

If a partner or ex may see this device, use one they can’t access. National Domestic Violence Hotline: 1-800-799-7233, or text START to 88788.

See what your matter costs

Prefer to talk first? Call (239) 241-8095

Not sure which? In an active crisis or on a deadline, have us drive it. Want to learn what happened on a budget, start it yourself. Switch between modes any time. Start DIY, hand off if it gets complicated. Your evidence and chain of custody travel with you.

SleuthX

AI Investigator · Open Alpha

The AI investigator that starts with forensics. If it’s digital, it leaves a trail — and it follows it: accounts, devices, money, and the connections between them.

How SleuthX Works

Input. Agent. Output.

SleuthX ingests data from your accounts and devices, analyzes it with an AI agent built on a working forensics methodology, and escalates to senior human examiners when the case demands it.

Input

Ingest data from accounts and devices

  • Account logs (email, cloud, banking, social)
  • Device artifacts and screenshots
  • Phone, computer, and forensic captures
Agent

Analyze with the AI agent

  • Classify what's a real compromise vs benign
  • Reconstruct the timeline of activity
  • Surface the root cause hypothesis
Output

Deliver a structured report

  • Compromise classification + severity
  • Clear next steps you can act on
  • Court-admissible report when needed

When a case needs human judgment, SleuthX escalates to the practitioner team of Quinn and Alex, who oversee every output before it leaves the system.

Deliverables

What you get

Every SleuthX engagement produces the same five deliverables. No mystery, no scope creep.

  • Compromise classification

    Real vs benign, with severity. Tells you whether something actually happened or whether the alarm was noise.

  • Timeline of activity

    What happened, in what order, on which device or account. Reconstructed from logs, artifacts, and forensic captures.

  • Root cause hypothesis

    How the compromise started, whether phishing, SIM swap, reused password, OAuth grant, malicious app, or insider access. Evidence-backed.

  • Clear next steps

    What to do this hour, this week, and this quarter. Specific to your situation, not a generic checklist.

  • Structured report (legal-ready optional)

    Written for non-technical decision-makers. Court-admissible chain of custody when you need it for litigation, insurance, or law enforcement.

Founder with roughly a decade in incident response and threat intelligence for Fortune 50 enterprises and the defense industrial base. View all credentials.

Plain terms

What we are, and what we are not

What we are

A private investigation agency in the making, with full digital forensics included. SleuthX is a digital forensics firm. We are not a licensed private investigation agency, and our examiners are not licensed private investigators. Credentialed examiners, documented chain of custody, explainable findings you can verify, and reports that record hashes, method and tool versions. Where a matter needs field work today, whether backgrounds, locates or physical surveillance, we coordinate with licensed private investigators. Lawful, confidential, on your side.

What we are not

Spyware, stalkerware, or a way to secretly monitor another person. We do not “hack back,” promise guaranteed money recovery, or touch any account or device without its owner's lawful authorization. We decline engagements that ask us to.

The Stack

Forensic depth at the center. Protections wrapped around it.

Most consumer cyber suites bolt monitoring on top of more monitoring.

SleuthX inverts the stack. The AI investigator and the credentialed examiner signing off on findings are the work we own. Identity monitoring, dark-web monitoring, breach response, restoration concierge, and identity-theft coverage layer in underneath.

What we build · Live now
  • AI investigator

    Investigates accounts and devices end-to-end. Compromise classification, timeline reconstruction, attribution, and clear next steps. Plain-language intake; deep-investigator depth on demand. Every step is explainable, the agent shows its evidence, and findings are verified before they ship.

  • Court-ready reporting

    Findings that hold up in court, police filings, and insurance claims. Signed off by a credentialed forensic examiner before they reach you.

  • Methodology engine

    The DFIR playbooks the industry charges enterprises five and six figures for, encoded and run automatically. Stalkerware, account compromise, wire fraud, SIM swap, romance scam, identity theft, more.

What we wrap in · Coming
  • Identity monitoring

    Continuous credit-bureau-grade monitoring across all three bureaus, SIM-swap alerts, and account-takeover detection. Same data the major monitoring services use, layered into the agent.

  • Dark-web monitoring

    Continuous scan of breach corpora, paste sites, and underground markets for your credentials, accounts, and exposed data.

  • Restoration concierge

    Full-service identity-theft remediation team for active incidents. Disputes, filings, recovery, and direct work with creditors and law enforcement on your behalf.

  • Identity-theft coverage

    Carrier-underwritten reimbursement coverage for losses, legal fees, and recovery costs — alongside the personal cyber insurance coordination we offer today. Coverage limits and terms set with the carrier at launch.

Where we're headed

Building toward a licensed private investigation agency

Today SleuthX is AI digital forensics, and digital forensics is not regulated under private investigator licensure. SleuthX is not yet a licensed private investigation agency. Our founder is the principal applicant for a Florida Class C private investigator license, which is in progress, and SleuthX is building toward licensed private investigation agency status. When a matter needs licensed field investigation, we coordinate it through the licensed private investigator partner network. Every statement about licensure on this page is forward-looking; when that status changes, this language changes.

One investigator. One platform. The forensic layer is what we own; the monitoring infrastructure underneath is licensed from category-leading providers and integrated as the suite ships.

We also serve investigative journalists & newsrooms →

How We Work

A confidential, structured engagement.

01

Confidential Consultation

A direct conversation with Quinn, the founder and CEO who oversees every engagement. NDA-protected. No sales process.

02

Scoped Engagement

A clear written proposal with defined deliverables, timeline, and pricing. No hidden costs.

