OSINT Investigations & Digital Footprint Assessments
Discover what publicly available information reveals about an individual, executive or organisation.
TenIntelligence conducts independent OSINT investigations and digital footprint analysis to identify hidden connections, online exposure, reputational risks and information capable of supporting fraud, impersonation or social engineering.
Using lawful, evidence-based research across open sources, social media, corporate records, online networks and relevant deep and dark web sources, we turn fragmented digital information into clear, actionable intelligence.
Have a question? Connect with a TEN Expert
OSINT Investigations and Digital Footprint Assessments
The information available online can reveal considerably more than most individuals and organisations realise. Corporate records, social media activity, historic websites, online profiles, data breaches and other digital sources can be combined to identify relationships, activities, vulnerabilities and inconsistencies that may not be visible through conventional enquiries.
TenIntelligence provides two complementary services. Our OSINT Investigations examine the digital footprint of an individual, company, counterparty or matter to develop intelligence and support decision-making. Our Digital Footprint Assessments help clients understand what information is publicly available about themselves, their executives or their organisation—and how that information could be exploited.
Who Is It Valuable For?
OSINT investigations and digital footprint assessments are valuable for:
- High-net-worth individuals, families and family offices
- Boards and Leadership Teams assessing executive or organisational exposure
- Corporate security teams assessing threats to senior personnel
- Organisations responding to impersonation, data exposure or online harassment
- Compliance and risk teams investigating integrity or reputational concerns
- Organisations conducting due diligence on executives, investors, counterparties or business partners
- Legal advisers requiring intelligence to support litigation or disputes
- Fraud investigators seeking online evidence, identities or connections
- Investors and corporate finance teams evaluating potential transactions
- Businesses operating across unfamiliar or higher-risk jurisdictions
Why Is It Valuable?
Online information is fragmented across multiple sources and may appear insignificant when viewed in isolation. When collected, verified and analysed together, it can reveal hidden relationships, undisclosed activities, inconsistencies and potential vulnerabilities.
An OSINT investigation or digital footprint assessment can help an organisation:
- Understand how executives or organisations could be targeted
- Reduce exposure to impersonation, phishing and social engineering
- Identify adverse information before it develops into reputational harm
- Prioritise practical security and remediation measures
- Make better-informed decisions about individuals and companies
- Identify risks not revealed by conventional database screening
- Detect undisclosed relationships and potential conflicts of interest
- Support fraud investigations, litigation and enhanced due diligence
- Establish an evidence-based baseline for ongoing monitoring
TenIntelligence converts fragmented online information into clear, source-referenced and actionable intelligence, helping clients understand not only what has been identified, but why it matters.
OSINT Investigations
Our OSINT investigations use lawfully accessible information to establish facts, identify relationships and develop intelligence about an individual, company, counterparty or specific matter.
By examining information across online sources, social media, corporate records, media archives, public databases and relevant digital networks, we can identify:
- Online identities, aliases and associated accounts
- Undisclosed corporate, professional or personal connections
- Adverse information and potential reputational concerns
- Conflicts of interest and connected business activities
- Inconsistencies in reported employment, experience or commercial histories
- Relevant locations, events and patterns of online activity
- Companies, assets and wider networks connected to the subject
- Digital evidence capable of supporting fraud investigations, litigation, disputes or due diligence enquiries
Information is verified across multiple sources wherever possible. Our reporting distinguishes established facts from allegations, analytical findings and matters that remain unconfirmed, giving clients a clear and balanced basis for decision-making.
Digital Footprint Assessments
A digital footprint assessment examines what information can be discovered about an executive, high-net-worth individual, family or organisation through publicly and lawfully accessible sources.
Individual pieces of information may appear insignificant in isolation. When combined, however, they can reveal identities, relationships, locations, routines and commercial interests that could be exploited for fraud, impersonation, social engineering or other security threats.
Our assessments can identify:
- Exposed personal and professional information
- Email addresses, telephone numbers and other contact details available online
- Indicators of credentials exposed through historic data breaches
- Information capable of supporting phishing, impersonation or social engineering
- Lookalike domains, duplicated accounts and potentially fraudulent profiles
- Disclosed residences, locations, travel patterns and regular routines
- Information published by family members, employees or associated organisations
- Executive and Board-level digital exposure
- Online threats, harassment and adverse commentary
- Reputational vulnerabilities and potentially damaging historic content
Findings are assessed according to their reliability, accessibility and potential impact. The client receives a prioritised report explaining what has been identified, why it matters and what practical steps can be taken to reduce unnecessary digital exposure.g.
