Trust

Collected responsibly. Explained clearly.

How we collect, what we store, how we protect your account, and how to tell us when we get something wrong.

How we collect

We observe. We don't participate.

Offsys Intel observes public ransomware leak-site listings and threat feeds. We record metadata: victim name, date, group and claim.

We do not download, store, buy or sell stolen data.

Our collection covers approximately 40 sources, including direct Tor crawling of leak sites, ransomware trackers (ransomware.live, RansomLook, Ransomwatch), vulnerability databases (CISA KEV, NVD, EPSS), IOC feeds (AlienVault OTX, abuse.ch, AbuseIPDB), detection content (MITRE ATT&CK, Sigma, YARA), and human chatter (Telegram, Mastodon, Bluesky, paste sites, security news).

Accuracy

We check what we publish.

Victim extraction is audited by human analysts. Deduplication and entity resolution normalise names ("Acme Pvt Ltd" = "ACME PRIVATE LIMITED") to reduce false matches.

Every briefing is drafted with AI assistance and reviewed by a human analyst before it is sent. Each briefing shows its review status.

In our October 2026 audit of 50 recent listings, analysts verified the victim identification as correct in 45 of 47 verifiable cases (96%), checked against independent public trackers. Three could not be verified and were excluded. We re-audit regularly.

Corrections

If we got it wrong, tell us.

If you believe a listing or attribution is incorrect, contact us. We investigate and correct verified errors within 5 business days.

Contact for corrections: hello@offsysintel.com

Platform security

How we protect your account and data.

Authentication

MFA via TOTP on every account. Per-account login lockout after failed attempts.

Access control

Role-based access: admin, analyst and read-only. API keys for programmatic access.

Audit & encryption

Audit logging of all actions. TLS encryption in transit. Nightly verified backups.

Hosting

Hosting region: EU (Germany).

Responsible disclosure

Found a vulnerability? Tell us.

If you discover a security vulnerability in the Offsys Intel platform, please report it responsibly.

Email: security@offsysintel.com

See our responsible disclosure policy for details.