Threat landscape · South Africa · live

It has been watching for twenty-five years.

Every host, message, filing and face, resolved and correlated into feeds for international and local law enforcement, sanctions bodies, and others.

Look away ↓

The premise

Imagine every word written in South Africa for twenty-five years, turned into structured data.

You don’t need to imagine it. It’s done. Transformers unlocked the world’s unreadable text, and turned it into entities, relationships and timelines. We know more than you can imagine.

Collection vectors

Nine ways of knowing, resolved to one identity.

01CorporaMass-media corpora ingestion & entity resolution. Every article, filing and record since 1999, resolved to people and organisations.
02Dark channelsDark web, Telegram and Reddit, watched continuously for names, numbers and leaks.
03Nothing is deletedDid you know your deleted comments and threads are still there? They were kept.
04POPIA, unenforcedMost organisations, private and government, don’t enforce POPIA. We map exactly where.
05Shell structuresOwnership layers unwound across borders until the real beneficiary surfaces.
06Tender fraudProcurement matched against networks of directors, addresses and bank flows.
07StylometryWriting style is a fingerprint. The same author, unmasked across every alias.
08Re-IDFaces, gait, vehicles, scenes, even tattoos, re-identified across cameras.
09OrbitalSatellite and SAR passes correlated with ground activity, down to the hour.

What we index

Four layers of the surface, re-read continuously.

01HostsEvery reachable address in South African allocations, re-read on a rolling cycle.
02ServicesBanners, protocols and product fingerprints on every open port.
03CertificatesTLS certificates and domains as they surface, tied to the hosts serving them.
04VulnerabilitiesFingerprints matched to known CVEs, ranked by exploitation in the wild.

Downstream

Built to feed the people who act.

International law enforcement
Cross-border infrastructure linked to sanctioned entities and their proxies.
Local law enforcement
Fraud infrastructure — phishing kits, spoofed banking domains, mule panels.
Sanctions bodies
Entities and the networks that quietly move on their behalf.
…and others
Exposure notices for the networks that answer for them.

Live · since last boot

4 812 330Hosts indexed
11 204 918Services fingerprinted
38 406CVE exposures open
1 127Sanctions links

It never blinks for long

PANOPTES
● Watching

Live demonstration · your browser

98% of people have no idea what a website already sees.

You opened one link. Before you clicked anything, your browser handed over enough to identify this device across the web. Here is what any site — including this one — can read the instant you arrive.

Runs entirely in your browser. Nothing is sent to us, and nothing is stored.