What is public about them tells a story. Do you know how to read it?

OSINT (Open Source Intelligence) is the discipline of collecting, connecting and analyzing information from open sources — public records, the web, social media, domains and digital infrastructure, public leaks, marketplaces and media — to turn scattered data into actionable intelligence. It is not a one-off Google search: it is a method that starts from any point (a name, a tax ID, an email, a domain) and pivots across sources until the full story is assembled, with lawfulness and documentation at every step.

In the Kavuka portfolio, OSINT is the digital investigation engine: the layer Due Diligence uses to deepen the dossier, anti-fraud uses to map rings, and brand protection uses to find what circulates about the company. It works on five fronts — people and companies (digital footprint, real presence, inconsistencies between the declared and the observable); digital infrastructure (domains, clone sites, reused emails and phones); networks and rings (the relationship graph that links isolated cases into an operation); brand and product (misuse, fake profiles, irregular sales, phishing); and assets and litigation (public signals of assets and activity for litigation).

The link graph is the language of the category: investigation is sold and understood by showing connections, not lists. Established international tools set this graph-analysis standard, with entities connected through data integrations. But a tool without data is a map without territory — and Kavuka’s differentiator is the native integration with Brazil’s deepest data: ownership, judicial and registry. It is this combination of open sources with the local base that takes pivoting from the shallow (a public profile) to the deep (the company, the ownership structure, the undeclared tie). AI assisting the analyst in pivoting is the frontier: it absorbs the sweeping load and suggests connections, while the investigator focuses on judgment.

OSINT and legality are not opposites — but the line is thin, and crossing it burns the case. Lawful OSINT operates only on public or legitimately accessible sources, with no system intrusion and no deception (no sock puppets, the fake investigation profiles), with a legitimate purpose and data-protection compliance. Above all, it preserves evidence with chain of custody: source, date, method and preservation documented, so the open-source finding reaches legal in condition for procedural use. The result is the OSINT legal teams approve: internal triage with a method for the cases that deserved it, leaving external investigation only for what requires fieldwork — and the story that was public, finally assembled, with method and validity.