Proposed Open Source Intelligence Plans

Open Source Intelligence helps organizations identify and understand security-relevant exposure across lawfully accessible public information.

Relevant intelligence for clear decisions

Proposed recurring intelligence designed around organization, sector, technology, and operational priorities.

Intelligence options

Review the proposed levels of support.

Plans are currently in development. Enrollment and pricing will be announced before launch.

Essential

Proposed design: Recurring external-exposure summaries that help organizations understand notable changes in publicly available information.

Designed for: Small security teams
Organizations establishing external-exposure visibility
Teams needing concise OSINT findings without extensive customization
Proposed coverage: Public domain and subdomain discoveries
Public infrastructure references
Organization and brand mentions
Public breach and credential-leak references from lawful sources
Notable exposure changes
Prioritized implications
Concise executive and technical summaries
Proposed collection scope: Approved organization, public-source, and exposure topics
Proposed delivery frequency: Frequency to be finalized
Proposed customization: Organization and topic focused
Limited collection tailoring
Proposed delivery format: Recurring external-exposure summary
Proposed analyst interaction: Standard written delivery
Limited clarification support
Exclusions: Continuous surveillance
Personal investigations
Intrusive collection

Highlighted proposed option

Professional

Proposed design: Customized monitoring that tracks organization-specific public exposure, brand risk, infrastructure references, and other approved external indicators.

Designed for: Security teams
Risk and compliance teams
Organizations needing recurring external-exposure monitoring
Teams with defined brands, domains, technologies, vendors, or leadership concerns
Proposed coverage: All Essential coverage
Organization-specific domains and infrastructure
Brand impersonation and abuse indicators
Public code and document exposure
Vendor and third-party exposure indicators
Public employee and leadership exposure relevant to organizational security
Public discussion and social-media risk indicators
Change detection across approved sources
Executive and technical reporting
Proposed collection scope: Approved organization, brand, infrastructure, vendor, and topic priorities
Proposed delivery frequency: Frequency to be finalized
Proposed customization: Organization, brand, infrastructure, vendor, and topic driven
Proposed delivery format: Customized recurring open-source monitoring
Proposed analyst interaction: Scheduled analyst clarification or outbrief support
Final availability to be approved
Exclusions: Unauthorized access
Intrusive surveillance
Guaranteed discovery

Strategic

Proposed design: Highly tailored open-source intelligence and analyst research for organizations with complex exposure, brand, supply-chain, or decision-support requirements.

Designed for: Leadership teams
Mature security and intelligence programs
Critical-infrastructure organizations
Organizations needing tailored research and analyst support
Proposed coverage: All Professional coverage
Customer-defined OSINT requirements
Deeper analyst research
Organization-specific research questions
Tailored exposure and risk analysis
High-priority finding escalation, subject to approved policy
Executive briefings
Technical analyst outbriefs
Custom reporting structure
Proposed collection scope: Customer-defined, authorized collection requirements and approved sources
Proposed delivery frequency: Frequency to be finalized
Proposed customization: Highly tailored to approved collection requirements
Proposed delivery format: Tailored OSINT and analyst research
Proposed analyst interaction: Recurring analyst support
Executive and technical outbriefs
Final availability to be approved
Exclusions: Personal investigations unrelated to organizational security
Pretexting or access-control bypass
Unlawfully obtained data

Who it supports

Organizations seeking a defensible view of public exposure
Security and risk teams monitoring brand, infrastructure, and third-party signals
Leaders who need public-source findings translated into clear priorities

Planned delivery formats

Concise executive and technical summaries
Customized recurring open-source monitoring
Tailored research and analyst outbriefs, subject to final approval

Legal and ethical collection

Responsible OSINT

Recon One limits OSINT work to publicly available information; approved lawful commercial or licensed sources; customer-authorized requirements; organization-focused security and risk purposes; documented sourcing and confidence; and appropriate data minimization and retention controls.

Within scope

Public domain, subdomain, infrastructure, brand, and impersonation indicators
Public employee or leadership exposure relevant to organizational risk
Authorized, lawful credential-leak and breach references
Vendor, public code, document, social, and discussion exposure indicators
Approved change detection and organization-specific research questions

Outside scope

Unauthorized access, account compromise, or bypassing access controls
Pretexting, intrusive surveillance, or stalking
Personal investigations unrelated to organizational security
Acquiring unlawfully obtained data
Publishing unnecessary personal information

Read the Acceptable Use Policy,Data Handling and Security,Privacy Policy, andResponsible Disclosure drafts.

Define the intelligence requirement first.

Tell us the decision you need to support. Do not send sensitive evidence through the general contact channel.

Discuss an intelligence requirement Explore intelligence options