Threat Monitoring & OSINT Investigations
A clearer picture of a concern, grounded in research. Open-source intelligence and defined threat monitoring for private clients, families and their advisers.
Intelligence · Context · Protective decisions
Turn scattered information into a useful assessment.
A change in public profile, an unwanted approach or information shared about family life can raise questions that are difficult to assess in isolation. A principal or adviser needs to understand what is known, what remains uncertain and which protective decisions deserve attention.
Pegasus Ops scopes OSINT investigations around a clear question. Open-source intelligence uses publicly accessible information, examined in context rather than treated as a collection of unverified search results. The brief establishes the relevant people or organisations, the purpose of the work and the information that can appropriately be considered.
We assess enquiries from London, across the UK and internationally. The geographic coverage, source access and language requirements are confirmed in the proposed brief. Our OSINT services can include a defined research assignment or continuing threat monitoring, which adds an agreed review period and reporting structure. A one-off exposure review and a continuing monitoring instruction are different services: the proposal makes the frequency, coverage and escalation arrangements clear.
Research shaped around the question you need answered
Public-profile and online exposure reviews
Examine the agreed public footprint of a principal, family or organisation. The review can consider how published details connect with residences, household roles, business interests or planned appearances, then identify proportionate changes to reduce unnecessary exposure.
Threat context and concerning approaches
Assess information the client already holds alongside relevant public-source material. Findings distinguish observations, corroborated facts and unresolved questions. A hostile interpretation is not assumed simply because material is unusual or unwelcome.
Monitoring around a change or event
An agreed period of monitoring can support a public appearance, change in profile or developing concern. The scope defines the sources, subject matter, review schedule, reporting thresholds and the person responsible for receiving an update.
Intelligence for a wider protective brief
Research may inform a security risk assessment, close protection or family-office security. We agree how information reaches the people responsible for decisions and what further work, if any, is justified.
What your engagement can deliver
- A defined research briefThe question, subject matter, period and information sources in scope, together with the agreed purpose and limits of the work.
- A referenced findings reportRelevant findings with source references, dates and important context, presented for the intended decision-makers.
- An assessment of confidence and gapsClear separation of confirmed information, interpretation, unresolved questions and material limitations.
- Practical protective recommendationsPrioritised actions and further enquiries that follow from the findings, with the client able to understand why they are proposed.
- An agreed briefingAn explanation of the findings for the principal, family office, legal adviser or other authorised audience.
- A monitoring schedule, where commissionedDefined review periods, update arrangements, escalation contacts and coverage limits for continuing work.
From the first conversation to a defined instruction
01 · Define the concern
Begin with a broad outline, who is affected and the decision you need to make. We agree the scope, authorised contact, information handling, deliverables, timetable and fee before paid research begins.
02 · Research, assess and explain
Relevant material is examined against the brief. Findings are presented with their sources and limitations, so the client can distinguish evidence from inference and identify the decisions that matter.
03 · Act or review
The client agrees practical next steps. Further investigation, protective support or continuing monitoring is commissioned separately, with responsibilities and review points defined.
Intelligence that supports the wider plan
Research and protective observation can inform family-office security, close protection and residential security. The proposed brief identifies where information is needed and who is responsible for acting on it.
For a related requirement, explore counter-surveillance services or background and due diligence investigations.
The National Protective Security Authority provides public guidance on personal safety and security for high-risk individuals. A Pegasus engagement follows the particular concern and agreed protective purpose.
Questions before you instruct us
What does OSINT mean?
OSINT stands for open-source intelligence. In this service, it means research and assessment using publicly accessible information to answer a defined question. The value lies in context, corroboration and a useful explanation of what the findings mean for the brief.
Can you review a family’s online exposure?
Yes. The scope can consider the public information connected to the agreed family members, household or principal. We establish who can instruct the review, what information is relevant and how sensitive findings will be reported. The work is shaped around a protective purpose.
Is threat monitoring a 24-hour service?
Only if that coverage is expressly agreed. Periodic research, scheduled monitoring and dedicated round-the-clock support have different staffing and reporting requirements. A website enquiry or a one-off report does not establish continuous monitoring or an emergency response channel.
Do OSINT investigations include access to private accounts?
This service is based on publicly accessible sources and information appropriately supplied within the brief. It does not promise access to private messages, protected accounts or restricted systems. Any separate specialist requirement needs its own assessment and authorisation.
How is this different from due diligence?
A due diligence investigation commonly supports a decision about a proposed relationship or instruction. Threat monitoring and OSINT focus on a defined concern, public exposure or changing situation. We identify the right owner for the enquiry rather than treat every research request as the same service.
Can the findings support our security team or solicitor?
The report and briefing can be directed to agreed professional advisers or existing security personnel. We establish authorised recipients and the purpose of the work at the outset. The form of reporting and any additional requirements are agreed for that instruction.
How much do OSINT investigation services cost?
The fee depends on the question, number of subjects, geographic and language scope, source complexity, timeframe and reporting required. Continuing monitoring is scoped separately. The proposal explains the work, fees, expenses and material limitations before research starts.
Start with the question that needs clarity.
Tell us the broad concern, who is affected and the decision you need to make. Sensitive documents, identities and detailed locations can be discussed through an agreed channel after initial contact.
If there is immediate danger, contact the relevant emergency services. A website enquiry does not establish an emergency response channel.