Threat research, breach analysis, and practical OSINT guides: email lookup, username search, data breach checking, and infostealer intelligence, from the Revealer.US team.
A practitioner's guide to Sherlock, the open-source username OSINT tool: install, key flags, false-positive handling, and when a username sweep isn't enough.
Maigret checks far more sites than Sherlock and extracts profile data, while WhatsMyName is the community data standard. Where each tool wins.
How AI Deep Search works: one email, username, or phone number expands into a sourced report of linked accounts, breach matches, and confidence scores.
A plain guide to reverse phone lookup: how to identify an unknown or spam caller, check who called you, and spot scam texts.
How a free people search works: how a name, username, email, or phone number links public records, plus how to check your own exposure and the legal limits.
How to run a background check with public records, social profiles, and breach data, what OSINT research can and cannot show, and the FCRA limits to respect.
A practical breach response playbook: the NIST incident response lifecycle, EU 72-hour notification clocks, and post-incident recovery.
Passkeys and WebAuthn promise passwordless authentication that resists phishing. This piece covers the cryptography on the wire, and the places it does not save you.
How a mid-market fintech used stealer-log alerts to catch a vendor supply chain attack within 48 hours of stolen credentials surfacing.