You’re being targeted. We build your threat profile.
The Shield — Online Threat Mitigation
from €2,200
~$2,400 USD
A structured threat assessment. Less than the cost of a single incident response engagement.
What Is The Shield?
The Shield is a standalone threat mitigation service. You don’t need to have purchased The Mirror or Lockdown first — it includes its own full identity investigation as the foundation. The starting question is different: not “what’s findable about me,” but “who could be targeting me, what can they build, and what am I inadvertently revealing right now.”
The foundation investigation is our standard digital footprint audit — the same four-category sweep, plus Shield-specific threat assessment and 30-day pattern-of-life monitoring layered on top.
Understanding your threat model is the first step. Read Schrödinger’s Intel: The Zero-Trust Approach to OSINT — our breakdown of how threat actors validate intelligence about their targets, and why passive monitoring is no longer enough.
The 30-day pattern-of-life analysis is unique to this tier. With your explicit consent, we monitor your publicly visible online activity over 30 days to map what your routine, habits, locations, and relationships are inadvertently disclosing — and produce a report on the findings. All collected data is deleted within 48 hours of delivery.
Investigation Foundation Included:
- Username & Account Discovery Across Platforms and Forums
- Google Trace & Associated Account Mapping
- Social Media Profile Assessment
- Profile Photo Cross-Reference & Reverse Image Search
- Dark Web & Breach Database Search
- Corporate Leak & Credential Pair Investigation
- Pastebin & Dark Forum Reference Search
The Shield includes the full Mirror (€595) and Lockdown (€995) investigation as its foundation, then adds active threat assessment, 30-day pattern-of-life analysis, and a 60-minute consultation.
What Digital Executive Protection Means in Practice
Digital executive protection is the practitioner-level discipline that sits between physical executive protection and generic enterprise cybersecurity. Physical executive protection — corporate, VIP, private-residential, armed, close-protection — is a uniformed service. It models the principal as a body to be moved safely. Generic cybersecurity models the principal as a user with an account. Neither addresses the principal as what an OSINT-driven adversary sees: a public name attached to a home address, a family circle, a driving pattern, a mortgage history, an old password from a 2021 breach, and a set of digital handles that link to all of it.
The Shield is the digital layer those services do not cover. The work runs across four practitioner habits.
We map the principal’s exposure surface. Where the home address has propagated across people-search platforms. Which credential pairs sit in stealer-log corpora and combolists. What family members are visible enough to be used as pretext leverage. What conference appearances, board minutes, and signed filings draw a public schedule the principal would not have written down on paper. We report it the way a reconnaissance pass would have prepared it.
We close the openings that close cleanly. People-search opt-outs, broker removals, social surface tightening, registry-data minimisation where the jurisdiction allows it, password and recovery-channel hardening, separation of personal and professional digital infrastructure.
We watch what reappears. People-search hits regenerate. Credentials surface again in new corpora. Every completed Shield engagement is offered the Guardian retainer (€2,400/year) as the ongoing-protection layer that carries the cycle forward.
We escalate when the threat model changes. A targeted impersonation, a suspected location-tracking attempt, a credential turning up in a fresh combolist — these are events, not findings, and the response routing is different.
For principals who also have a family-office context, the Family Office Privacy Pack extends the same discipline across the household; see our analysis on family office cybersecurity for the wider picture.
What’s included in The Shield
Deep Social Media Investigation
Content analysis, geolocation metadata from posts, posting time patterns, and relationship mapping — beyond what surface-level profile assessment reveals.
Online Harassment & Stalker Pattern Assessment
Cross-platform behaviour analysis using found accounts — posting frequency, timing, and message patterns to assess whether coordinated monitoring or targeting is already underway. Physical threats are referred to law enforcement.
30-Day Pattern-of-Life Analysis
With your explicit consent, we monitor your publicly visible online activity for 30 days to identify what your routine, habits, and relationships are inadvertently disclosing to anyone watching.
Social Engineering Vulnerability Profile
We analyse how found data could be used to manipulate, extort, or impersonate you — the profile a social engineer would build before making contact.
