Exposure Assessment
See what somebody researching you from the outside could learn.
Information about you is spread across websites, social media, public documents, news coverage, old profiles, breach records and other sources.
Most of it means very little on its own.
An Exposure Assessment brings those pieces together and asks a more useful question:
What does this information make possible when somebody connects it?
What an assessment does
We approach your public footprint from the outside.
We search relevant sources, document what we find and look for relationships between information that may not be obvious when each item is viewed separately.
- A public biography may reveal your role.
- A conference programme may reveal where you will be.
- A tender document may reveal a supplier.
- A professional profile may identify the person who handles your requests.
Together, those details can provide much more context than any one source intended to reveal.
What we may review
The exact scope depends on the engagement.
Relevant sources can include:
- Public websites
- Search engines
- Public documents and PDFs
- Archived pages
- News coverage
- Professional and social profiles
- Company information
- Public contact information
- Images and associated metadata
- Relevant breach exposure indicators where lawfully available
- Public-facing infrastructure visible without active testing
- Other lawful open sources relevant to the assessment
We do not break into systems or bypass access controls.
What we are looking for.
We are interested in information that helps answer questions such as:
- Who appears to have authority?
- Which relationships are visible?
- What contact information is exposed?
- What personal or organisational routines can be inferred?
- What public documents reveal more than intended?
- Can information from several sources be combined into a convincing pretext?
- Are old details still available that no longer need to be public?
- Does public-facing infrastructure reveal unnecessary information?
- Are there signs of relevant historical data exposure?
The purpose is not to produce the longest possible report.
It is to identify what matters.
What you receive.
- Findings
- A structured explanation of significant exposure identified during the assessment.
- Evidence
- Relevant findings are linked back to the source material supporting them.
- Context
- We explain why a finding matters and what someone could reasonably do with the information.
- Priorities
- Findings are organised by practical importance rather than simply by how interesting they are.
- Recommendations
- Where appropriate, we explain how exposure can be reduced without unnecessarily limiting your professional or online life.
- Briefing
- We walk through the assessment with you and answer questions about the findings.
The goal is not to disappear.
Being visible is often part of doing business.
- Executives speak publicly.
- Companies publish reports.
- Professionals build networks.
- Organisations announce projects.
The answer is not to remove everything from the internet.
The objective is to understand what is public, decide what serves a legitimate purpose and reduce exposure that does not need to be there.
What this is not.
An Exposure Assessment is not:
- A penetration test
- A vulnerability scan
- A compliance audit
- An attempt to access private accounts
- A promise that every piece of information online will be found
- A guarantee that an attack will not happen
It is an outside-in assessment of publicly accessible information and the context that information creates.
How we work
Outside-in, with clear boundaries.
Good research is not just about what can be found. It also depends on why the work is being done, what is in scope and how conclusions are reached.
Defined scope
We agree what we are researching and why before the work begins.
No passwords
We do not need passwords, one-time codes or access to private accounts for our services.
Evidence behind findings
Significant findings should be traceable to the information that supports them.
Human review
Automation can help find and organise information. A person remains responsible for interpreting it.
Ready to see your public footprint differently?
Tell us what prompted the assessment and who or what you would like included.