SleuthX Feature Roadmap
What's live.
And where we're headed.
SleuthX is a live AI forensic investigation platform — triage, a full investigation workspace, an evidence vault with chain of custody, court-ready reports, and live Protections that watch for new exposure. It runs today at sleuthx.ai/app. The personal-security layer below — broader identity and dark-web monitoring and more — is the direction we're building toward, shown here as directional vision rather than a commitment.
Live in the web app today
Available now.
Shipped in sleuthx.ai/app. AI forensic triage, the full investigation workspace, an evidence vault with chain of custody, court-ready reports and exhibits, and live Protections — a free exposure report and breach monitoring for your account email.
AI forensic triage
- An evidence-grade first read in minutes, then analyst-reviewed
- Guided, plain-language incident intake ("describe what's happening")
- Service routing across forensics, fraud, attorney, family-office, and PI matters
- Urgency triage — active threat vs. historical investigation — with evidence-preservation guidance
- Structured checks across accounts, devices, and on-chain data (login and session history, exposure signals, iOS configuration-profile audit, MDM and jailbreak checks, Android package reconciliation)
- One-click escalation to a human analyst; where a matter needs licensed investigative work, SleuthX coordinates it through our network of individually-licensed Florida private investigators — the regulated work stays with them, under their own licenses
Investigation workspace
- AI Chat working the case alongside you
- An investigation Board that tracks the open questions as cards
- Connections — link analysis that resolves people, accounts, devices, and organizations and shows how they relate
- Pivot Dashboards built from your case's identifiers
- Transaction analysis that traces funds across accounts and on-chain hops
- A relationship & genealogy graph for missing-persons, estate, and skip-trace matters
- A narrative workspace that assembles the story of the case
Evidence vault & workspace
- Every item hashed on ingest, with a documented chain of custody from upload to report (File System)
- A per-case vault that keeps evidence organized and its integrity demonstrable if it's ever questioned
- A metered cloud analysis workstation for hands-on examination (Sandbox)
- Enrolled-device management with consent (Devices)
Court-ready reports & exhibits
- A plain-language narrative report of what was found and how
- Numbered exhibits, each tied back to a preserved, hash-verified vault item
- Output an attorney can file or an insurer can act on
- IC3, FBI, and Secret Service filing assistance
- Police-report support letters
Protections — live monitoring
- A free, ephemeral digital-exposure report scanned from public sources
- Breach monitoring for your account email — checks whether it appears in known breach data
- Alerts when a fresh signal appears, one click from an alert into a new triage
Built, not yet switched on
In development.
Code that exists but hasn't gone live yet. These ship dormant today and will switch on as the last pieces land. Please don't buy for them yet — buy for what's available now.
Phone-takeover (SIM-swap) monitoring
- Carrier-signal alerts for SIM-swap and port-out attempts on your number
- Will activate once phone-number verification ships — inert and abuse-safe by construction until then
Personal data removal
- A broker-removal service that will pull your personal data from people-search sites
- Launching soon — the card is live in the app, but the removal workflow is not yet active
The direction we're building
On the roadmap.
The personal-security layer we're building toward: active threat protection, a privacy and connectivity stack, continuous identity monitoring, and encrypted communications and storage.
This roadmap is directional, not a commitment. The items in the tiers below describe where SleuthX is headed; they may change, slip, or be dropped. Please decide based on what's available today, not on what's planned.
