Skip to content
NewCybercrime Report 2026 · Eight Chapters · A Post Is Not An Incident → Explore The ChaptersCybercrime Report 2026 → Explore
Request A Demo
Brandefense NEXA

NEXA Services. Investigations, Communication And Capability.

Brandefense NEXA is a team of six specialists with 10 years of experience. The team brings malware analysis, OSINT, HUMINT and dark web investigation to three services: dark web investigations, ransomware communication and national intelligence capability.

Contact Us → Under Attack?
01Three Services

Three Lines Of Work. One Team Behind Each.

These are services, run by people. The team works every engagement, from the first conversation to the last deliverable.

Service 01 Dark Web Investigations Investigation work on the dark web and underground: attribution, identifying perpetrators and actor profiling, with evidence and a written report. Attribution · Actor profiling · Written report Service 02 Ransomware Communication Communication with the threat actor on the victim’s behalf, and management of the victim’s own communication during a ransomware incident. Negotiation · Victim communication · Emergency line Service 03 National Intelligence Capability National-security intelligence infrastructure set up for governments, with know-how transferred to the institution’s own team. Setup · Training · Playbooks · Handover
Looking for the platform? Threat Intelligence → Dark Web Monitoring → Ransomware Intelligence →
02Capability Matrix

Four Disciplines. Three Ways To Use Them.

Pick a cell to see how one discipline serves one service, or a column to see a whole service.Pick a service to see how each discipline serves it.

Discipline ↓ Service →
Malware Analysis
OSINT
HUMINT
Dark Web
Dark Web × Investigations

Core Of The Work.

The centre of the service: investigating dark web and underground activity to identify the perpetrators, with evidence and a written report.

The service Investigation work on the dark web and underground: attribution, identifying perpetrators, actor profiling, evidence and a written report.
Open Dark Web Investigations →
Dark Web Investigations Investigation work on the dark web and underground: attribution, identifying perpetrators, actor profiling, evidence and a written report.
Malware Analysis When malicious files are part of a case, analysing them adds technical evidence to the attribution.
OSINT Open sources place underground activity in a wider picture and feed the actor profile.
HUMINT Human intelligence adds context that technical traces alone cannot, supporting actor profiling.
Dark Web The centre of the service: investigating dark web and underground activity to identify the perpetrators, with evidence and a written report.
Open Dark Web Investigations →
03How An Engagement Works

From First Call To Written Report. Scoped In Confidence.

  1. 01
    Step 01 Contact You reach the team through Contact Us or Request A Demo. Ransomware emergencies go through Report An Incident.
  2. 02
    Step 02 Scoping Under Confidentiality The case, its limits and what is needed are agreed in confidence before the work starts.
  3. 03
    Step 03 Investigation The team works the case across malware analysis, OSINT, HUMINT and dark web investigation.
  4. 04
    Step 04 Report Delivered Findings and evidence are delivered in a written report.
04Discretion

Quiet Work. Said Out Loud Once.

Discretion is part of the service, not an extra. Every engagement runs on the same four terms.

  1. 01 Confidential From The First Call. Scoping happens under confidentiality, before any work begins.
  2. 02 No Names In Public. Cases are told without names, places or dates.
  3. 03 Four Disciplines. Malware analysis, OSINT, HUMINT and dark web investigation.
  4. 04 Findings In Writing. Work ends in a written report for the people who need to act on it.
Brandefense NEXA

Tell Us What Happened. In Confidence.

For a dark web investigation, ransomware communication or a national intelligence capability, start with a conversation with the team.

Request A Demo → Contact Us
Under attack? Report An Incident →