Skip to content
TideWater
Sign in
Menu

OSINT MONITORING PLATFORM - BY INVITATION

Watch the sources.Keep the record.

TideWater reads Telegram, Bluesky, and RSS in real time, matches every message against your rules, translates it on infrastructure we control, and delivers it where your team already works. Every alert keeps its source, its timestamp, and the rule that fired it.

Request accessSign in

Invite only. Existing organizations sign in. New inquiries go through contact.

SONAR / REAL-TIME MONITORINGATLAS / GRAPH INVESTIGATIONS

01 / DECISION PATH

From a stream nobody can read to a decision you can defend.

One message, followed from the moment it is posted to the moment somebody acts on it.

  1. 01 / THE NOISE

    Thousands of messages a day, in languages you may not read.

    Channels post through the night and across time zones. No team can read all of it, and the part that matters looks exactly like the part that does not.

  2. 02 / WATCHED

    Your rules watch all of it, around the clock.

    Exact terms, regex, and AND, OR and NOT, scoped to the channels you choose. Almost everything is discarded on purpose. What is left is the handful of messages you asked for.

  3. 03 / UNDERSTOOD

    Translated the moment it arrives.

    Translation runs on infrastructure we control. The original text stays attached, so a linguist can check the wording and the rest of the team does not have to wait for one.

    TELEGRAM@port-watch14:02:11Z

    Le convoi se dirige vers le sud avant l'aube.

    The convoy is moving south before dawn.

    TRANSLATED FR -> EN

  4. 04 / DELIVERED

    On your screen in seconds, with the source attached.

    The alert reaches the live feed and the channels your team already uses, carrying the channel it came from, the time it was posted, and the rule that fired it.

    RULE/convoy AND south/GROUP CONVOY WATCH
    ALERT ->LIVE FEED / SIGNAL / WEBHOOK14:02:12Z
    POSTED 14:02:11Z->ALERTED 14:02:12Z

  5. 05 / THE DECISION

    Decide on evidence, while the decision still matters.

    Every alert can be opened back to the message that caused it. The analyst verifies instead of guessing, and the argument for acting is already written down.

    Request access ->
  6. INVITE ONLY / EXISTING ORGANIZATIONS SIGN IN

02 / PLATFORM

Everything between the source and the analyst.

Collection, matching, translation, and delivery are one system, configured per keyword rather than per source.

SOURCES

Telegram, Bluesky, and RSS, read over native connections rather than browser scraping.

NOTHING MISSED

Channels are backfilled when you add them, and anything missed during an interruption is recovered afterwards.

RULES

Exact, contains, or regex terms combined with AND, OR, and NOT, scoped to the channels you choose.

NOISE CONTROL

Per-keyword cooldowns, exclusion terms, and a log-only mode for tuning a rule before it wakes anybody.

TRANSLATION

Runs on infrastructure we control, with no third-party API in the path and no per-character bill.

CATCH-UP BRIEFINGS

Ask what happened while you were away and read the period back in a minute.

RECURRING REPORTS

Scheduled daily, weekly, or monthly and exported as PDF, with every claim citing the message behind it.

DELIVERY

Live feed, Telegram, Signal, SMS, email digest, or signed webhook, chosen per keyword.

SEARCH AND EXPORT

Search every collected message by term, channel, and time, and export to CSV or JSON.

03 / ATLAS

ATLAS / NETWORK INTELLIGENCE

Every link a message carried is a node.

Sonar tells you what was said. Atlas tells you what it connects to. Every message, account, channel, and posted URL is held as a graph, so a single link pivots to every message that has ever referenced it. Investigations are encrypted in your browser before they reach us.

GRAPH CANVAS
Move through the network directly. Expand a node, see what it touches.
CONNECTION FINDER
Ask how two entities are related and get the path between them, with the messages that evidence each hop.
NODE PROFILE
Everything known about one account, channel, or link, on a single panel.
INVESTIGATIONS
Save a line of inquiry, pin the evidence that supports it, and keep research notes beside it.

04 / SECURITY

Built for organizations that get asked how it works.

The full model is written out on its own page, including the places where a control is partial.

END-TO-END ENCRYPTION
RSA-4096 with AES-256-GCM. Key pairs are generated in your browser and the private key never reaches the server.
SCOPE
Alerts, investigations, and reports, sealed under both a user key and an organization key, so access survives staff turnover.
BLIND INDEXING
HMAC-SHA256 with a per-user salt matches keywords over encrypted content without decrypting it.
ACCESS
SSO over OIDC or SAML, TOTP or WebAuthn passkeys, and four roles from Audit to Owner.
AUDIT
Activity logs and security events, forwarded to your own SIEM.
COMPLIANCE
Controls built to SOC 2 principles. TideWater holds no SOC 2 attestation and does not claim one.

Read the full security model ->

Access is by invitation.

TideWater is deployed to named organizations: no self-serve signup, no trial, no public pricing. Onboarding runs one organization at a time, with a named contact on our side and a security review on yours.

Monitoring covers Telegram, Bluesky, and RSS today. Nothing else, and we will tell you that before a deployment rather than after one.

Request accessSign in

Inquiries are answered by a person. Expect a reply, not a sequence.

KEYWORDS - KEYWORD GROUPS - ALERTS - DASHBOARDS - WEBHOOKS: NOT METERED