Insights & Case Studies
-
Posted in:
What Russia’s shadow fleet reveals about sanctions risk
Sanctions screening is an established part of assessing third-party risk. A counterparty and other relevant parties are checked against applicable sanctions lists, potential matches are investigated, and the findings help inform decisions about whether and how to proceed. However, what should be done when the screening outcome is straightforward, yet the broader relationship remains ambiguous?…
-
Posted in:
How FCA and Data Protection Complaints Handling Intersect?
After nearly two decades in compliance, I have come to the conclusion that FCA complaints and data protection complaints have more in common than most people realise. Before anyone starts drafting an objection, I am not suggesting they are the same thing. They aren’t. They are covered by different laws. They involve different rights, create…
-
Posted in:
Social Media Data Collection: Protecting Customer Data
Social media is everywhere, in healthcare, finance, education, retail, and government. If your organisation uses platforms like Instagram, LinkedIn, TikTok, or Facebook, you are almost certainly handling personal data. That means you must follow data protection laws like the GDPR and the Privacy and Electronic Communications Regulations (PECR), along with, where relevant, the EU AI…
✴
Digital Footprint and Personal Security Review For a HNW.
A high-net-worth individual instructed TenIntelligence following concerns that publicly available information about their business interests, family and personal movements could expose them to fraud, impersonation or physical security threats.
The client maintained a limited personal social media presence and believed their online exposure was low. However, their involvement in several companies, property interests and public events created multiple indirect routes through which personal information could be identified.
TenIntelligence conducted an extensive OSINT and digital footprint analysis covering the client, relevant family members, connected companies and known online identities.
Although the client disclosed very little directly, information published by connected companies, family members and third parties revealed considerably more.
Our analysis identified historic personal contact details, links between corporate interests and residential locations, photographs containing location information and social media content indicating regular movements and family routines.
The client’s details had also appeared in historic data breaches, increasing the risk of phishing, account compromise and targeted social engineering.
We identified online profiles and domain variations that could potentially be used to impersonate the client or approach professional contacts under a false identity.
TenIntelligence provided the client and their security advisers with a prioritised digital exposure report setting out the information identified, its source and the potential implications.
The findings supported the removal or restriction of exposed information, strengthening of account security and changes to how family members and associated businesses referred to the client online. The review also established a baseline for ongoing digital risk monitoring and future assessment.
✴
OSINT Risk Assessment of a Company’s Executive Board (Pharma)
An international pharmaceutical company required an independent digital footprint assessment of its executive board ahead of a significant corporate announcement and period of increased public attention.
The client was concerned that senior executives could be targeted through impersonation, social engineering, online harassment or the misuse of personal information. It also wanted to understand whether the executives’ publicly visible activities created any undisclosed reputational, integrity or security risks for the organisation.
TenIntelligence conducted a structured OSINT and digital footprint review of the Board and selected members of the Senior Leadership Team.
The review found that several executives had a larger digital footprint than they realised. Personal contact information, historic employment records and details of family connections could be identified across multiple open sources.
Information disclosed through conference biographies, professional profiles and third-party publications made it possible to recreate reporting lines and identify executives with access to commercially sensitive functions. This created credible opportunities for targeted phishing, executive impersonation and fraudulent payment requests.
We also identified lookalike online profiles, historic credentials associated with data breaches and external business interests that had not been consistently recorded within the company’s internal declarations.
TenIntelligence provided the company’s Legal, Compliance and Security Teams with individual executive risk profiles and a consolidated Board-level assessment.
Immediate high-risk findings were escalated securely, while the wider report provided prioritised recommendations covering account security, removal of exposed information, verification of external appointments and executive awareness.
The assessment enabled the company to reduce avoidable digital exposure, strengthen protections around senior decision-makers and improve its preparedness for impersonation, social engineering and reputational threats during a period of heightened scrutiny.
Frequently Asked Questions
Our investigations cover regulatory standing, sanctions, litigation, employment, education, financial records, and reputational checks across jurisdictions.
Typically, 5–15 business days depending on jurisdiction, complexity, and the availability of records.
Yes. All our checks are conducted in line with data protection regulations and local privacy laws.
Yes. We conduct independent interviews with industry peers and former colleagues, ensuring discretion while providing valuable insights.
Yes. Our team speaks multiple languages and works with trusted local partners to conduct research in native languages.