When the case is a place, not a person
NOCTUA Sentinel is a set of sensors on your site that send events straight into a NOCTUA case. Raw data stays on site. What arrives is what's worth reacting to.
Read about SentinelNOCTUA – investigation workspace
Every conclusion traces back to its source.
NOCTUA is software for security teams, investigations and due diligence. Findings, sources, entities and the report live in one case, and the trail stays intact all the way.
In testing NOCTUA is in testing. We are taking on test users continuously.
Finding F-0142
In report
The CEO of Brandholm Shipping A/S also sits on the board of the company's largest supplier.
- Source
- Company registry extract, retrieved 14 Sep 08:12
- Assessment
- Confirmed by two independent sources
- Seen before
- The supplier appears in case DD-2025-031
- Supports
- Conclusion 3.2, conflicts of interest
- Report
- Due diligence, draft 2
Three weeks into the case, someone asks how you know.
The answer is somewhere. In a screenshot in the downloads folder, in one of forty browser tabs, in a Word document and in a spreadsheet whose source column was abandoned in week one.
The information itself is rarely missing. The context is: where it came from, how far it holds, and which conclusion it carries. That lives in the head of whoever did the work, until they go on holiday.
In NOCTUA the finding, the source and the assessment sit together. The answer is one click away.
One finding, five states
The finding is the smallest unit of an investigation. In NOCTUA every finding has a state, and everything that happens to it stays with it.
-
Captured
The finding comes in with its source attached. Link, file or note, and when it was retrieved.
-
Assessed
You record how much the source and the information can carry. Conflicts are flagged and stay visible.
-
Connected
The finding is linked to people, companies and events. If you've seen them in an earlier case, you'll know.
-
Supports
The finding is tied to the conclusion it carries, so everyone can see what that conclusion rests on.
-
In report
The report is written from the findings. Every claim traces back to its source.
Finding F-0142
In report
The CEO of Brandholm Shipping A/S also sits on the board of the company's largest supplier.
- CapturedSource: company registry extract, retrieved 14 Sep 08:12
- AssessedAssessment: confirmed by two independent sources
- ConnectedThe supplier also appears in case DD-2025-031
- SupportsConclusion: section 3.2, conflicts of interest
- In reportReport: due diligence, draft 2 (DOCX)
Other findings in the same case
- F-0139 conflicts with source 4 and is awaiting resolution
- F-0140 and F-0141 are captured but not yet assessed
What a case holds
Everything that belongs to the case sits in one place instead of spread across documents, spreadsheets and folders. Modules you don't need can be switched off.
- Findings
- Everything you've found, with source, assessment and status. This is where the work happens.
- Source register
- The case's sources with reliability notes, so the same source is judged the same way every time.
- Entities and network
- People, companies, addresses and how they relate. As a list or as a graph.
- Timeline and map
- Events in order and on the map. Including the ones you know about but can't document yet.
- Reports
- Written from the findings and exported to Word or PDF.
- Team and log
- Roles per case and a log of who changed what. The log can't be edited afterwards.
NOCTUA is built for what happens after collection.
You already have your search engines, registries, scrapers and databases, and you keep them. NOCTUA is where what they find gets sorted, assessed, connected and written up.
NOCTUA doesn't guess on your behalf either. If a finding is marked as confirmed, an analyst confirmed it.
In development
We're building limited collection from social media into NOCTUA. If you use particular collection tools, talk to us. We're happy to look at whether they can be connected. Talk to us about your tools
Built for people who have to defend a conclusion
To a client, a board, an auditor or a court.
- Due diligence and screening
- Ownership, key people and red flags before an investment, an acquisition or a contract.
- Investigations
- People, companies and incidents for law firms, insurers and corporates.
- Security and threat assessment
- Actors, patterns and incidents that need following over time and across cases.
Where is the data, and who can see it?
- Hosted in the EU or with you
- The platform runs on servers in the EU or on your own servers. Data is not moved outside the EU to operate the service.
- Separated workspaces
- Each workspace is isolated at database level. Not just in the interface.
- Source protection
- Human sources can be kept compartmented and recorded under a pseudonym.
- Traceability
- The activity log is append-only. Not even an administrator can rewrite the history.
Two ways to get started
Test NOCTUA
Use the workspace on real or realistic cases, and tell us what doesn't hold up.
Join the betaSentinel pilot
One site, one gateway and a number of sensor towers for a fixed period. We set it up.
Apply for a pilotWant to see it before you decide? Book a 30-minute walkthrough