"To improve is to change; to be perfect is to change often."
— Winston Churchill
That's the working principle. Open-source intelligence shifts faster than any playbook can keep up with — sources appear and disappear in days, tooling moves faster than policy, and yesterday's reliable signal is tomorrow's dead link. I build investigations that adapt to that, not the other way around.
Andy Gilor · OSINT specialist
What I do
Four ways I work, depending on what you're actually trying to find out.
OSINT investigations
Named investigations, subject profiling, and source-of-truth work — built from public-record data, not assumptions.
Security advisory
Threat-aware consulting for teams that can't afford to learn the hard way. Risk assessments, due diligence, and tabletop work.
Digital intelligence
Footprint mapping and longitudinal monitoring of people, entities, and infrastructure across the open web.
APIs, data & tooling
Proprietary data products and integrations built for investigators who need to move at machine speed, not spreadsheet speed.
How I work
Quiet, methodical, and built around the one question that actually matters to you.
Every engagement starts with the same conversation: what do you need to know, and why. From there the scope, the sources, and the deliverable follow — not the other way around. Nothing is templated. Confidentiality is assumed.
Start a conversationA few things along the way
Milestones, not a victory lap.
Built the first OSINT training syllabus for a corporate security team
Hands-on operator training, not slide decks — how to find, verify, and document sources without breaking chain-of-custody.
Stood up a real-time threat intelligence feed
Aggregated open-source signals into a single stream so analysts stopped bouncing between six tools to read one situation.
Keynoted on OSINT methodology at an international security conference
Talked about where conventional intel workflows break down — and the small habits that fix them.
Partnered with forensic firms on joint investigations
OSINT handles the open-web side; forensics handles the devices. Together, the picture is complete.
Published research on social-media intelligence tradecraft
Practical, source-level methods for extracting reliable signal from deliberately noisy platforms.
By the numbers
A rough sense of scale — not a scoreboard.
Recognition & work
Things I'm known for, in plain language.
Cited among top independent OSINT analysts
For work on source verification and investigation chain-of-custody.
Keynote, international security conference
Methodology track — where conventional intel workflows break down.
Released a working SOCINT framework
Source-level methods for noisy social platforms, used by operator teams.
Embedded with Fortune 500 security programs
Advised leadership on threat posture and open-source exposure.
Joint investigations with forensics firms
OSINT and digital forensics combined into single case files.
Published OSINT tradecraft research
Practical notes from the field, not theoretical models.