You think something is monitoring your phone
Someone may have installed software to follow your location, read your messages, or see your activity. We examine the device and document what is actually installed on it.
Mobile & device forensics · Brooklyn, NYC
We forensically acquire and analyse data from phones and computers — iPhone, iPad, Android, MacBook and iMac — and tell you plainly what the device can and cannot show. No guesswork, no theatre.
Apple hardware is where we are strongest, and it is the work most firms in this city pass to somebody else.
Every situation is different. If yours isn't here, call anyway — the first conversation costs nothing.
Someone may have installed software to follow your location, read your messages, or see your activity. We examine the device and document what is actually installed on it.
Configuration profiles you didn't add, accounts you don't recognise, settings that changed on their own. Battery drain on its own rarely means much; alongside the rest, it can. We establish whether it's a fault or something deliberate.
A Mac or iPhone your business owns was used in a way that needs to be understood. We examine it and document what the data shows — and what it doesn't.
Locked out, wiped, or working through the aftermath of a compromised Apple ID. We work out what is recoverable and what is genuinely gone.
We carry out the examination and document the method, the sources and the limitations in writing. What weight those findings carry is a question for your attorney, not for us.
Before a Mac or iPhone leaves your hands — sold, returned, reassigned — you want a record of what was on it and what was removed.
We use professional-grade forensic tools built specifically for iOS and macOS — the same class of tooling licensed to law enforcement agencies — matched to the exact device, chip generation and OS version in front of us.
A quarter century working with systems and devices across corporate, government and small-business environments. That background is what tells us which artefacts matter and which are noise.
You get a plain-language account of what we found, where it came from and what it means. You'll always understand the findings you're holding — including their limits.
Apple device work needs physical access to the hardware. We're in Greenpoint and meet clients across NYC — at your office, or at a neutral location if that is easier for you.
Coverage
Phones and computers are different disciplines with different tooling. Most firms cover one platform properly and improvise on the rest.
Our core work. Acquisition method is chosen for the exact model, chip generation and iOS version — what is possible on one combination is impossible on the next, and knowing which is which is most of the job.
MacBook and iMac, including APFS volumes, encrypted storage and Apple silicon. This is the capability most local firms do not have: general-purpose forensic suites handle Windows well and macOS partially, so we run specialist Mac forensic platforms alongside them.
Examined with the same rigour, using open-source and commercial mobile forensic tooling. Our published case study — a legitimate application turned into monitoring software — is an Android examination from start to finish.
Ask most IT firms to examine an iPhone or a Mac and the honest ones say they cannot. The tooling is specialised, licensed separately, and the platform changes with every OS release. That gap is the reason attorneys and businesses in this city end up calling us after being turned away elsewhere.
Before you decide
Handing a phone to a stranger is the hard part. Here is exactly how it works, start to finish.
Fifteen minutes tells us whether an examination can answer your question. If it can't, we say so. Before any work starts, you confirm in writing that the device is yours.
You hand the device to the person who will work on it — not to a front desk. We meet at a time and place we agree on, including a neutral location if that suits you better.
We make a forensic copy and analyse the copy. The original is kept secured and returned to you. We record the method used and what it does and does not change on the device.
We agree the scope up front and tell you what we'll be examining. Material outside that scope is not what we're there to read, and it doesn't go in the report.
Findings come to you in writing. The working copy is kept only as long as you want it kept — tell us to destroy it and we do, and we confirm in writing when it is done.
The device is yours. If you change your mind part-way through, we stop, return it, and you pay only for the work already carried out.
Tell us on the first call how it is safe to reach you, and we use only that channel. We won't email or text you unless you have told us it is safe to do so, and nothing we send names the service on your bank statement.
Anyone who promises you all four of these hasn't done the work. We would rather lose the job than oversell it.
We examine devices you own, and we ask you to confirm that in writing before we begin. If the device is not yours, we stop there.
Depending on the model and iOS version, some acquisition methods necessarily interact with the device. We choose the least intrusive method available and document precisely what it does.
What survives depends on the device, the storage, the encryption and how much time has passed. We tell you what is realistic before you pay, not after.
We document the technical facts, the method behind them and their limits. How those facts are used, and what they are worth, is a conversation for you and your attorney.
A worked example
A full mobile forensics case study: how an ordinary, store-available application was turned into monitoring software, how we identified it on the device, and — just as importantly — what the data could not tell us.
Tell us what happened, which device is involved, and what you're trying to establish. We'll tell you plainly whether an examination can answer that question and what it would take. If it can't, you'll hear that too.
Please don't put passwords, account details or case material in an email. Bring those to the call.