Intelligence you can defend.

Operation Theatre

Watch an autonomous investigation unfold live — Blackout resolves the identity, expands the network into a constellation, geolocates the infrastructure and scores the threat in real time, then hands you a briefing.

War Room

The live operational command centre — a cinematic global theatre fusing your watchlist threat board, DEFCON posture, recurring entities, live intelligence feed and worldwide operations into one screen.

Priority Requirements

Declare the standing questions that matter to you — geography, keywords and thresholds — and Blackout scores the live world against them continuously, surfacing answers without you going looking.

Blackout Bridgebeta

Connect smart glasses and other Bluetooth hardware directly to Blackout — full service discovery, live event log, capability scan and exportable diagnostics. Desktop Chrome/Edge and Android.

Auto-Investigate

One-click OSINT — enter any target (domain, email, username, IP) and get a live compiled intelligence brief.

Link Analysis

Visual entity-relationship graphs — connect people, orgs, domains, emails and more, then expand with transforms.

Intelligence Graph

Your persistent knowledge base — every entity from every saved case, deduped and linked into one graph that compounds over time and surfaces shared people & infrastructure.

Bulk Investigate

Investigate many targets at once — each fully assessed, threat-scored, ranked, and exported as one combined report.

Watchlist

Continuous monitoring — put any target under watch and get alerted the moment its exposure shifts: new ports, fresh CVEs, breaches, infrastructure moves.

Profile Builder

Automated identity resolution — enter any selector and Blackout auto-pivots across every source, fuses linked identities into one scored subject dossier with a relationship graph, and exports it.

Auto-Pilot

Autonomous investigation — give one target and Blackout resolves the identity, expands the whole connected network, correlates your cases and writes the assessment, hands-free.

Anomaly Detection

Statistical anomaly detection across your watchlist — surfaces exposure-change surges and active-threat spikes against each target’s own baseline, so emerging escalations find you.

Entity Annotations

Pin persistent, live-updating notes to any entity — domain, IP, email, username or case — building shared analyst context that follows the entity across your workspace.

Executive Briefing

Turn a full technical workup into a board-ready narrative — bottom line, key judgements, risk rating and recommendations, in executive prose (AI-authored when an Anthropic key is connected).

Ask Intelligence

Conversational OSINT — ask a question in plain English; Blackout runs live lookups on any domain/IP/email you mention, cross-references your cases, and answers grounded in real data.

Source Reliability

Grade sources and information on the NATO Admiralty System — attach standardised reliability×credibility ratings to every finding and keep a source register, so confidence travels with your intelligence.

Investigation Playbooks

Named, repeatable investigation workflows — chain Blackout’s modules into one automated run (domain due diligence, entity screening, infrastructure threat assessment) with live step-by-step results.

Email Forensics

SOC-grade phishing triage — paste a raw email and Blackout reconstructs the delivery path, verifies SPF/DKIM/DMARC, flags spoofing and extracts every indicator, locally.

Data Extractor

Paste any blob — breach dumps, email headers, logs, chat exports — and Blackout extracts every email, IP, domain, URL, wallet, phone, CVE, hash and key locally, each one-click investigable.

Case Management

Run investigations as cases — bundle saved reports and evidence, keep a timestamped notes timeline, and track status and priority from open to closed.

Intelligence Briefings

Automated recurring intelligence digests — watchlist changes, new high-threat findings and case activity compiled on a daily or weekly cadence and emailed to you as a branded PDF.

SITREP

Command center — a live operational picture fusing your watchlist alerts, portfolio threat, recurring cross-case entities and global live events into one posture readout.

Live Operations

Real-time global situational awareness — live earthquakes, aircraft, wildfires, storms and volcanoes plotted on one world map, streaming 24/7.

Maps

Geospatial plotting of entities, movements and areas of interest.

Timeline

Reconstruct chronologies across every piece of collected evidence.

Evidence Locker

Chain-of-custody storage for artefacts, screenshots and exports.

Reports

Generate court-ready intelligence reports from any investigation.

Adverse Media

Negative-news screening for KYC and due diligence — scan global news coverage of any person or company for fraud, corruption, litigation, sanctions and criminal reporting, categorised.

Corporate Intelligence

Global corporate intelligence with no key required — legal entity identity and ownership hierarchy (GLEIF), US SEC registrant and filing history, French national registry records with officers and filed financials, the Irish register with status and accounts filing history, and the Brazilian register by CNPJ with officers and share capital. Connect a free Companies House key for full UK officer, ownership and filing depth.

Counterparty Check

Pre-engagement due enquiry on a party you are about to advise on, contract with or litigate against — ownership, sanctions and adverse media, all three required, with every concern referred to a fee-earner rather than absorbed. Sealed, so the file can be checked by the other side.

Supplier Check

Procurement due diligence in one pass — ownership, sanctions, adverse media and digital footprint, assessed against your policy. Tells you plainly when a required check could not be carried out, and what changed since last time.

Sanctions Screening

KYC / AML due diligence — screen any person or entity against live sanctions and watchlists with fuzzy name matching, scored candidate matches and programme details.

People Intelligence

Resolve identities from names, aliases and partial data across public records.

Face Recognitionbeta

Match faces against indexed sources and cluster appearances over time.

