OSINT investigations
OSINT investigations: see yourself the way attackers do
Before attacking, criminals research. We investigate your organisation, domains and key people across public sources, breach data and the open web, and show you what's exposed so you can deal with it first.
Staff work credentials found in public breach data
Reset the affected accounts, enforce multi-factor authentication, and monitor for new exposures.
Coverage
What we test
We agree the exact scope with you on the scoping call. These are the areas we typically cover.
Organisation
- Domains, subdomains and digital footprint
- Exposed documents and data
- Technology and vendor footprint
People
- Executive and VIP exposure
- Leaked work credentials
- Social engineering risk assessment
Brand
- Look-alike and phishing domains
- Fake profiles and impersonation
- Brand abuse monitoring
Investigations
- Due diligence on partners and vendors
- Background research for legal teams
- Fraud and threat-actor research
Deliverables
What you receive
- Exposure report ranked by risk
- Evidence for every finding
- Takedown and remediation guidance
- Optional ongoing monitoring
- Access to the GladiatorRX OSINT platform
Aligned to Powered by GladiatorRX OSINT
Is it right for you?
Choose this if…
- You want to understand your attack surface
- Your executives are public-facing
- You're seeing phishing or impersonation
- You need due diligence before a deal or partnership
Process
How the engagement runs
Scope
A 30-minute call to agree on targets, testing windows and rules of engagement. You get a fixed quote.
Map
We map what's in scope: features, user roles, integrations, and anything exposed that wasn't on the list.
Test
Hands-on testing by certified testers. Critical issues are reported to you straight away.
Report
A summary for leadership, plus a detailed finding for each issue with evidence and a specific fix.
Retest
We verify your fixes and issue an updated report and attestation letter.
FAQ
OSINT investigations: common questions
Is OSINT legal?
Yes. We work only with publicly available and lawfully obtained information, and we follow Indian law, including the DPDP Act, when handling personal data.
Can we use the platform ourselves?
Yes. The GladiatorRX OSINT platform is available to client teams at osint.gladiatorrx.in.
Is this a one-off or ongoing?
Both. A one-off assessment gives you a baseline, and monitoring alerts you to new exposures as they appear.
Related
Often combined with
Penetration testing
Hands-on security testing of your web applications, networks and cloud by certified testers.
PTES · OWASP WSTG · NIST SP 800-115 Learn moreVulnerability assessment
A broad, verified sweep of your infrastructure for known weaknesses and missing patches.
CVSS 3.1 / 4.0 · NIST SP 800-115 Learn moreAPI security testing
In-depth testing of REST, GraphQL and gRPC APIs, covering access control, authentication and business logic.
OWASP API Security Top 10 Learn moreFind out where you're exposed before an attacker does.
Tell us what you need tested. We'll reply within one business day with questions or a fixed quote.