Building software, breaking limits. Engineering student | Cybersecurity & AI enthusiast
Trieste, Friuli-Venezia Giulia
- Tweets 554
- Following 189
- Followers 57
- Likes 194
Pinned Tweet
I launched OpenOSINT Diligence: check a company's official records against its public digital footprint.
Signals with sources, not verdicts.
app.openosint.tech/diligence…
1
47
Building a due-diligence tool taught me to delete my own signals.
After back-testing on two samples of UK companies, three checks I liked (name change, overdue confirmation statement, company under 12 months old) were downgraded to Info. Data beat intuition.
1
One check people don't expect in due diligence: lookalike domains.
For Tesco, Diligence found 72 registered lookalikes of tesco.com, 33 able to receive email. Many are likely defensive. What matters is new ones: 0 in the last 90 days.
app.openosint.tech/diligence…
1
10
I launched OpenOSINT Diligence: check a company's official records against its public digital footprint.
Signals with sources, not verdicts.
app.openosint.tech/diligence…
1
1
91
I back-tested it on 299 failed vs 299 healthy UK companies, a year before.
Medium/High: 15% vs 5%. But 85% of the failed ones looked Low.
It doesn't predict insolvency. Full back-test, public:
app.openosint.tech/diligence…
1
1
7
I launched OpenOSINT Diligence: check a company's official records against its public digital footprint.
Signals with sources, not verdicts.
app.openosint.tech/diligence…
1
47
I back-tested it on 299 failed vs 299 healthy UK companies, a year before.
Medium/High: 15% vs 5%. But 85% of the failed ones looked Low.
It doesn't predict insolvency. Full back-test, public:
app.openosint.tech/diligence…
1
23
Shipped OpenOSINT Diligence: company records (Companies House, GLEIF, SEC EDGAR) checked against the public footprint, plus OFAC/UK sanctions screening. Every signal sourced and timestamped, PDF export.
Back-tested before launch, results public. 3 free reports/month.
app.openosint.tech/diligence…
2
90
Most small companies have DMARC at p=none and think they're covered.
They're not. p=none tells mail servers to do nothing with mail that fails authentication.
I built OpenOSINT Monitor to catch this from the outside, plus TLS, headers and lookalike domains. Free for one domain:
app.openosint.tech/?utm_sour…
#DMARC
1
1
64
I built a tool that grades a domain's security from the outside.
Then I ran it on my own domain. It got a C, 79/100.
Here's what it found, and why most small companies would get the same grade. 1/8
2
45
app.openosint.tech
Open-source engine: github.com/OpenOSINT/OpenOSI…
14
Some rules I kept:
- It only scans domains you prove you own (one DNS TXT record)
- Nothing to install
- Hosted in the EU
- The scanning engine is OpenOSINT, the open-source framework I maintain 7/8
1
12