Threat Attribution

Attribute a target’s exposure profile to known threat actors — Blackout maps the attack surface to ATT&CK techniques, then ranks the APT and cybercrime groups whose playbooks overlap.

ATT&CK Mapper

Map a target to the MITRE ATT&CK matrix — Blackout lights up the adversary techniques its real attack surface enables, and exports a Navigator layer for your SOC.

Infrastructure Correlation

Given a set of entities, determine which of them are the same operation. Shared registrars, nameservers, netblocks, mail infrastructure, account-bound verification tokens and registration timing are weighted by how much each actually narrows the field — so commodity providers used by millions never link strangers.

Attack Surface

External attack-surface management — discover every internet-facing asset an organisation exposes (subdomains, hosts, open ports, services, CVEs) and score it into a single exposure grade.

Vulnerability Intelligence

Assess any CVE with live NVD, EPSS and CISA KEV data — CVSS severity, real-world exploit probability, affected products, and whether it is actively exploited in the wild.

DNS Security Posture

Audit a domain’s DNS and email-authentication hardening — SPF, DKIM, DMARC, MTA-STS, DNSSEC and CAA — graded A–F with every record and a fix for each gap.

Certificate Intelligence

Certificate Transparency reconnaissance — enumerate every subdomain and TLS certificate ever issued for a domain, spot freshly-minted and lookalike certs, and map the issuing CAs.

Image Forensics

Drop any photo to expose GPS capture location, camera and lens, timestamps and authenticity signals — read in your browser. Opt into deep analysis for solar-position verification against the claimed time and place, perceptual fingerprints, C2PA and AI-generator detection, encoder fingerprinting and an exact-copy web search.

Advanced Search

Composes advanced search-engine operators — exposed files, misconfigurations, login panels, credentials, social footprint — scoped to the search engine that actually covers the target’s region (Yandex, Baidu, Naver), explained and graded by sensitivity. Opens real, live results in a new tab; nothing is scraped or stored.

Phone Intelligence

Carrier, line type, reputation and linked-account enrichment.

Email Intelligence

Deliverability, disposable/role detection and breach signals (deeper with a Hunter.io key).

Username Intelligence

Sweep 98 platforms from a single handle and get back what can be defended: confirmed accounts with direct links, genuine absences, and an explicit list of the sites that refused to answer — never a refusal reported as an absence.

Domain Intelligence

WHOIS, full DNS, email security, hosting geolocation and certificate-transparency subdomains.

IP Intelligence

Geolocation, ASN, ISP, hosting/proxy detection and reverse DNS for any IP address.

Social Media Intelligence

Cross-platform profile aggregation, network mapping and activity timelines.

Brand Threat Radar

Typosquat & phishing detection — generates look-alike domains for your brand and flags the ones already registered, before they are used against you.

Deep & Dark

Breach, leak & dark-web intelligence — detailed breach analytics and paste exposure for emails, and Tor-index (onion) search for any selector or keyword.

Threat Intelligence

IOC reputation — aggregate live threat signals (Shodan risk tags & CVEs, Tor-exit membership, proxy/hosting, AbuseIPDB via BYOK) for any IP or domain into one verdict.

Crypto Intelligence

Wallet intelligence for Bitcoin & Ethereum — live balance, transaction activity and token exposure from any address.

Blockchain Forensics

Fund-flow tracing for BTC & ETH — map a wallet’s counterparties, inbound/outbound flows and flag known exchange & mixer (Tornado.Cash) interactions.

Geospatial Mapping

Map a target’s real-world infrastructure — resolve its web, mail and nameserver hosts, geolocate every IP, and plot the footprint across the live world map.

Vehicle Enquiry

UK vehicle due diligence from the official DVLA register — make, colour, engine, tax and MOT standing, export and V5C history. Establishes what a vehicle is, never where it has been.

Public camera search

Name a place and see every camera overlooking it, with distances. 3 national networks — road and transport authorities that publish for public viewing. Misconfigured private cameras excluded.

Live air traffic

Aircraft transmitting ADS-B now, military transponders marked. Coverage is thin over oceans and the product says so.

Broadcast news wall

4 international broadcasters live from their own channels, so a story can be read against more than one editorial line.

Integrations & Export

Push alerts to Slack, Discord or Microsoft Teams, and export any report as a STIX 2.1 bundle or CSV for your SIEM, TAXII server, MISP or OpenCTI.

Developer API

Issue API keys and webhooks to query Blackout intelligence from your own systems.

Global Intelligence Console

Real-time 3D global console — SIGINT feed, live world events and entity fusion graph.

Operative Platform

Unified operative console — SITREP, live ledger, verification and case management.

Digital Passport

GOV.UK-styled digital identity wallet and verifiable credential issuer.

AgentAudit Trust OS

AI governance & agent assurance terminal — policy builder, controls and audit trails.

BCI-7 Operations

ATLAS terminal, profile builder, deception engine and NEXUS entity graph.

Project Chronos

Temporal intelligence & horizon-scanning workspace for tracking events over time.

Ghostwirebeta

Covert signals & secure-comms intelligence console.

Operations Console

Live multi-source operations feed — global events, seismic, weather and flight tracking.