Twice-daily scans
Morning and evening, each picking up exactly where the last ended. A morning brief goes to the principal's team: threat level, today's events, new items, watchlist status.
Protective intelligence
Threat Monitoring
Daily review of public online content about the people we protect, so the detail knows about a problem before it shows up in person. Public information only; we never post, reply or engage.
Online threat monitoring: $1,000/month. Platforms, protected interests and distribution are set with you at onboarding.
For close protection on the ground, see Executive Protection.
How the program works
01
Collect
Every platform, the watchlist and the principal's comments.
02
Triage
Read in context, assigned a tier.
03
Deep dive
History, aliases, escalation.
04
Report
Daily and event briefs with evidence.
05
Escalate
Detail lead, client, law enforcement.
What we watch
- X
- Threads
- TikTok
- YouTube
- Bluesky
- Truth Social
- Gab
- Public Telegram channels
- Local TV, radio and newspapers
- Police and public-safety feeds
- Event listings and protest calendars
Including every reply and comment on the principal's own posts. Logged-in platforms are reviewed through read-only research accounts.
How we triage
Threat
Any violent or harm-wishing statement, even without a time or place; or a home, family or office mention with an address, photos or a call to go there. Immediate alert, law-enforcement packet, watchlist.
Priority
Any mention of the principal's home, spouse, children, family or offices. Immediate alert, listed first.
Watch
Hostile but not threatening: harassment, fixation, sightings, protest or "show up" calls. Next report, tracked over time.
Noise
Political criticism, ordinary insults, support, and same-name or off-target posts. Counted only, never alerted.
Coded references get a plain-language "Context / Meaning" note. Each brief carries a threat level: Low, Guarded, Elevated or High.
Pre-event scans
About two hours before each appearance: venue, town, listings and protest calls. The detail lead gets a one-page event security PDF.
Immediate alerts
Threats and priority mentions are escalated the moment they are found. Imminent danger goes straight to the detail lead, client and local police.
Account deep dives
- Identity and alias linking from public sources
- Full post-history review
- Location clues from public profiles
- Escalation pattern and fixation
- Subject profile written for law enforcement
Watchlist
- Every tracked account checked every scan
- Renames, aliases, suspensions logged
- Cross-platform handle and name checks
- Persons of interest on every event brief
Evidence and escalation
- Screenshots at discovery: post, account and parent post
- Exact text, direct links, timestamps
- Hashed files, chain of custody
- Law-enforcement-ready packets
Need threat monitoring?
Platforms, protected interests and distribution are set with you at onboarding. Tell us who needs coverage and we will scope the program.