Tools behind the investigations

Cipher Cortex is services-first. Our platforms accelerate analyst work on client engagements — they are not the primary product sale today. Trusted partners may request platform access; commercial buyers should start with a scoped investigation or briefing.

Subterfuge

The analyst platform behind Cipher Cortex investigations — rapid enrichment across IPs, domains, emails, URLs, phones, usernames, hashes, and wallets; risk scoring; evidence capture; and executive-ready reporting.

Subterfuge powers our work with parallel enrichment, compare tools, and structured exports. The platform remains internal; vetted partners may inquire about future access.

DPRK IT Worker Database

Structured tracking of individuals, personas, selectors, and group affiliations tied to DPRK remote IT revenue operations — used in our research and client diligence.

DPRK diligence overview →

Public research — including scam and fraud casework — is published through Intercept Cell.