Private digital intelligence unit
Internet Intelligence Service produces digital intelligence, cyber exposure and due diligence reports for individuals, executives, companies and advisers. We locate useful information, verify it, place it in context and turn it into practical options, using only lawful sources and client-supplied material.
Direct access
Start with the decision or risk you face. Each route explains the relevant scope, sources and deliverable.
Active fraud, threat or crisis? Protect people and access first, preserve useful evidence, then describe the urgency without sending sensitive data.
Doctrine
We turn public traces, weak signals, web history, already visible leaks, social networks, registers, indexed content and reputation anomalies into a clear view of risk. A single search result is never enough: information is traced to its origin, dated, compared with other sources and placed within the wider timeline.
Our approach prioritises rigour, discretion, evidence preservation, competing hypotheses and a clear separation between established fact, credible signal and unresolved possibility. The final brief is written for decision-makers: what is known, what remains uncertain and what action is reasonable now.
Data & qualification
A volume of search results is not intelligence. Every useful element is linked to its origin, dated, corroborated and assessed before it reaches the final brief. This model separates established facts, signals requiring confirmation and unresolved gaps.
Every conclusion retains a review path to the material that supports it and states its limitations explicitly.
Bars show the relative place of each family in this visual model, not a volume of client data.
2025 public data
Three complementary official scopes: events handled in France, incidents analysed across the European Union and assistance requests from French audiences. These figures describe different populations and should not be added together.
Official logos are displayed solely to identify the organisations whose data is cited. Their presence does not imply affiliation, partnership or endorsement of Internet Intelligence Service.
How to read: data published by the cited organisations and accessed on 24 August 2026. Definitions of an event, incident and assistance request differ between sources. Changes are those reported by the source organisations.
Capabilities
Every mission begins with strict scoping: legitimate purpose, authorised perimeter, lawful sources, confidentiality level and expected deliverables. This first stage removes irrelevant noise, identifies the questions that matter and limits collection to information that can genuinely help the client.
Mapping of identities, aliases and public assets across domains, social profiles, publications, archives and accessible registers. Relationships are documented with confidence levels so that a possible connection is never overstated.
Explore OSINT investigation →
Monitoring of public exposure, already visible leaks, impersonation, typosquatting and hostile mentions. Findings are ranked by urgency and translated into practical defensive priorities.
Explore cyber monitoring →
Structured risk analysis before partnerships, sensitive hires, investments, acquisitions or disputes. The report compares stated claims with public facts, meaningful inconsistencies and questions that still require direct confirmation.
Explore digital due diligence →
Support with scams, harassment, impersonation, blackmail, damaged reputation or a worrying online relationship. Available traces are organised into a timeline to clarify events and preserve useful evidence.
Discuss a personal situation →
Narrative analysis, relay mapping, manipulation signals and assessment of the visible media footprint. The report distinguishes an isolated criticism from a lasting dynamic and recommends a proportionate response.
Explore online reputation →
Rapid initial assessment, a verified timeline, urgency levels and a clear action plan for executives, legal teams, communications advisers or families facing an active situation.
Explore the operations team →Individuals & leaders
Companies & advisers
Protocol
We define the objective, legitimate purpose, urgency, people concerned, useful perimeter and legal limits before research begins.
Relevant open sources, registers, search engines, archives, networks and specialist monitoring are consulted, with links and dates preserved for review.
Information is sorted, corroborated and assigned a confidence level. Competing explanations and blind spots remain visible whenever the evidence is incomplete.
The report combines a verified timeline, supporting evidence, ranked risks, an executive summary and recommended actions that can be prioritised immediately.
Resources & reference points
Warning signs, urgency, preserving useful evidence and essential terminology: our resource centre helps you organise the first hours of a sensitive situation.
Explore the resourcesFrequently asked questions
An OSINT investigation collects and corroborates lawfully accessible information from search engines, registers, archives, websites, social platforms and client-supplied material. The work checks origin, date, consistency and relevance while excluding intrusion, private interception and access-control circumvention.
A mission can help before a sensitive decision, partnership, hire, investment or acquisition, and when fraud, impersonation, harassment, reputation damage or a digital crisis makes it important to establish a reliable timeline. Initial scoping confirms whether open-source research can provide a useful answer.
Depending on the mission, it includes a decision brief, a timeline, dated sources and confidence levels, ranked risks, unresolved questions and recommended actions. The summary supports quick reading while the detailed sections preserve the evidence and reasoning.
Initial scoping limits requested information to what is necessary. Scope, recipients and deliverables are defined before collection, with additional care for sensitive material. The first message should summarise the situation without passwords, identity documents, banking data or unnecessary attachments.
Research can be appropriate when it serves a legitimate, proportionate purpose such as a business decision, fraud prevention, personal protection or verification of claims already made public. It remains limited to useful, lawful information available without bypassing private access.
Timing depends on urgency, the number of entities, languages, jurisdictions, research depth and the quality of the starting material. A rapid initial brief may be possible in some cases, while multi-source or cross-border work requires more corroboration. Timing is confirmed after scoping.
The report is designed for review: dated facts, traceable sources, a timeline, confidence levels, caveats and next-step options. It can support legal, executive, cyber, communications or HR teams, but it does not replace their own professional assessment.
Protect the people and accounts concerned, notify the appropriate provider or authority and preserve URLs, messages, dates, identifiers and unedited captures. For immediate danger, extortion, bank fraud or confirmed compromise, contact the relevant emergency, banking, insurance or law-enforcement service without delay.
Confidential channel
Browse by objective
