Skip to content
Licensed investigator · registration RD-14/2026
LYKTA Intelligence Request a consultation

Home  /  OSINT services

OSINT and business intelligence services

Reconnaissance of an entity, a person or an entire organisation from lawful, openly available sources. Four services built on one shared, eight-stage methodology.

Scope

Four services, one methodology

Each service is a different question and a different audience for the result, but we run them all through the same repeatable process set out in the methodology.

01 · for companies and law firms

Comprehensive counterparty due diligence

A full picture of the entity you intend to contract or transact with: who really stands behind it, its history, its connections and the risk of dealing with it. The analysis draws on registers, financial statements, official publications and open sources.

You receive the result in a form you can show a board: a concise summary of risks, a map of capital and personal connections, and full findings with sources. Most often commissioned before a high-value contract, an acquisition or filing a case in court.

02 · for organisations

Exposure surface analysis (footprint)

Reconnaissance run against your own organisation — on your instruction. We retrace what an attacker would see while preparing an attack, a fraud or a phishing campaign: externally visible domains and systems, corporate mail addresses and patterns, documents with metadata, staff data, traces in breaches.

The report is not a list of technical vulnerabilities but a map of what your organisation unwittingly reveals, ranked by importance — with a recommendation of what to reduce and in what order. An ideal complement to a security audit and to information-protection training.

03 · for companies, law firms and private clients

Personal due diligence and profiling

A reliable, documented background on a person: a candidate for a position of trust, a prospective partner, a board member, a party to proceedings. We establish activity history, connections, public statements, reputational signals and whether stated experience matches the facts.

We work only with public information and within the limits of data protection. We do not build profiles that serve harassment or surveillance — the purpose of each matter is agreed at the outset, and we decline instructions that exceed a legitimate interest.

04 · continuous service

Monitoring and early warning

Periodic checks of whether anything relevant to your security has changed around an entity — a counterparty, a competitor, your own brand: new connections, signs of financial trouble, a data leak, impersonation of your domain or brand.

Instead of a one-off snapshot you get an alert when something changes. Scope and frequency are agreed individually; for long commercial relationships and high-value contracts this is a standard that repays itself at the first problem detected.

The deliverable

What exactly you receive

The scope of the report is agreed before work begins. It is always structured so that it can be put before someone who does not know the matter.

  • A summary for the decision-maker — the key findings and risks on the first page, without jargon.
  • A relationship map — a clear picture of capital, personal and technical relationships.
  • Full findings with sources — every claim supported by a source and a date of collection.
  • Facts separated from hypotheses — we clearly mark what is confirmed and what remains a supposition.
  • A recommendation — what the findings mean for your decision and which risks remain unexamined.
Raport z priorytetyzacją ustaleń Warstwy dokumentu z listą ustaleń, w której jedna pozycja jest wyróżniona jako priorytetowa, obok skala ważności.

Limits

What we do not do

OSINT is intelligence from open sources. Our advantage is that the result is lawful and defensible — which is why we do not cross the lines beyond which it loses its value.

We do not: break into systems or accounts, plant listening devices, access another person's correspondence or phone, obtain call records or bank data, buy illegally stolen databases, or conduct surveillance that violates privacy. We do not accept instructions aimed at harassing another person.

Legal basis

How we operate

The services are provided by a licensed investigator, entered in the Polish Register of Detective Activity under number RD-14/2026, in accordance with the Detective Services Act. Personal data is processed within the limits of the GDPR and only to the extent needed to perform the engagement.

Before every matter we sign an engagement letter and a non-disclosure agreement, and the purpose of the work and its lawfulness are agreed at the outset.

Not sure which service fits your matter?

Describe the situation in a few sentences. We will suggest whether it is counterparty due diligence, exposure analysis, personal due diligence or monitoring — and what can realistically be established.