Platform
Cipher Cortex is services-first. The platforms below are internal tooling we build and operate for our own investigations and research — they are not products for sale, not licensed to clients or partners, and not available for consumer use. What we deliver commercially is investigation work, diligence, and intelligence reporting.
The unified investigation workspace behind Cipher Cortex engagements — cases, controlled personas, evidence, intelligence enrichment across IPs, domains, emails, URLs, phones, usernames, hashes, and wallets; compare tools; panel fingerprinting; and executive-ready reporting.
Internal operator tooling. Hivemind powers Cipher Cortex engagements with in-house enrichment, investigation graph, and structured exports. Access is limited to Cipher Cortex personnel only.
Our in-house cyber threat intelligence workspace — source-attributed feeds, IOC inventory, relationship graphing, emerging cluster detection, and investigation cases. Built to correlate breach intel, advisories, and enrichment into analyst-ready context.
Internal R&D — not offered as a product. Sixth Eye reflects ongoing platform work at Cipher Cortex: how we structure intel, trace relationships, and operationalize research. It is not available to clients or partners and there is no external access.
Structured tracking of individuals, personas, selectors, and group affiliations tied to DPRK remote IT revenue operations — used in our research and client diligence.
Internal research corpus. Not a standalone product or data feed for external subscribers.
DPRK diligence overview →Public research — including scam and fraud casework — is published through Intercept Cell.