Active Incident? 24/7 Response →
SleuthX

Personal cybersecurity that actually investigates

Was I hacked?
SleuthX answers in minutes — run it yourself, or have us run it for you.

Describe what happened in your own words. Our AI forensic agent investigates your accounts and devices, builds a defensible report, and walks you through the fix. Drive it yourself to save on cost — or hand the case to our credentialed team and we'll work it for you. Either way, the output holds up for police, insurance, and court.

Two ways to use SleuthX

Drive it yourself, or hand it to our team.

Same forensic methodology, same defensible output, same chain of custody — whichever path fits where you are right now.

Self-serve

Drive it yourself

Best when you're hands-on, want to learn what happened, or have a tight budget. The AI agent handles the forensic work; you steer.

  • • AI agent with the full forensic toolkit
  • • Self-paced, no booking needed
  • • Standard / Power / Enterprise tiers from $250/mo
  • • Output is court-admissible by default
Try SleuthX now

Concierge

Have us drive it

Best when you're in crisis, on a deadline, need a court-grade report tomorrow, or just want a credentialed human to take the case off your plate.

  • • Credentialed examiner takes the case end-to-end
  • • Hourly or flat-fee, transparent rate card
  • • Same forensic output and chain of custody
  • • Free 15-minute triage call to scope the case
Book a triage call

Switch between modes any time — start DIY, hand off if it gets complicated. Your evidence and chain of custody travel with you.

SleuthX

SleuthX
AI Agent · Open Alpha

The digital forensics agent that prevents, detects, responds to, and remediates any consumer cyber incident — account compromise, stalkerware, wire fraud, SIM swap, crypto scam, identity theft, romance scam.

How SleuthX Works

Input. Agent. Output.

SleuthX ingests data from your accounts and devices, analyzes it with an AI agent built on a working forensics methodology, and escalates to senior human examiners when the case demands it.

Input

Ingest data from accounts and devices

  • Account logs (email, cloud, banking, social)
  • Device artifacts and screenshots
  • Phone, computer, and forensic captures
Agent

Analyze with the AI agent

  • Classify what's a real compromise vs benign
  • Reconstruct the timeline of activity
  • Surface the root cause hypothesis
Output

Deliver a structured report

  • Compromise classification + severity
  • Clear next steps you can act on
  • Court-admissible report when needed

When a case needs human judgment, SleuthX escalates to the practitioner team — Quinn, Alex, Jose — who oversee every output before it leaves the system.

Deliverables

What you get

Every SleuthX engagement produces the same five deliverables. No mystery, no scope creep.

  • Compromise classification

    Real vs benign, with severity. Tells you whether something actually happened or whether the alarm was noise.

  • Timeline of activity

    What happened, in what order, on which device or account. Reconstructed from logs, artifacts, and forensic captures.

  • Root cause hypothesis

    How the compromise started — phishing, SIM swap, reused password, OAuth grant, malicious app, or insider access. Evidence-backed.

  • Clear next steps

    What to do this hour, this week, and this quarter. Specific to your situation, not a generic checklist.

  • Structured report (legal-ready optional)

    Written for non-technical decision-makers. Court-admissible chain of custody when you need it for litigation, insurance, or law enforcement.

Founder with roughly a decade in incident response and threat intelligence for Fortune 50 enterprises and the defense industrial base. 15 active industry certifications across SANS GIAC, AWS, Splunk, and CompTIA. View all credentials.

The Stack

Forensic depth at the center. Protections wrapped around it.

Most consumer cyber suites bolt monitoring on top of more monitoring. SleuthX inverts the stack — the AI forensic agent and the credentialed examiner signing off on findings are the work we own. Identity monitoring, dark-web surveillance, breach response, restoration concierge, and identity-theft coverage layer in underneath.

What we build · Live now
  • AI forensic agent

    Investigates accounts and devices end-to-end. Compromise classification, timeline reconstruction, attribution, and clear next steps. Plain-language intake; deep-investigator depth on demand.

  • Court-admissible reporting

    Findings that hold up in court, police filings, and insurance claims. Signed off by a credentialed forensic examiner before they leave the practice.

  • Methodology engine

    The DFIR playbooks the industry charges enterprises five and six figures for, encoded and run automatically. Stalkerware, account compromise, wire fraud, SIM swap, romance scam, identity theft, more.

What we wrap in · Coming
  • Identity monitoring

    Continuous credit-bureau-grade monitoring across all three bureaus, SIM-swap alerts, and account-takeover detection. Same data the major monitoring services use, layered into the agent.

  • Dark-web surveillance

    Continuous scan of breach corpora, paste sites, and underground markets for your credentials, accounts, and exposed data.

  • Restoration concierge

    Full-service identity-theft remediation team for active incidents. Disputes, filings, recovery, and direct work with creditors and law enforcement on your behalf.

  • Identity-theft coverage

    Carrier-underwritten reimbursement coverage for losses, legal fees, and recovery costs. Coverage limits and terms set with the carrier at launch.

One investigator. One subscription. The forensic layer is what we own; the monitoring infrastructure underneath is licensed from category-leading providers and integrated as the suite ships.

Threats We Trace

We see what they hide.

Stalkerware. Deleted texts. Insider exfiltration. Spoofed accounts. The forensic trail is always there. We surface it, document it, and make it admissible.

  • Stalkerware
  • Insider Threat
  • Account Takeover
  • Phone Forensics
  • Spoofing
  • Exfiltration

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded SleuthX in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response
Quinnlan Varcoe, Founder & CEO

How We Work

A confidential, structured engagement.

01

Confidential Consultation

A direct conversation with Quinn, the founder and CEO who oversees every engagement. NDA-protected. No sales process.

02

Scoped Engagement

A clear written proposal with defined deliverables, timeline, and pricing. No hidden costs.

03

Investigation and Findings

Forensic work conducted to court-admissible standards, with regular communication and a written summary you can act on.

Trusted by Security Leaders

Client Perspectives

SleuthX has proven to be an outstanding partner. We've trusted them to handle sensitive investigations, and they consistently deliver clear, evidence-based answers. They are a trusted extension of any security firm.
Aaron Birnbaum
Managing Partner · Seron Security
Quinnlan brings more than cybersecurity expertise. She brings strategic alignment. She has a strong ability to take complex situations and break them down into clear, understandable findings. She's the kind of asset who elevates your offering.
Caroline Lombard
Threat Specialist · Amazon Web Services
Her ability to navigate high-stakes incidents was invaluable. She stays focused on the evidence and avoids speculation, which is critical when someone is trying to understand whether they've actually been compromised. She's a game-changer for channel growth.
Justin Cox
Senior AWS Security Analyst · PayPal
Working with SleuthX has been one of the most seamless collaborations. They bring a disciplined and professional approach to digital investigations. They're not just a vendor. You can trust them.
Soufiane Jihadi
Senior Incident Response Consultant · Deloitte

Frequently asked about SleuthX

Quinnlan Varcoe, Founder & CEO

Schedule Your Session

Get answers, not alerts.

SleuthX ships you a structured forensic report on what actually happened — compromise classification, timeline, root cause, next steps. Start with the agent now, or talk to Quinn if your case is active and time-sensitive.

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management