Personal cyber safety, Sydney
Take the concern seriously. Test the evidence.
For individuals facing confusing account or device problems, I help establish what is known and what to do next. I preserve evidence, map account control and test the concern without jumping to conclusions.
- Output
- An account map, findings and written next steps
- Method
- Preserve before securing
- Rate
- $1,000 a day, plus GST
- Reply
- Within one business day
How I work through it
I start with the question you need answered. I record what I examine, what it shows and what remains unknown.
Listen
You can bring an incomplete account or disorganised material. I record the concern and identify immediate risks and questions.
Preserve
I record devices, account notices and available evidence before changes that could remove useful records.
Map
I map devices, accounts and recovery routes so it is clear what controls what and where control is uncertain.
Test
I compare available records with the concern. I separate Known, Likely, Possible and Unknown, then explain what I can test next.
Rebuild
Once evidence is preserved, I scope account and privacy changes. I provide written instructions and concrete next actions.
When you no longer feel in control
I investigate technical concerns without requiring you to name the cause. The first job is to establish what can be checked.
Accounts behaving differently
Suspected unauthorised access, repeated password resets or lost control of email and phone accounts. I examine available notices, recovery routes and device records.
Tracking and unknown devices
I take suspected tracking and technology facilitated abuse seriously. I check the technical evidence without treating an unknown device as proof of an attacker.
Documents and devices do not line up
Disappearing documents and incidents across several devices can need one timeline. I compare surviving files, account events and device records.
A map you can use, and steps you can follow
I design the work to be trauma aware and neurodivergent friendly. You can ask for detailed explanations and written instructions.
Account ownership in one place
I record each account, username, email, phone, MFA, recovery email, trusted device and current control. I map the devices alongside the accounts.
Known, Likely, Possible, Unknown
I separate findings from possibilities and explain what I can test next. I document what you tell me to reduce unnecessary repetition of distressing information.
Privacy changes after preservation
I scope unique passwords, MFA, recovery routes, device rebuilds and backups after preserving evidence. I explain why each action is proposed.
The limits, before work starts
I describe what the evidence shows. A report cannot promise a legal outcome.
This is technical support given humanely. I do not provide counselling, medical advice or legal advice. I explain technical findings and the limits of the checks performed.
RF detection is not attribution. A signal is not a proven bug or person. I record a persistent transmitter as a frequency, level and pattern, then investigate. Advanced TSCM and specialist opinion or testimony go to specialists.
Overwritten data cannot be recovered. I preserve and prepare material for specialist handover when chip off extraction or a cleanroom for physically failed media is needed.
What it costs
I quote each matter before work starts, from $1,000 a day, plus GST. The scope sets out what I will examine and what you will receive. Reply within one business day. All prices are in AUD, plus GST.
Questions before you start
Do I need to explain everything in the right order?
No. You can bring scattered notes, messages and devices. I record what you tell me and organise the technical questions. Written instructions and an account map can make the next steps easier to follow.
Will you assume I have been hacked?
No. I take the concern seriously and test what can be tested. An unusual login, missing verification code or unfamiliar Bluetooth identifier does not establish an attacker by itself.
Should I reset everything before contacting you?
A reset or account change may remove evidence. I start by identifying what needs preserving before a privacy rebuild. Tell me what has already changed so I can record it alongside the findings.
What does the account map show?
It connects each account to its username, email, phone, MFA, recovery email and trusted device. I record current control and uncertainty so the next steps address the actual recovery routes.
Can you restore an account you do not control?
I can review available records and help with provider recovery routes within the agreed scope. I cannot bypass the provider or promise access. Account recovery and evidence preservation need to be considered together.
What if there is no evidence supporting my concern?
I say what was checked, what was found and what remains unknown. A missing finding is not an explanation for everything. I identify further technical tests where the available evidence supports them.