About Alien Security

I am Angus Lewington, a sole trader in Emu Plains NSW 2750. I investigate difficult technical problems and explain what the evidence shows, what it does not and what can be tested next.

Trading as
Angus Lewington, sole trader
Based
Emu Plains NSW 2750
ABN
32 385 519 280

Why I built this

Technology has been a special interest of mine for most of my life. I'm AuDHD, and when something interests or concerns me, I tend to understand it completely, not just enough to make it work.

For more than twenty years I have continually reinvested in equipment, tools, servers, networking, communications and testing gear. I wanted to understand the systems around me for myself.

During some of the hardest years of my life, that stopped being just an interest. Understanding the technology around me became part of how I felt safe. I spent years learning about privacy, cybersecurity, evidence, recovery and radio communications.

I built the systems I wanted to have access to myself. Eventually I realised that the equipment, knowledge and systems I had built could help other people facing a frightening or confusing technical situation.

You do not need to arrive knowing whether the problem belongs to a computer technician, a forensic examiner or another specialist. I want to make the technical support, patience and understanding I needed available to somebody else.

Twenty years of equipment, put to work

Twenty years of buying things because "that might be useful one day" has its advantages. My workshop and lab hold the equipment I have accumulated through building, testing and learning.

I have computers, storage arrays, NAS, servers, networking gear, disk imaging systems and USB, NVMe and SATA adapters. I use the setup that fits the question and state what it cannot do.

My radio equipment includes SDR receivers, a HackRF One with PortaPack H4M, antennas for several bands, Bluetooth hardware and LoRa development boards. These are tools for observation and testing.

Mobile devices, test equipment and local AI and GPU compute support the work. The point is to build a working system, understand its limits and keep the method clear enough for somebody else to check.

Evidence before assumptions

I take the concern seriously and test what can actually be tested. I keep observations, what you tell me and conclusions separate. An unusual event is a question to investigate.

A strange Bluetooth identifier is not automatically a tracker. A cellular transmission is not automatically surveillance. I record the observation before considering what might explain it.

A deleted verification code is not automatically evidence of an attacker. A strange login is not necessarily unauthorised. A PDF making a connection is not necessarily malware.

When further evidence changes an interpretation, I document the correction. A useful report says what the records support and where they stop short of an answer.

How I work with you

You can bring disorganised material and an incomplete account of what happened. I document what you tell me so you do not have to keep repeating distressing details unnecessarily.

I design the service to be trauma aware and neurodivergent friendly. I explain the reason for each step, offer written instructions and map every device and account in scope.

I organise findings as Known, Likely, Possible and Unknown, followed by What I can test next. The structure makes uncertainty visible and gives the next action a reason.

This is technical support given humanely. I do not provide counselling, medical advice or legal advice. Where specialist work is needed, I preserve and prepare the technical material for handover.

What the business does now

My work spans nine divisions: Digital Forensics; Cyber Incident Response; Data Recovery; Digital Evidence; RF & Wireless; Privacy & Personal Cyber Safety; Network & IoT Investigation; Complex Data Analysis; and Technical Research & OSINT.

These areas meet in a complete technical investigation. I can examine the computer, phone, accounts, network, wireless environment and deleted material together, with one evidence register and timeline.

I separate in house capability, specialist engagement needing scope and preparation, and partner or escalation work. I prepare material for specialists when the task needs advanced TSCM, chip off extraction, cleanroom repair or independent opinion and testimony.

You can bring the whole problem without knowing which part holds the answer.

What is deliberately not on this site

No client names, no case studies and no testimonials. Naming a matter is the client's call in writing. Scale figures on this site come from real matters and are rounded and anonymised.

No success rate, no recovery rate and no promise about how a matter ends. I describe what I examined, what it shows and what could not be established.

A finding needs evidence. A gap needs to be stated.

What you can hold me to

I quote the scope before work starts. The published rate is $1,000 a day, plus GST, on the pricing page. You can see what the work is intended to answer before deciding to proceed.

I state the limits before the work. I preserve evidence before changes that could remove it, explain my findings in plain English and identify when another specialist is needed. Reply within one business day.

Talk to me about the problem you need to understand.