kom·pro·mat
Eyes only

kom·pro·mat

/ˌkämprəˈmät/  ·  n.

Compromising information collected for use in blackmailing, discrediting, or manipulating someone, typically for political purposes.

Four documented ways to build it. Six disciplines to find it before someone else does. We work the literature, not the folklore.

Streamed in AV1 / VP9 / H.264 — the browser takes what it can decode. Nothing is fetched until you ask for it.


§ 01 — The attack surface

Four vectors. We work all of them, and we know which one you are standing in.

Compromising material is not a novelty. It is an industry with a documented method set — surveillance and entrapment, fabrication, data mining, and the paid outlets that move it. Every dossier in it was assembled by one of these four. We read the same literature you are reading.

V1

Surveillance & entrapment

Physical observation, hidden capture, and the engineered encounter designed to produce material. The oldest vector and still the one that produces the hardest evidence to disown.

stakeout · capture · pretext

V2

Fabrication

Edited media, manufactured scandal, staged scenes and synthetic voices. The vector that exploded with generative tooling — and the one that made detection a discipline instead of a favour.

synthetic media · staging · provenance

V3

Data mining

Social platforms, breach corpora, leaked databases and public records, trawled for the one fact that embarrasses. Cheap, wide, and indifferent to whether the target ever notices it happened.

OSINT · corpora · registry

V4

Paid distribution

The clearinghouses and gray boards where dossiers are submitted and stories are scheduled for a fee. Where material stops being a document and becomes a product with a release date.

boards · outlets · scheduling


§ 02 — The mandate

Six disciplines. One rule: nothing we say is invented.

Every engagement begins with material that already exists — filings, footage, metadata, testimony, paper trails. We find it, we verify it, and we tell you exactly how fragile it is. Some clients prefer the version we do not write down.

01

Digital identity forensics

Deepfake detection and media authentication. We test whether an image, a voice or a face was manufactured, and we reconstruct the provenance of what circulated.

C2PA · forensics · provenance

02

Ownership & structure mapping

Beneficial owners, nominee directors, layered shells and the jurisdiction that was chosen on purpose. The structure is always the confession.

Registry · corporate · offshore

03

Exposure assessment

What damaging material already exists, where it is indexed, and who has a copy — before it moves. You learn your leverage and your blind spots in the same week.

OSINT · surface mapping

04

Trace & chain of custody

We locate the origin of leaked material and document how it travelled — so a document has a history you can put in front of a court.

Attribution · timeline · evidence

05

Litigation & regulatory support

Evidence assembly, witness mapping, document production and technical narrative for counsel. Written for a room where the outcome matters more than the tone.

Discovery · testimony · reporting

06

Counter-intelligence

Leak detection, insider risk and protective intelligence for organisations that assume someone inside is already talking.

Monitoring · detection · protective


§ 03 — The two questions

Two facts decide everything, and most people asking do not know either.

The literature is unusually consistent on these two points, and both of them change what a client should do on day one.

Q1

Held, or published?

Western opposition research publishes the material immediately — the story is the product. Traditional practice does the opposite: it is held in reserve, quietly, as a leash that keeps working for as long as the silence holds.

The same dossier is two entirely different problems. One is a story you rebut in a week. The other is a constraint you live inside for a year. Before anything else we establish which one you are actually in.

timing · posture · durability

Q2

Who is holding it?

The practice did not start in private hands. It started with the KGB and the NKVD, and when the Soviet Union ended, the personnel went private and the market opened to anyone with the skills.

That distinction is not academic. A state actor has objectives, reporting lines and a long horizon. A private operator has a client and a deadline. The same material, sourced from the same place, means something completely different depending on who is sitting on it.

provenance · actor · motive


§ 04 — The channel

Your brief is sealed in your browser. The host never reads it.

This page contains no analytics, no third-party scripts, no fonts from a CDN, no cookies. Nothing you type leaves the machine in a form the server can read.

  1. You write a brief and choose a passphrase. The passphrase never leaves this tab — it derives a key locally.
  2. Your browser encrypts it with AES-256-GCM, under a key wrapped to our public key. The web host receives ciphertext and a random identifier.
  3. The host stores nothing readable. Not your name, not your address, not your IP in the payload, not a subject line. It is a bucket with a lid.
  4. We read it offline on a machine that has never touched the host, and we reply under a key only your passphrase opens.
  5. You retrieve the answer with your passphrase and a receipt token. The reply is sealed to you alone.
Secure channel sealed

Encrypted on this device before transmission.

Left blank, we address you as unnamed.

You need it to read the reply. We cannot recover it for you.

After the window closes, the ciphertext is destroyed.