Hard to find. Hard to hurt.
Four words struck into the coin in your hand. They are also the whole of what this firm does, and the reason someone thought you should be holding one.
Given, not sold
A coin is not a credential. The person who handed it to you is. Someone who has been through this work decided your situation warranted an introduction, and that is the only vetting either of us needs to begin. This page is deliberately short. You were not sent here to be sold to, so it covers what the work is, what the first conversation costs you, and what happens if it turns out not to fit.
One conversation · Twenty minutes · No deck · No obligation either way
The coin says what
the firm does.
Two halves, and they are not the same problem. One is about what can be found about you. The other is about what is already pointed at you. Most engagements need both, and the balance between them is what the first conversation settles.
Reduce
Find what can be found about you, then remove it.
- Exposure Discovery across brokers, breach and stealer corpora, public records, open sources and identity infrastructure
- Continuous removal and suppression against what the audit finds, held through the year by a named analyst
- Coverage extended to the household and the people an adversary would route through
- Training, because the habits are the part only you can hold down
ThreatWatch and Groundtruth
Some exposure cannot be removed, and some attention is already there.
- Analyst-read monitoring of the record that will not move and the attention pointed at it
- Escalation when digital intent starts showing signs of moving into the physical world
- Attribution when something is already happening: who is doing this, and what can they do
- Findings in a form counsel, a platform, or law enforcement can act on
You will get a number, then a second one.
Most firms in this market report their own activity: records requested, alerts sent, sources scanned. Those figures go up whether or not you are safer.
The Threat Surface Index scores what an adversary can find about you and what is already pointed at it, across four variables, three of which respond to work. The audit sets it. The work moves it. The annual refresh states the difference, variable by variable, so a score that fell because hostile attention cooled is not confused with one that fell because the exposure was removed.
Month twelve, band Moderate
Illustrative, not a client matter
What actually happens if you write.
A short call, on a channel you pick
Twenty minutes, by Signal or phone. No deck, no discovery script, no second person from sales on the line. You describe the situation in your own words.
We tell you which part of this it touches
Reduce, watch, counter, or none of them. If what you are dealing with is a cybersecurity problem or a physical security problem rather than an exposure problem, that is a useful thing to learn in twenty minutes.
If it fits, we scope the audit
Exposure Discovery is where every engagement starts. It returns your score across all four variables, a written report naming what can move and what cannot, and a private readout.
If it does not fit, we say so on the call
And where we can, we tell you who does handle it. There is no follow-up sequence. The person who referred you is not told either way.
What this is not.
Stated plainly, because the fastest way to waste your time is to let you assume the wrong thing about what you were handed.
It is not cybersecurity
Your corporate stack protects systems. This work addresses the personal data layer those tools were never pointed at. The two sit beside each other and neither substitutes for the other.
It is not a data removal subscription
Opt-out services file requests against a broker list. That work leaves the underlying records, the alternate selectors, and the downstream copies intact, which is why a profile can disappear from one surface and stay recoverable from three others.
It does not reach zero, and it does not predict an attack
An ambient exposure floor is always present, and the Index says so rather than rounding it away. No instrument tells you that something will happen. Any firm offering one is selling a feeling.
We do not contact the person who referred you
Not to confirm, not to thank them, not to close a loop. The relationship between you and whoever handed you the coin is yours. It is the first thing we protect, and it is protected whether or not you ever write.
You cannot buy anything on this page
There is no cart, no plan selector, and no price on this page by design. Scope is set with you on a call, because the same figure means different work for a client alone and for a client with a household and an organization behind them.
Send a few sentences. A person reads it.
No automation, no queue, no lead score. If you would rather not type into a browser at all, the channels below are equally welcome and slightly better.
This is a web form. Do not put account numbers, passwords, specific threats, medical or legal detail, or information about other people into it. Tell us only enough to know whether we can help. We will move to a channel that can hold the rest before you send it.
Or skip the form entirely.
- Signal
- Preferred. Ask for the number or for access to the ObscureIQ secure room and we will send it. We do not publish the handle.
- Encrypted email
- info@obscureiq.com
PGP key and fingerprint on request. - Scheduled call
- A private booking link is held for referred inquiries. Ask and we will send it.
- Phone
- 855.76.ERASE
Do not leave sensitive detail on voicemail.