Digital exposure
Understand what your devices, apps, accounts and online behavior reveal—and what can be reduced.
Anti-eavesdropping - Pegasus Spy, practical digital privacy and security for people with more to protect. Personal threat assessments, privacy-first mobile devices, and one-to-one guidance built around your real-world risks.
Your phone, accounts, contacts, habits and metadata form a picture of your life. Commercial profiling, phishing, spyware, account takeovers and AI-assisted social engineering can turn small mistakes into serious exposure.
Understand what your devices, apps, accounts and online behavior reveal—and what can be reduced.
Learn how phishing, malicious attachments, spyware, SIM-swap attempts and impersonation campaigns work.
Understand how public information, metadata and behavioral patterns can be combined to infer sensitive details.
GrapheneOS is a privacy and security-focused mobile operating system based on Android Open Source Project. It adds substantial hardening and privacy controls on supported Google Pixel hardware.
GrapheneOS officially supports a carefully selected range of Google Pixel devices. Pixel hardware provides security features and firmware capabilities that meet the project's requirements; support is not simply about whether Android can run on a phone.
Supported Pixels provide a secure element, hardware-backed key storage and hardware security capabilities used by GrapheneOS.
Boot-time verification checks the integrity of the operating system using a trusted key and rollback protection.
Newer Pixel generations have a substantial manufacturer support commitment. We check exact model eligibility before supply.
No two clients face the same threats. We begin with your priorities, then build a practical setup you can understand and maintain.
One-to-one online or in-person sessions covering threat modeling, account security, device hygiene, privacy settings and safer daily habits.
Review public exposure, account linkage, social media choices, identity separation and practical ways to reduce unnecessary data trails lawfully.
App recommendations matched to your needs: messaging, maps, PDF readers, documents, password managers, email and secure browsing.
Pixel preparation, official installation, bootloader relocking, update configuration, permissions and post-install verification guidance.
Recognize malicious links, fake login pages, suspicious files, social engineering and common operational security mistakes.
Optional Tails OS USB drive with setup guidance for suitable privacy-focused desktop use cases. Tails is not a substitute for safe behavior.
A guided transition to a privacy-focused mobile setup—not just a phone in a box.
Travel, shipping, taxes and any additional services are quoted separately. Availability is confirmed before payment.
USB drive and setup consultation. Hardware and shipping details confirmed before order.
Ask about Tails USBDiscuss your exposure, likely adversaries, assets and realistic risk level.
Select device settings, apps, account boundaries and security controls.
Check installation integrity, boot state, updates and key security settings.
Learn repeatable habits, incident response and how to avoid common mistakes.
A hardened phone cannot compensate for a compromised email account, reused passwords, careless approvals or an exposed recovery channel.
Install OS and app security updates promptly. Avoid unsupported devices and abandoned apps.
Install apps from official developer sources or reputable stores. Verify publisher identity and signatures where available.
Do not open unexpected links or attachments—even if they appear to come from someone you know. Verify through another channel.
Use unique passwords, a reputable password manager and strong multi-factor authentication. Protect recovery email and phone numbers.
Limit camera, microphone, location, contacts and network access to what an app genuinely needs.
Decide which platforms you need, what you reveal, who can see it and whether your posts expose routines or relationships.
Use a camera cover when appropriate, keep devices physically secure and power down devices when they are not needed and circumstances allow.
A reputable VPN can protect traffic from some local network observers, but it does not make you anonymous or protect against malicious apps.
Use a strong unlock passphrase, encrypted backups and a recovery plan. Understand duress features and their consequences before enabling them.
Use separate profiles and accounts where they serve a clear purpose. Do not assume a new device erases old data trails or creates a new legal identity.
GrapheneOS supports Verified Boot. On supported Pixels, the boot process verifies firmware and OS images. The GrapheneOS verified boot key hash can be compared with the value published on the official GrapheneOS website.
A principle of independent verification—not a promise that any device, vendor or operating system is infallible.
We tailor recommendations to your threat model, operational needs and tolerance for inconvenience.
| Consideration | Questions we explore |
|---|---|
| Your exposure | Are you a business leader, public figure, investor, journalist or someone handling sensitive information? |
| Your social presence | Do you need social media? Which platforms, what audience, and what information should remain private? |
| Your apps | Which messaging, maps, PDF, email, banking and document tools are essential? |
| Your convenience | Which services can you give up, and which must continue to work? |
| Your threat model | Are you mainly concerned about data brokers, criminals, targeted phishing, device theft or sophisticated surveillance? |
GrapheneOS has attracted attention from prominent privacy advocates and technology figures. Edward Snowden(CIA) publicly recommended GrapheneOS as a strong Android base in 2019. Jack Dorsey(Twitter) publicly shared the project's website in 2021. These public references are not endorsements of this consultancy, nor proof of current device use.
Visit GrapheneOS ↗I am a cypherpunk with more than five years of involvement in privacy and security. My approach is practical: understand the threat, reduce unnecessary exposure, verify what can be verified, and teach clients to operate with care.
The objective is not to disappear from the world. It is to make deliberate choices about what you share, whom you trust and how you protect your digital life.
Your security deserves attention before an incident happens.
Private consultations are arranged by appointment. Online sessions and in-person meetings may be available depending on location and scheduling.
For package inquiries, consultations or Tails OS USB orders, contact us directly.
xander2000@tuta.ioPlease do not send passwords, seed phrases, private keys or highly sensitive personal information by email.