Last updated 2026-07-02
Active threat protection
Category we're building toward: Consumer endpoint & threat protection
- Planned: real-time malware and ransomware protection on your devices
- Planned: phishing and malicious-link scanning before you click
- Planned: attachment sandboxing to preview files safely
- Planned: camera and microphone access auditing, with alerts on risky apps
- Planned: Wi-Fi and Bluetooth attack-surface monitoring
Privacy and secure connectivity
Category we're building toward: VPN, password management & private DNS
- Planned: an encrypted VPN connection
- Planned: encrypted DNS with malicious-domain filtering
- Planned: a built-in password manager with breach and weak-password alerts
- Planned: passkey and hardware-key management
- Planned: a privacy-focused browsing extension
- Planned: disposable phone numbers and email aliases for sign-ups
Identity and continuous monitoring
Category we're building toward: Credit & identity monitoring
- Planned: three-bureau credit monitoring, with freeze and unfreeze help
- Planned: account-takeover detection (new device, new location)
- Planned: identity-theft monitoring for new accounts and address changes
- Planned: crypto-wallet monitoring for suspicious activity
- Planned: impersonation monitoring across platforms
Dark-web monitoring (expansion)
Category we're building toward: Full-identity dark-web monitoring
- Available today: breach monitoring for your account email (see Available now)
- Planned expansion: monitoring beyond your account email — across leak markets and forums
- Planned: matching against more of your identifiers, such as phone numbers and addresses
- Planned: severity and freshness classification on exposures
- Planned: forensic context on where and when data leaked
Identity restoration coordination
Category we're building toward: Identity-theft remediation coordination
- Planned: a coordinated recovery path when an identity-theft incident is active
- Planned: guidance for disputes with credit bureaus, banks, and creditors
- Planned: IC3, FTC, and police-report filing assistance
- Regulated remediation is routed to individually-licensed investigators in our network — SleuthX coordinates it rather than performing it
- Planned: a direct line for active incidents, with escalation to Quinn for complex matters
Encrypted communications and storage
Category we're building toward: Encrypted storage & messaging
- Planned: zero-knowledge encrypted file storage for evidence and personal files
- Planned: encrypted backup of selected folders, devices, and cloud accounts
- Planned: secure-messaging and encrypted-email setup help
- Planned: hardware-encrypted drive setup guidance
Exploring for the long term
Long-term vision.
Further out and more exploratory: forensics automation, an OSINT toolkit, security hardening and posture, family and multi-device support, and cyber-insurance and legal navigation. Directions we're considering, not dated commitments.
Forensics automation
Category we're building toward: Consumer-grade device & memory forensics
- Exploring: guided mobile-device acquisition
- Exploring: file-system analysis, including deleted-file recovery
- Exploring: email-header forensics (SPF, DKIM, DMARC)
- Exploring: photo and video metadata analysis
- Exploring: communication-timeline reconstruction across devices and accounts
- Exploring: memory forensics for compromised endpoints
- Exploring: mobile spyware and stalkerware signature scanning
OSINT toolkit
Category we're building toward: Open-source intelligence tooling
- Exploring: reverse image search and image-reuse detection
- Exploring: username and handle correlation across platforms
- Exploring: domain WHOIS, IP attribution, and historical DNS
- Exploring: social-graph mapping across major platforms
- Exploring: public-records and court-records lookup
- Exploring: property, business, and licensing record lookups
Hardening and posture
Category we're building toward: Personal security posture & data-broker removal
- Exploring: a personal cyber-posture audit across devices, accounts, and exposure
- Exploring: per-platform privacy-settings audits
- Exploring: data-broker removal across many brokers
- Exploring: a two-factor-authentication setup wizard
- Exploring: backup and recovery setup
- Exploring: account inventory and cleanup for dormant accounts
- Exploring: a digital estate plan for next-of-kin access
Family and multi-device
Category we're building toward: Family safety & multi-device plans
- Exploring: support for several devices and family members on one plan
- Exploring: family-member onboarding with isolated case files
- Exploring: online-safety flagging for younger family members
- Exploring: an elder-protection mode with family alert routing
- Exploring: a shared evidence vault for family-wide cases
- Exploring: family threat briefings on local scam and breach patterns
Insurance and legal navigation
Category we're building toward: Cyber-insurance & legal-referral navigation
- Exploring: help understanding your cyber-insurance options
- Exploring: claim documentation built from the case file
- Exploring: IC3, FBI, Secret Service, and FTC filing assistance
- Exploring: police-report support letters tailored to your jurisdiction
- Exploring: court-ready expert reporting
- Exploring: an attorney-referral network across practice areas
Most Requested Services
Certified Expertise
GIAC
Roadmap FAQ
Is the SleuthX agent live right now?
What does it cost?
Who reviews the work? Is this just an AI?
Will the report hold up in court?
What about data privacy?
What if my situation needs more than the agent can deliver?
Ready to use the agent
Try SleuthX now.
The agent is live. Open the web app and start a case in under a minute.
Active case right now? Call (239) 241-8095 for direct practitioner support.
Schedule Your Session
Questions about a feature on the roadmap?
Email Quinn directly or schedule a 15-minute call.
Free, confidential · NDA-protected · no obligation.
- 1. Book a 15-minute call — we scope your situation, no charge.
- 2. You get a written scope — deliverables, timeline, and price — before any work begins.
- 3. Approve it and we start; most engagements begin within 48 hours.
