Internal tools behind the work

Cipher Cortex is a private intelligence company. The systems below are built for our own collection, research, and investigations. They are not sold, licensed, or offered as a consumer product. What clients receive is intelligence, evidence, and reporting. Differentiated research products for qualified partners are described under Access & Research.

Hivemind Subterfuge Platform

The unified investigation workspace behind Cipher Cortex engagements — cases, controlled personas, evidence, intelligence enrichment across IPs, domains, emails, URLs, phones, usernames, hashes, and wallets; compare tools; panel fingerprinting; and executive-ready reporting.

Internal operator tooling. Hivemind powers Cipher Cortex engagements with in-house enrichment, investigation graph, and structured exports. Access is limited to Cipher Cortex personnel only.

Sixth Eye

Our in-house cyber threat intelligence workspace — source-attributed feeds, IOC inventory, relationship graphing, emerging cluster detection, and investigation cases. Built to correlate breach intel, advisories, and enrichment into analyst-ready context.

Internal R&D — not offered as a product. Sixth Eye reflects ongoing platform work at Cipher Cortex: how we structure intel, trace relationships, and operationalize research. It is not available to clients or partners and there is no external access.

DPRK IT Worker Database

Structured tracking of individuals, personas, selectors, and group affiliations tied to DPRK remote IT revenue operations — used in our research and client diligence.

Internal research corpus. Not a standalone product or data feed for external subscribers.

DPRK diligence overview →

Public research — including scam and fraud casework — is published through Intercept Cell.