Forum History Review & Scrub Coordination
Found items compiled and interpreted. Removal requests drafted — you send them, we guide the process and follow up on verification.
Family Member Exposure Check — add-on
Mirror-level exposure assessment per family member — because targeting often extends to those around you. €750 per person, scoped separately with individual consent.
60-Minute Consultation
Direct call with your analyst to walk through findings, answer questions, and agree on next steps.
Dedicated Support (12-24hr)
Direct analyst access throughout the engagement for follow-up questions and emerging concerns.
Add-on available: AI & Deepfake Impersonation Assessment — €900. Based on Shield findings, assesses how easily your voice, image, and identity could be synthetically replicated. Quoted and scoped separately.
The Guardian — €2,400/year
Ongoing protection after your Shield engagement. Offered to every completed Shield client.
- Quarterly re-scrub of all monitored surfaces
- Quarterly dark web credential re-scan
- Annual full Mirror re-audit
- 30-minute advisory call each quarter
- Priority support and incident escalation
- Annual summary report
Who The Shield is for
- Someone is watching your online activity and you need to understand exactly what they can see and build from it
- You are receiving targeted messages, impersonation attempts, or coordinated harassment and need a professional assessment of the threat
- A business decision, legal dispute, or public controversy has made you a target — and you don’t know how exposed you are
- Your public profile makes you viable for social engineering or deepfake impersonation and you want to map the risk before it materialises
Not sure if this fits your situation? See what we do for executives.
Understand What Someone Could Build From What You’ve Already Shared
The Shield is scoped on intake — complex situations are quoted individually. Use our contact form to discuss your situation before committing. We respond within 24 hours.
Targeted social engineering attacks against executives cost organisations a median of $50,000 per incident. Proactive threat assessment is a fraction of that.
No payment required to enquire. Scope is confirmed before any work begins. All communications encrypted via ProtonMail.
Payment options: bank transfer, PayPal, card, or Bitcoin / Ethereum / Monero for clients requiring enhanced payment privacy.
Related Services
Shield FAQs
The Lockdown is an investigation into credential leaks and what’s circulating about you in corporate dumps and dark forums. The Shield is a different product — it starts from an active threat. It includes the full investigation foundation (Mirror + Lockdown scope) and then layers on deep social media analysis, online harassment pattern assessment, 30-day pattern-of-life analysis, social engineering vulnerability profiling, and a 60-minute consultation. You don’t need to have purchased The Lockdown first.
No. The Shield is a digital investigation service. We assess online harassment patterns, identify what information is available that could enable physical targeting, and help you understand your exposure. If you are facing an active physical threat, that is a matter for law enforcement — we will always say so clearly and can help you understand what digital evidence is relevant to report.
The 30-day pattern-of-life analysis monitors your publicly visible online activity — posts, check-ins, tagged photos, replies — to map what your routine, habits, locations, and relationships inadvertently reveal to someone watching. It answers the question: if someone was building a picture of you from public information, what would they see? This is done with your explicit consent and is documented in your threat report.
Document everything first — screenshots of messages, profiles, posts, and contact attempts, dated and saved to multiple locations. Report to the platforms where the behaviour is occurring. If the pattern suggests a credible physical threat, contact police and your local victim support service. A professional assessment maps what the individual can actually see and build about you — the exposure enabling the targeting — so you can reduce it and understand the real scope of the threat.
In most jurisdictions, online stalking and harassment are criminal offences — the challenge is evidence. Police typically need a documented pattern of behaviour over time, not a single incident. Many cases stall at the reporting stage because the complainant doesn’t have systematic documentation. A professional threat report with cross-platform behaviour analysis and timeline documentation is more useful to law enforcement than a folder of screenshots. We always recommend reporting to police in parallel with any professional assessment.
Courts and police typically look for a documented pattern — repeated contact or monitoring over time, not a single incident. Useful evidence includes screenshots with timestamps and URLs, contact across multiple platforms, attempts to find your location or personal details, and any direct threats. A professional threat report cross-references behaviour across platforms, establishes timelines, and documents the pattern in a form that’s useful for both law enforcement and legal proceedings.