OSINT Investigations
Pre-deal due diligence. Insider threat profiling. Adversary attribution. We pull from social, public records, breach data, and dark web — and deliver an analyst report you can act on.
The work, defined.
OSINT investigations are bespoke intelligence engagements: a question we answer using open and dark web sources. Pre-deal due diligence on an acquisition target. Background investigation on a key hire. Attribution of an attempted attack. Insider threat profiling. Vendor risk assessment.
Every investigation is staffed by an experienced analyst, not a generalist tool. We collect from social, public records, court filings, breach data, and dark web mentions — then synthesize, source-cite, and risk-score for you.
Reports are decision-ready. They don't dump data. They answer the question.
How we do it.
Scoping interview
30-minute call to define the question, decision context, and acceptable evidence threshold. We tell you upfront what we can and can't find.
Multi-source collection
Social media (active + historical), public records, court filings, sanctions lists, breach databases, dark web mentions, news archives, leaked corporate datasets.
Native-language analyst synthesis
Every report is written by an analyst with subject-matter expertise. We cite sources, attach evidence, and flag confidence levels.
Decision-ready deliverable
PDF report (10–30 pages), executive summary, risk scoring, recommendations. Briefing call optional.
What gets covered.
What you get.
Every engagement includes the deliverables below. Custom outputs available on request.
- Scoping document (pre-engagement)
- Analyst-written PDF report (10–30 pages)
- Source citations with evidence attachments
- Risk scoring (low / medium / high / critical per finding)
- Executive briefing call (45 min)
- Follow-up Q&A window (1 week)
A PE firm requested due diligence on an acquisition target in the SaaS space. The target's filings were clean, but Beralock identified undisclosed regulatory action in a foreign jurisdiction and sanctioned-entity relationships among investors.
The deal was restructured. The PE firm avoided $40M in undisclosed liability exposure. Acquisition proceeded with revised terms and protections.
Details adjusted to protect client identity. Verified case studies available under NDA.
Other services.
Dark Web Monitoring
Long-standing analyst identities in 200+ closed forums, marketplaces, and channels. When your credentials appear, you know — often before the buyer logs in.
Brand Monitoring
Cloned domains, phishing kits, fake profiles, and counterfeit listings — found across surface, deep, and dark web, then removed end-to-end.
Executive Monitoring
Your leaders are the highest-value targets in your company. We monitor doxxing channels, impersonation profiles, and coordinated targeting — and shut it down before it escalates.
See what's exposed about you.
30 minutes. One free exposure report. No commitment. We'll show you what we find — and exactly how we'd remove it.