03

Investigation and Findings

Forensic work conducted to court-admissible standards, with regular communication and a written summary you can act on.

Trusted by Security Leaders

Client Perspectives

“I sent a photo to someone I matched with on Tinder, and then the threats started. I was paying just to keep it quiet. SleuthX helped me see that paying was never going to end it, so I stopped.”
Brian
Client · personal matter
Client reference
“My company scans public-facing systems for security weaknesses. When a client needs an investigation, we send them to SleuthX, and we've trusted them with sensitive ones. They consistently deliver clear, evidence-based answers.”
Aaron B.
Managing Partner · cybersecurity firm
Referral partner
“I worked with SleuthX's founder at a large enterprise before moving into digital investigations myself. She has a strong ability to take complex situations and break them down into clear, understandable findings. She brings more than cybersecurity expertise.”
Caroline L.
Threat Specialist · enterprise cloud security
Professional reference
“I worked alongside SleuthX's founder on digital forensics and incident response at a large enterprise. When someone is trying to understand whether they've actually been compromised, speculation is the last thing they need. She stays focused on the evidence, and her ability to navigate high-stakes incidents was invaluable.”
Justin C.
Senior Security Analyst · financial-services security
Professional reference
“I worked night shifts alongside SleuthX's founder in a security operations center before I moved into incident response myself. She brings a disciplined and professional approach to digital investigations. SleuthX isn't just a vendor. You can trust them.”
Soufiane J.
Senior Incident Response Consultant · professional-services security
Professional reference

Frequently asked about SleuthX

Is SleuthX a licensed private investigator? (No — not yet; we're building toward it.)
SleuthX is AI digital forensics today, not a licensed private investigation agency, and we say so plainly. We examine only devices and accounts you own or are lawfully authorized to access. Our founder is the principal applicant for a Florida Class C private investigator license, which is in progress, and SleuthX is building toward licensed private investigation agency status. When a matter needs licensed field investigation — surveillance, locates, or backgrounds — we coordinate it through the licensed private investigator partner network rather than doing it ourselves.
What does SleuthX do?
SleuthX runs an AI investigator that performs digital forensic triage on consumer cyber incidents. You give it the data, whether account logs, device artifacts, screenshots or communications, and it classifies what happened, reconstructs the timeline, surfaces the root cause, and ships you a structured, evidence-grade report you can act on. It is trained on real DFIR cases run through a working forensics methodology, and outputs are validated against the same court-admissible standard our examiners apply on live cases.
How does SleuthX compare to antivirus or identity-protection apps?
Antivirus scans for known malware signatures. Identity-protection apps monitor public breach databases for exposure. Neither one investigates a specific incident on your devices or accounts, neither one explains what actually happened, and neither one produces a court-admissible report. SleuthX is forensic methodology, not signature matching. The comp set is enterprise IR firms and Cellebrite-licensed shops at $50K-$500K, not Aura or LifeLock at $10-50/mo. SleuthX brings that methodology into a tier consumers can actually pay for, because the agent absorbs the procedural analyst time.
What do I receive after running SleuthX?

A structured forensic report with five deliverables:

  1. a classification of whether something real happened or whether the alarm was noise, with severity;
  2. a timeline of what happened, in what order, on which device or account;
  3. a root-cause hypothesis for how the compromise started (phishing, SIM swap, OAuth grant, malicious app, insider access), evidence-backed;
  4. clear next steps for this hour, this week, and this quarter;
  5. a structured report written for non-technical decision-makers but defensible in litigation, insurance, and law-enforcement contexts when needed.
What kinds of incidents does SleuthX handle?
Account compromise (email, social, banking, cloud), stalkerware detection on iPhone and Android, wire fraud and SIM swap recovery, crypto investment scam attribution, identity theft investigation, romance scam documentation, deleted-text recovery for divorce, OSINT exposure mapping, and domestic-violence digital forensics under a safety plan. Each incident type has a dedicated page with the methodology detail.
Are the reports court-admissible?
Admissibility is the court's ruling to make. What we control is the record it reviews. The methodology aligns with FRE 901 and FRCP 26. Chain of custody is documented. Quinn is qualified to testify under Daubert and Frye standards on the work product. If a case has a legal dimension and you have an attorney, the engagement structures under privilege at the attorney's request.
Where does the AI agent stop and human practitioners take over?
The agent handles the procedural work that previously consumed senior-analyst hours. It ingests the data, classifies it, reconstructs the timeline and generates the report. Quinn (Founder and CEO, 9 active GIAC certifications) and Alex Riffenburgh (Co-Founder) review outputs before they leave the system on cases where stakes are high. As the agent matures, that human review layer compresses. Today's cases also serve as training and validation data for the agent.

Transparent pricing

What do you need?
How many devices need examining?

Cloud accounts linked to your devices, like iCloud or Google, are included in every package and don't count as extra devices.

  • Single-device package, 6.25 examiner hours, cloud accounts included
  • Opens your case forms, including a chain of custody form. Nothing is charged unless you sign.
  • Have cyber insurance? Your policy may cover a forensic exam. You own the report, so you can send it to your carrier.

Live consultation Call (239) 241-8095

Self-serve tool

$200/mo billed monthly

Fully automated digital forensics you run yourself. SleuthX automates a digital investigation end to end, from collecting and analysing the evidence to a report with every finding cited.

See what's included →

Enterprise

$200/seat/mo plus $5/device/mo

Team tier, with frontier reasoning, analyst escalation, and team billing.

See enterprise →

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management