About & Contact
Talk to Quinn,
not a sales pipeline.
Confidential consultations are 30-60 minutes, NDA-protected, and free. If your case is a good fit, we'll scope an engagement. If a simpler step would resolve it, we'll tell you that and decline. We'd rather lose the case than waste your money.
About Quinnlan Varcoe
The investigator on the other end of the call.
I'm Quinnlan Varcoe. I founded SleuthX in 2022 after a decade of incident response and threat intelligence work for Fortune 50 enterprises and the defense industrial base. I hold 9 active certifications across GIAC, the same credentials that get forensic findings admitted in federal court.
I started this practice because the people who actually need DFIR work, individuals being stalked, attorneys preparing for trial, family offices recovering from wire fraud, and small businesses hit by ransomware, were getting the worst of an industry built for billion-dollar enterprise contracts. Either they were priced out, or they were sold automated scans dressed up as investigations, or they were handed off to junior staff after the sales call. None of those outcomes are acceptable.
I scope every engagement and oversee the practitioner team executing the work. Alex Riffenburgh, our Co-Founder, brings the offensive-security discipline and takes investigations and field operations going forward. I review every case before findings leave the practice. If we are not the right fit for your case, I'll tell you, and where possible I'll refer you to someone who is.
- A direct line to Quinn, the founder, not a sales pipeline.
- Worked in-house by the examiner who scoped it.
- Explainable findings you can verify, with the methodology shown.
Who we work with
- Individuals and families facing stalkerware, account compromise, identity theft, romance scams, or domestic-violence situations involving digital evidence.
- Attorneys who need court-admissible forensic phone extraction, e-discovery support, expert-witness testimony, or spoliation analysis, primarily in family law and commercial litigation.
- Family offices and HNW principals who need discreet investigative support, privacy services, and a security program ownership layer their wealth manager cannot provide.
- Investigative journalists and newsrooms facing device compromise or source-protection questions. See our work with journalists.
- Small and mid-sized businesses that need real cybersecurity without the enterprise pricetag, through managed services, vCISO, and incident response.
- Other security firms, MSPs, and law firms who refer cases to us or sub-contract us as a white-label partner. See enterprise services for partnership terms.
What this means for you
- Written scope before any work. You see a written scope covering deliverables, timeline, and price, and you approve it before we begin. You are never billed for work you did not authorize.
- We commit to findings, not outcomes. We tell you up front what the evidence can and cannot establish. Recovery, attribution, and prosecution are decided by banks, platforms, insurers, and courts. We produce the record they act on, and we put that distinction in writing.
- Every case is investigated, not just scanned. A credentialed examiner reviews every case before findings leave the practice. You get a documented investigation to court-admissible standards, not a single automated scan and a one-line answer.
- We will tell you if you do not need us. If a free or simpler step would resolve your situation, whether a police report, an IC3 filing, or a platform's own recovery flow, we point you there first.
How an engagement begins
- Confidential consultation. NDA-protected. 30-60 minutes. Direct conversation, no sales process.
- Scoped engagement. A written proposal with a fixed fee where it applies and hourly with milestone caps for open-ended investigations.
- Investigation and findings. Court-admissible standards. Written report you can act on.
Most Requested Services
Certified Expertise
GIAC
