Independent research.
Coordinated disclosure.
We share findings to help your team understand what happened and decide what to do next.
Reviewing a finding with us is free. We welcome your questions and protect our private conversations.
Give teams evidence
they can act on.
Initial actionable disclosure is free. Research collaboration is voluntary and does not require a subscription.
Support the work
over time.
Recurring enterprise access brings ongoing discoveries, monitoring, alerts, correlations, and historical intelligence to existing teams.
Publish findings
people can examine.
We coordinate publication, protect sensitive information, and retain independence from commercial relationships.
Free initial disclosures
We provide initial actionable notifications in good faith, without charge.
Recipients receive enough supporting evidence to evaluate the original finding. We’re happy to walk through the evidence, answer questions, and correct anything we’ve misunderstood.
Receiving a disclosure or collaborating on research does not require a subscription.
Reviewing the original finding is free. Ongoing monitoring is available separately through a subscription.
Continuous intelligence
Organizations can subscribe to recurring enterprise intelligence: discoveries, monitoring, alerts, correlations, and historical intelligence.
TrackBTC complements existing security, intelligence, and operational teams with evidence they can investigate and validate.
Our commercial model is recurring access to intelligence, rather than individual investigations, reports, or incident-based engagements.
Reports are one way to review that intelligence. The scope of continuous access is agreed with each organization.
Publication coordination
We publish independently developed research to help others understand and address risks. Wherever possible, we work with relevant organizations to prepare that publication together.
To give teams time to review the findings, our default coordination period is 90 days from the initial actionable notification. We welcome your team’s input on the findings, timing, and any concerns that need careful handling.
We welcome earlier publication by agreement and can extend the timeline when security, privacy, confidentiality, or legal considerations justify more time.
If we haven’t heard back by then, we retain the right to proceed with publication while maintaining those protections.
Our conversations stay private. We do not name outreach recipients or other parties involved in private coordination, or publish their correspondence or responses.
Publication decisions remain independent of subscriptions and other commercial relationships.
Working together
We welcome joint publications, partner-led announcements, technical contributions, and appropriate attribution.
Organizations and researchers can review factual claims and propose corrections. TrackBTC retains editorial control of its independent research.
We agree joint attribution and partner announcements with contributors. Recognition reflects validated contributions, with permission to name the people or organizations involved.
Collaboration remains open regardless of a commercial relationship.
Privacy and ownership
We protect affected individuals, confidential information, and sensitive operational details.
Public research may use aggregate findings while individual records remain private.
TrackBTC retains ownership of its independently developed research. Information provided in confidence remains subject to the agreed confidentiality terms.
TrackBTC approves each research publication for public release. Any joint attribution or confidential partner material requires the relevant party’s permission.
Contact us
Contact us to review a finding, propose a research contribution, or coordinate a disclosure.
Tell us which published study or finding your message concerns. We will agree how to exchange any sensitive material.
Explore our published research and collaboration opportunities.