OSINT is not magic. It is method.
I work with publicly available information applied to corporate security. The difference is not in the tools: it is in the reading, cross-verification and operational context. This is the framework I use for every Zero101OSINT engagement.
OSINT (Open Source Intelligence) is the discipline that turns scattered public information into actionable intelligence, with method, chain of custody and judgement. It is a layer that precedes any security decision: executive protection, third-party evaluation, incident response, corporate exposure analysis or digital footprint audit. At Zero101OSINT I apply it as a personal lab, not as a mass industrial service.
What it is
Intelligence built from publicly accessible information. No private systems, no hacking, no purchased leaks. Official registries, technical bases, publications, archive, open data and publicly verifiable leaks consultable without unlawful access.
How it works
Observe → capture → cross-verify → context → hypothesis → document. Every step recorded and reproducible. Time-stamp, confidence level and primary source before aggregator.
What you receive
Actionable, traceable report with findings, hypotheses, confidence level and prioritised recommendations. Plus an operational decision sheet for the security lead. No sales language, no absolute promises.
What I don't do
No abusive scraping, no aggressive social engineering, no sustained fake profiles, no access to private systems. GDPR and LOPDGDD framework. Limited engagements, each evaluated individually.
- Digital footprint audit
- Complete map of domains, subdomains, corporate profiles, exposed executives and externally visible suppliers. Basis to reduce attack surface.
- Executive protection
- Work prior to a security detail: which public information allows anticipating threats, what life patterns are visible, what family and entourage exposure should be reduced.
- Due diligence & third-party evaluation
- Reputational, corporate and operational verification of suppliers, partners, acquisitions and sensitive contracts. OSINT + legal judgement + traceability.
- Reputational risk analysis
- Early detection of hostile campaigns, leaks, impersonation, fraudulent domains and mentions that degrade the brand across open channels.
- Critical infrastructure & AVSEC
- OSINT applied to regulated environments: airports, ports, hospitals, energy. Cross-reference with CER regulation and European directives.
- Legal investigations & compliance
- OSINT support to law firms and compliance departments with chain of custody and documentation admissible under GDPR.
Scope, subjects, time window and operational questions are defined. No question means no analysis: OSINT without a target produces noise, not intelligence.
Ordered capture with time-stamps. Primary sources before aggregators. Preserving the trace without polluting the investigated ground.
Cross-check of at least two independent sources. Dating of every datum, confidence marking and explicit separation between fact, indicator and hypothesis.
Documentation of hypotheses, indicators and gaps. Measured, prioritised recommendations by impact and cost of correction. No alarm, no drama.
All OSINT work at Zero101OSINT is performed within the GDPR, the Spanish LOPDGDD, Law 5/2014 on Private Security and applicable case law in Spain. Sources are public, purpose is legitimate and proportionate, identified subjects are anonymised in any publishable material, and every engagement self-audits: if it cannot be explained to a DPO or a judge, it does not ship.
30+ years of operational context
OSINT executed by someone who has stood on the other side: airports, ports, hospitals, close protection, security direction. The reading is not theoretical.
No commercial layers
No sales team, no automated quotes, no ‘packs’. Every engagement is accepted or declined after understanding the case.
Absolute traceability
Every finding carries source, date, capture hash and confidence level. The report holds up before a DPO, a judge and a CEO.
AI as support, not as source
Models accelerate classification, translation and normalisation. Verification and judgement remain human. So does chain of custody.
Frequently asked questions
Is OSINT legal in Spain?+
Yes, as long as it is limited to publicly accessible sources, respects GDPR and LOPDGDD, and pursues a legitimate and proportionate purpose. Access to non-public information falls outside OSINT.
How is OSINT different from a private investigation?+
OSINT is an intelligence discipline based on open sources, with method and traceability. A regulated private investigation may use OSINT as one of its techniques, alongside other private-security tools.
How long does a corporate OSINT audit take?+
A first exposure map can be delivered in days; a full audit with cross-verification, third-party analysis and prioritised recommendations takes weeks, depending on perimeter.
What deliverable do I get?+
An executive report with findings, hypotheses, confidence level and prioritised recommendations. Plus an operational decision sheet for the security lead.
Do you work with generative AI?+
I use AI as support for classification, translation and normalisation of large volumes. Never as a source and never replacing human verification.
Do you accept any engagement?+
No. Every case is evaluated individually. Engagements that are legally incompatible, ethically problematic or without a clear operational purpose are declined.