What this service does

Open-source intelligence is a plain idea behind a technical name. We check whether an online identity is what it claims to be, and what is exposed about you, using only information that is already public.

Is that account, profile, or message what it claims to be? What can a stranger learn about you or your family online?

We answer those questions with documented, lawful methods across public records, social and business footprints, image and infrastructure analysis, and hand you a report you can act on.

Lawful methods only. We do not hack, impersonate, or touch any account without authorization. Everything we use is publicly accessible. If a matter needs field work or a licensed private investigator, we say so and coordinate the referral.

SleuthX is a digital forensics firm. We are not a licensed private investigation agency, and our examiners are not licensed private investigators.

When someone is being harassed or stalked online, we document what the public record shows about the accounts involved. Naming a person usually takes legal process, through the police or a lawyer. We screen every intake to confirm a lawful, legitimate purpose before we begin, and we do not help anyone locate, monitor, or surveil another person against their will.

Once you know what is out there, the next step is reducing it: our privacy and exposure services turn an exposure map into an ongoing clean-up plan, and where a matter needs a forensic examination we run it through digital forensics for individuals.

Locate work belongs with licensed investigators — see the missing persons investigator referral and the skip tracing and locate referral, as does deep vetting via the licensed-PI background investigation referral. Principal-side risk work runs through executive threat assessment.

Engagements are confidential.

Some service tracks are offered at a fixed fee; complex investigations are billed hourly with a clear scope, milestone updates, and a cap agreed up front. Multi-subject or longitudinal work (organized fraud, complex business diligence) beyond a package is scoped per case and priced in writing before it starts. Pricing scales with the depth of the work, not data volume.

Start my case

Quinn (Founder and CEO) oversees every engagement and reviews every case before findings leave the practice; the practitioner team executes the technical work under her methodology.

A direct line to Quinn, the founder, not a sales pipeline.
Worked in-house by the examiner who scoped it.
Explainable findings you can verify, with the methodology shown.

What this means for you

Written scope before any work. You see a written scope covering deliverables, timeline, and price, and you approve it before we begin. You are never billed for work you did not authorize.
We commit to findings, not outcomes. We tell you up front what the evidence can and cannot establish. Recovery, attribution, and prosecution are decided by banks, platforms, insurers, and courts. We produce the record they act on, and we put that distinction in writing.
Every case is investigated, not just scanned. A credentialed examiner reviews every case before findings leave the practice. You get a documented investigation with the hashes, method and tool versions recorded, not a single automated scan and a one-line answer.
We will tell you if you do not need us. If a free or simpler step would resolve your situation, whether a police report, an IC3 filing, or a platform's own recovery flow, we point you there first.

How an engagement begins

Confidential consultation. NDA-protected. 30-60 minutes. Direct conversation, no sales process.
Scoped engagement. Written proposal with defined deliverables and pricing, a fixed fee where it applies and hourly with milestone caps for open-ended investigations.
Findings. A written report of what was found, where, and how, that you can act on.

Two ways to work a case

Hand it to an examiner, or run it yourself.

Both keep a chain of custody from the first file. The difference is who does the work.

Done for you

An examiner takes the case

A credentialed examiner works the case end to end and stands behind the report.

Who it is for: anyone in a crisis, on a deadline, or who wants the case off their plate
What you get: a credentialed examiner, the same forensic output and chain of custody
Your effort: hand over the devices or accounts, and we do the work
Price and billing: Fixed fee by number of devices. You see your exact price before you sign.

Start my case

Self-serve

Run it yourself

Fully automated digital forensics you run yourself. SleuthX automates a digital investigation end to end, from collecting and analysing the evidence to a report with every finding cited.

Who it is for: hands-on people who want to see what happened for themselves
What you get: A SHA-256 hash of every file as it is added, re-checked against the stored copy; An append-only chain-of-custody log; Every finding cited to the evidence it came from; An examiner's review when you want one
Your effort: you add the evidence and steer the investigation
Price and billing: $200/mo, billed monthly and renews until you cancel. Includes $200 of usage credit each month. The credit resets at the start of each billing month and does not carry over. Usage beyond it draws down a prepaid balance you top up in-app, and top-ups never expire.

