LUMA

DEFENSIVE MOBILE FORENSICS

What the phone keeps,
LUMA lights.

LUMA examines iPhone and Android devices for spyware and stalkerware, and returns one verdict per device: clean, or evidence.

iOS · ANDROID · macOS AND WINDOWS WORKSTATION

Outline of a phone being examined
artifacts profiles processes network consent
VERDICT CLEAN

THE PROBLEM

Spyware is built not to be seen.

Commercial spyware and stalkerware are designed to leave no visible trace on the phone. The people most at risk - officials, diplomats, executives, journalists - are rarely told. LUMA gives the person responsible for their security a clear answer for each device.

HOW IT WORKS

Every verdict has layers. Open any of them.

DETERMINISTIC · REPRODUCIBLE

Same input, same verdict.

A second examiner who runs the same capture gets the same result. There is no AI model in the decision.

THE REPORT

A finding is worth what its limits are worth.

One verdict per device

Clean, or evidence. No scores to interpret.

Findings with their limits

Each finding states what it rests on and what the data could not show.

A report you can hand over

A full forensic report for the examiner, and a short summary for the decision maker.

CHAIN OF CUSTODY

From consent to verdict, on the record.

  1. [time]Consent recorded
  2. [time]Capture received
  3. [time]Examination run
  4. [time]Report issued

REMOTE CAPTURE

When the phone is not in the room.

The examiner sends the device owner a secure upload link. The owner reads the terms in their own language, gives consent, and uploads the capture. Uploads are deleted automatically after 24 hours unless the owner chooses otherwise.

  • HEBREW
  • ENGLISH
  • ARABIC
  • RUSSIAN
  • SPANISH
  • FRENCH
  • PORTUGUESE

WHO IT IS FOR

Built for the people who protect others.

Government and ministries

Device checks for officials and staff who handle sensitive work.

Diplomatic missions

Device checks before and after travel to high-risk countries.

Executive protection

Checks of the personal and work phones of principals.

TSCM examiners

A mobile forensic capability alongside the physical sweep.

OUR POSITION

What LUMA is and what LUMA is not.

LUMA IS

  • Defensive forensics on devices the operator is authorised to examine
  • Detection of spyware and stalkerware
  • An examination that runs on the examiner's workstation
  • Consent-based remote capture

LUMA IS NOT

  • A tool to access other people's devices
  • Surveillance or interception
  • An offensive cyber tool
  • Mass data collection
"LUMA is a defensive forensic platform. It operates only on devices the operator is authorised to examine. It does not provide access to third-party devices, surveillance or offensive capability."

CONTACT

Request a briefing.

A live demonstration on a test device, and a technical Q&A for your team.

Request a briefing