Cybersecurity and open-source intelligence
Principia Works helps people and organisations see what can be learned from public sources, understand how that information could be used and make better-informed security decisions.
We provide exposure assessments, security awareness training built around your organisation and evidence-backed OSINT research.
We do not need your passwords or access to your private accounts.
Public information
Invented example: every person, company and document here is fictional.
Most of those details are ordinary.
The problem changes when somebody connects them.
Together, public information can reveal who has authority, how an organisation works, who is likely to trust whom and what kind of request would feel normal.
That is where our work begins.
See the connection
The sender is not in your contact list.
Report Junk
Hi Bob, it's Alice. This is my other number, my phone's acting up.
I'm on the panel in Swakop all morning so I can't take calls.
Can you release the Dune Line payment before 12? They've moved banks, their letter is attached.
I'll sign the paperwork when I'm back. Thanks Bob
Updated banking details: Northside office fit-out
Good morning Bob,
As part of our group restructuring, payments for phase two of the fit-out now go to our new account. The confirmation letter is attached.
Alice in your finance team is copied for her records. Please update your system before this week's payment run.
Kind regards,
Dune Line Accounts
Your speaker session on Thursday: please confirm
Dear Alice,
Thank you for joining the Finance Leaders panel in Swakopmund on Thursday.
Please sign in with your work account to confirm your session time and upload your slides by Wednesday.
Sign in to confirm
The Forum team
Someone can work out who has authority, who acts on their instructions and when normal verification may be more difficult.
A message from a new number claiming to be the executive suddenly has context.
The information did not create the fraud on its own.
It made the approach more believable.
Someone can understand which supplier relationships already exist and which requests would look routine.
A request involving changed payment details or an urgent supplier issue may feel like ordinary administration instead of an attack.
The safest response is not permanent suspicion.
It is having a verification process that does not depend on information supplied in the request itself.
Someone can identify the right audience and build a message around something those people already expect to see.
A phishing message can look less like random spam and more like normal work.
That is why awareness has to go beyond spelling mistakes and suspicious attachments.
One detail rarely creates the problem.
The picture appears when the pieces are brought together.
What we do
Executives and organisations
See what somebody researching you from the outside could learn.
We research information that is already publicly accessible and examine it as a connected picture rather than a collection of isolated search results.
You receive a clear assessment of what we found, why it matters and what should be prioritised.
What it can include
Organisations and staff
Build judgement, not fear.
People still need to open emails, use WhatsApp, click links, approve payments and work online after the training ends.
Our sessions help people understand how social engineering works, recognise when something deserves a second look and know what to do next.
Where appropriate, we build the training around the organisation receiving it.
Sessions can cover
Organisations and authorised teams
OSINT research for questions that need more than a search result.
Principia Intelligence is our analyst-led open-source intelligence service.
Clients bring us a question. We research relevant lawful public sources, connect the information we find and return a structured assessment supported by evidence.
Our technology helps us search, organise and analyse information. A person reviews what reaches the client.
Who we help
Understand what your public footprint reveals and prepare your people for the kinds of social engineering that information can make more convincing.
See what someone researching you from the outside could learn and reduce exposure that creates unnecessary risk.
Use evidence-backed OSINT research to answer defined questions about people, organisations, incidents, relationships or digital activity.
Your public footprint
None of these automatically means you have a security problem.
The important question is what they reveal when combined.
That is what an Exposure Assessment is designed to establish.
Assess our exposureThis can help someone understand authority and reporting relationships. That is often necessary business information, not automatically a problem.
Job titles can reveal who handles finance, procurement, technology, recruitment, executive support and other useful functions.
This can provide context for impersonation or payment fraud involving relationships that genuinely exist.
Events and public engagements can explain when somebody is away, busy or harder to reach through normal channels.
Phone numbers, personal email addresses and other details sometimes remain online long after their original purpose has ended.
Documents can reveal names, signatures, contact details, internal terminology, document formats and other useful context.
Awareness without fear
Generic warnings often tell people what not to do. That approach does not reflect how people actually work.
Instead of: Do not click links.
Know what a normal request looks like, so an unusual one stands out.
Instead of: Do not trust messages.
Verify through a channel you already have, not one the message gives you.
Instead of: Do not use public Wi-Fi.
Focus on the risks that actually apply to your role.
Instead of: Do not respond to unusual requests.
Pause when urgency, authority or a changed payment detail appears.
The objective is not permanent suspicion.It is better judgement.
Our aim is different.
We teach people how an attack is put together, what makes it convincing and which decisions interrupt it.
Plan a training sessionThe process
We start with what you are trying to solve.
That might be a concern about public exposure, a training requirement or an investigative question.
We define the purpose, scope, boundaries, expected output, timeline and fee in writing.
Where additional authority or consent is required, that is addressed before research begins.
We gather relevant information, compare sources, connect findings and document significant evidence.
Automation may assist the work, but it does not replace analyst judgement.
You receive findings in a form you can use.
We explain what was established, what remains uncertain, why it matters and what should happen next where recommendations form part of the engagement.
About Principia Works
Public information can reveal far more than people realise once the pieces are connected.
Principia Works was created to help clients understand that picture clearly and use that understanding to make better security and investigative decisions.
No.
Our exposure and OSINT work begins from the outside.
We do not need your passwords, one-time codes or access to private accounts.
No.
A penetration test actively evaluates technical systems.
Our Exposure Assessments focus on what can be learned from publicly accessible information and what that information could make possible.
No.
Investigative work requires a legitimate purpose, appropriate authority or basis and an agreed scope.
No.
Technology supports the research process, but significant findings are reviewed by a person before they reach the client.
Principia Works is based in Namibia.
Research and remote engagements can also be delivered more widely where the scope, legal requirements and nature of the work allow it.
You do not need to know exactly what you need before contacting us.
Tell us what happened, what concerns you or what you are trying to understand.
We will tell you whether Principia Works is the right fit and what the next step would involve.
