Black Mirror
Assessment.
The thesis,
in plain language.
The premise of a Black Mirror Assessment is to look in the same mirror an adversary would. We run the same searches, query the same forums, pull from the same breach corpora, and assemble the same exploitable profile that a sophisticated targeting operation would assemble against the subject - but we put it in the subject's own hands, with a remediation plan.
Executives, family offices, family members, and key personnel are the typical subjects. The deliverable is a sealed report accessible only by the subject and the engaging principal.
What it does,
operationally.
OSINT sweep
Social media profiles, professional records, public databases, property records, court filings, photography metadata - everything an opportunistic adversary would collect.
Dark web exposure
Search of dark web forums and breach corpora for compromised credentials, leaked PII, hacker-database appearances, and active sale listings.
Risk assessment
Identification of exposure that materially elevates physical, financial, or reputational risk - and which signals would-be adversaries treat as a green light.
Family + close-ties scan
Optional inclusion of family members and immediate ties - adversaries frequently pivot to the principal through softer targets.
Mitigation playbook
Concrete remediation: data broker removal, privacy setting changes, credential rotation, posture changes - prioritized by risk reduction per unit of effort.
Re-assessment cadence
Annual or semi-annual re-runs measure remediation success and surface new exposure that has accumulated since the prior assessment.
The audience.
See BMA in action.
Demos are run live with a senior analyst. Bring your hardest problem.