The team behind the agent
Quinnlan Varcoe is Founder and CEO. She holds a Bachelor of Science in cybersecurity from SANS Technology Institute and 15 active certifications across GIAC, AWS, Splunk, CompTIA, including GCIH, CySA+, and GCIA. She designed the court-admissible forensic methodology that the SleuthX agent encodes and trains on, and she is the named expert witness on litigation engagements covering family law, commercial litigation, and IP disputes.
Alex Riffenburgh, Co-Founder and CTO, leads engineering and the offensive-security work that pressure-tests the agent before any finding ships.Jose Santana, Lead Technical Consultant, runs the front-line case load that produces the labeled forensic data SleuthX trains and validates on. Alisa Tsurko, Founding AI Engineer, builds the AI that turns the methodology into product. The agent (SleuthX) scales the procedural work that previously consumed senior-analyst hours, under the methodology Quinn designed.
The 15 certifications
Quinn's credential mix is what supports court qualification on the litigation side and credible methodology on the enterprise side. Every certification listed here isactive and verifiable directly with the issuing body. Lapsed certifications are not shown.
- GCIH: GIAC Certified Incident Handler (GIAC)
- GCCC: GIAC Critical Controls Certification (GIAC)
- GCSA: GIAC Cloud Security Automation (GIAC)
- GMOB: GIAC Mobile Device Security Analyst (GIAC)
- GPYC: GIAC Python Coder (GIAC)
- GFACT: GIAC Foundational Cybersecurity Technologies (GIAC)
- GISF: GIAC Information Security Fundamentals (GIAC)
- GCIA: GIAC Certified Intrusion Analyst (GIAC)
- GSEC: GIAC Security Essentials (GIAC)
- SPLK Power User: Splunk Core Certified Power User (Splunk)
- SPLK User: Splunk Core Certified User (Splunk)
- SAA: AWS Certified Solutions Architect Associate (AWS)
- CSAP: CompTIA Security Analytics Professional (CompTIA)
- CySA+: CompTIA Cybersecurity Analyst (CompTIA)
- Sec+: CompTIA Security+ (CompTIA)
Court-admissible methodology
Evidence is preserved using forensically sound acquisition methods. Chain of custody is documented. Methodology aligns with FRE 901 and FRCP 26. Reports are written for non-technical decision-makers but defensible under technical scrutiny in deposition or trial. Quinn is qualified to testify under Daubert and Frye standards on the work product. SleuthX, the AI agent, operates inside that same methodology under principal review.
Building toward a licensed PI agency
Digital forensics and incident response are notregulated under PI licensure — that's a different regulatory regime. SleuthX runs DFIR and credentialed-examiner work in-house today. Where a case calls for licensed private-investigator work (surveillance, fieldwork, certain pre-employment investigations, particular evidentiary chains), we coordinate that work through our licensed-investigator partner network.
Quinn qualifies as principal applicantunder Florida's Class C PI license rules — the company's founding jurisdiction. The longer-term company plan is multi-state PI agency licensure, starting with Florida and building out via reciprocity, qualifying-manager hires, and targeted acquisition of existing licensed practices. SleuthX is not currently a licensed PI agency; every claim about licensure on this site is forward-looking. When that status changes, the language on this page changes.
Expert-witness work
Expert witness engagements cover family law, commercial litigation, IP disputes, breach-causation matters, and arbitration. Available for deposition, hearing, andtrial. Available for rebuttal of opposing-counsel forensic reports. Engagements are structured under the retaining attorney's privilege.
How an engagement begins
- Confidential consultation. NDA-protected. 30 to 60 minutes. Direct conversation with Quinn. No sales process.
- Scoped engagement. Written proposal with defined deliverables and pricing. Per-case, hourly with milestone caps, or subscription depending on what fits.
- Investigation, review, and findings. Court-admissible standards. Written report you can act on, reviewed and signed off by Quinn.
What we will not do
- Publish a finding Quinn has not reviewed.
- Run a single automated scan and email you a one-line result.
- Take cases where simpler steps (police report, IC3 filing, platform-native recovery) would resolve the situation. We will tell you and decline.
- Promise outcomes we cannot prove.
- Bill for work that was not scoped or approved in writing.
Why this work matters
Cellebrite and Belkasoft licensing costs $10K to $30K per year per analyst, which forces traditional forensic services to charge $5K to $15K per case. The people who need help most get priced out. SleuthX, the AI agent layered on this practice, extends court-grade methodology to consumer pricing tiers. Quinn still owns case judgment.