Create your account

Automated output is prepared to evidentiary standards. Before you rely on it in court, a qualified examiner has to review it and be able to certify the work.

Why this work matters

OSINT investigation services cover what modern cases actually need: identity verification, harassment documentation, and exposure mapping, all using lawful, documented methods.

Quinn holds 9 active certifications across GIAC.

Frequently asked about OSINT investigations

What is OSINT and what can you actually find?

OSINT (Open Source Intelligence) is the systematic collection and analysis of publicly available information from social media, public records, court filings, business registrations, news, image and video archives, dark-web forums, and structured data sources. Findable: identity verification, alias linking, employment and address history, business affiliations, social network mapping, behavioral patterns, threat indicators, and infrastructure ownership for online accounts. We use lawful sources only, with no hacking, no impersonation, and no unauthorized account access.

Is OSINT investigation legal?

Yes when conducted properly. OSINT relies entirely on publicly accessible information accessed through lawful methods. The practice does not engage in pretexting, impersonation of law enforcement, unauthorized account access, hacking, or any technique that would violate state PI licensing rules, federal CFAA, or state computer-crime statutes. Where a Florida private-investigator license is required for the deliverable (certain pre-employment investigations, surveillance components, or specific evidentiary chains), SleuthX coordinates that work through its licensed-investigator partner network. Expert testimony on the digital-forensics work, where a matter needs it, is arranged per matter.

How is OSINT different from hiring a private investigator?

Significant overlap, different specializations. Traditional PIs are strong on physical surveillance, in-person interviews, and field investigation. OSINT specialists are strong on digital-evidence collection, social-network analysis, large-data correlation, and infrastructure tracing — which is most of what modern investigations require. Many cases benefit from both; we partner with licensed PIs in Florida and elsewhere when an engagement requires field work alongside our digital analysis.

Who hires you for OSINT?

Attorneys (pre-litigation diligence, asset tracing, witness vetting, deposition preparation), corporate clients (pre-employment senior-hire investigation, M&A target due diligence, IP-theft suspect investigation, fraud investigation), individuals (identity verification of someone they're considering a business or personal relationship with, romance-scam investigation, threat assessment), and family offices (principal-protection threat scanning, vendor and household-staff diligence).

Will the subject of the investigation know?

We use public sources only, and we do not contact the person. We also do not contact people in their network or interact with their accounts. Where an engagement would require any interaction (rare, and only with attorney coordination), we discuss it with you before we proceed.

What does it cost, and can I pay over time?

A device examination is a fixed price set by the number of devices: one, two to three, or four to five. Each price includes a set number of examiner hours. You can start with one device, and you can ask about paying over time. You see your exact price before you sign.

Where are you, and do I have to send my phone?

We are based in Naples, Florida, and examine devices in Naples and in California. Before any work starts you sign one page: the agreement and the chain-of-custody form. The agreement you sign explains how to hand over or ship your device.

What if the examination finds nothing?

We do not promise a result. You get a written report on completion covering each device and each account you sent, whatever it shows.

Can you show who did it?

An examination can show what happened on a device or account, and when. It often cannot show who was behind it, and we will not tell you it can.

Will police, a court or my lawyer take it seriously?

We cannot promise how police, a court or a lawyer will treat the report. We can tell you what it contains: the hash values, the method, the tools and their versions, and the exhibits.

What happens next, and how long does it take?

You sign the engagement letter, and your card is charged when you sign. Most examinations are finished one to two weeks after you sign, provided your devices reach us promptly. If you need it sooner, ask us to rush it.

Is this a person or an AI?

This line is answered by the SleuthX team, and by the SleuthX assistant, an AI, when the team cannot pick up. A named examiner examines your device and signs the report.

Whose device can you examine?

We examine only a device you own. Before we start, you sign a form stating that you own it. If that statement is false, the evidence can become unusable in court.