The team behind the agent
Quinnlan Varcoe is Founder and CEO. She holds a Bachelor of Science in cybersecurity from SANS Technology Institute and 9 active certifications across GIAC, including GCIH, GCIA, and GSEC. She designed the court-admissible forensic methodology that the SleuthX agent encodes and trains on, and she is the named expert witness on litigation engagements covering family law, commercial litigation, and IP disputes.
Alex Riffenburgh, Co-Founder and CTO, leads engineering and the offensive-security work that pressure-tests the agent before any finding ships. The agent (SleuthX) scales the procedural work that previously consumed senior-analyst hours, under the methodology Quinn designed.
The 9 active certifications
Quinn's credential mix is what supports court qualification on the litigation side and credible methodology on the enterprise side. Every certification listed here isactive and verifiable directly with the issuing body. Lapsed certifications are not shown.
- GCIH: GIAC Certified Incident Handler (GIAC)
- GCCC: GIAC Critical Controls Certification (GIAC)
- GCSA: GIAC Cloud Security Automation (GIAC)
- GMOB: GIAC Mobile Device Security Analyst (GIAC)
- GPYC: GIAC Python Coder (GIAC)
- GFACT: GIAC Foundational Cybersecurity Technologies (GIAC)
- GISF: GIAC Information Security Fundamentals (GIAC)
- GCIA: GIAC Certified Intrusion Analyst (GIAC)
- GSEC: GIAC Security Essentials (GIAC)
All 9 GIAC certifications are publicly verifiable in the GIAC Certified Professional directory (Analyst ID 201058).
Court-admissible methodology
Evidence is preserved using forensically sound acquisition methods. Chain of custody is documented. Methodology aligns with FRE 901 and FRCP 26. Reports are written for non-technical decision-makers but defensible under technical scrutiny in deposition or trial. Quinn is qualified to testify under Daubert and Frye standards on the work product. SleuthX, the AI agent, operates inside that same methodology under principal review.
Building toward a licensed PI agency
Digital forensics and incident response are notregulated under PI licensure — that's a different regulatory regime. SleuthX runs DFIR and credentialed-examiner work in-house today. Where a case calls for licensed private-investigator work (surveillance, fieldwork, certain pre-employment investigations, particular evidentiary chains), we coordinate that work through our licensed-investigator partner network.
Quinn qualifies as principal applicantunder Florida's Class C PI license rules — the company's founding jurisdiction. The longer-term company plan is multi-state PI agency licensure, starting with Florida and building out via reciprocity, qualifying-manager hires, and targeted acquisition of existing licensed practices. SleuthX is not currently a licensed PI agency; every claim about licensure on this site is forward-looking. When that status changes, the language on this page changes.
Expert-witness work
Expert witness engagements cover family law, commercial litigation, IP disputes, breach-causation matters, and arbitration. Available for deposition, hearing, andtrial. Available for rebuttal of opposing-counsel forensic reports. Engagements are structured under the retaining attorney's privilege.
How an engagement begins
- Confidential consultation. NDA-protected. 30 to 60 minutes. Direct conversation with Quinn. No sales process.
- Scoped engagement. Written proposal with defined deliverables and pricing. Per-case, hourly with milestone caps, or subscription depending on what fits.
- Investigation, review, and findings. Court-admissible standards. Written report you can act on, reviewed and signed off by Quinn.
What this means for you
- Written scope before any work. You see a written scope — deliverables, timeline, and price — and approve it before we begin. You are never billed for work you did not authorize.
- We commit to findings, not outcomes. We tell you up front what the evidence can and cannot establish. Recovery, attribution, and prosecution are decided by banks, platforms, insurers, and courts — we produce the record they act on, and we put that distinction in writing.
- Every case is investigated, not just scanned. A credentialed examiner reviews every case before findings leave the practice. You get a documented investigation to court-admissible standards — not a single automated scan and a one-line answer.
- We will tell you if you do not need us. If a free or simpler step — a police report, an IC3 filing, a platform's own recovery flow — would resolve your situation, we point you there first.
Why this work matters
Cellebrite and Belkasoft licensing costs $10K to $30K per year per analyst, which forces traditional forensic services to charge $5K to $15Kper case. The people who need help most get priced out. SleuthX, the AI agent layered on this practice, extends court-grade methodology to consumer pricing tiers — that is what makes personal cybersecurity services for individuals and families affordable for real people. Quinn still owns case judgment.
