Threat Lab
Supporting Safer and More Secure Online Participation
Our Threat Lab is the main unit working with internet users and organizations looking to enhance their safety and security online.
As part of our mission to advance digital safety, our Threat Lab provides three core interventions: Digital Safety Assessments, the Digital Safety Helpdesk, and the Forensic Lab. Each of these services are designed to protect internet users facing digital threats, or to equip individuals and organizations with the necessary skills to prevent digital compromise.
You can find an overview of the core interventions it offers below:
1. Digital Safety Assessments (DSA)
Through this assessment, we help your organization identify security gaps and build stronger digital posture.
Process Outline:
Introductory Meeting: We walk your management team through the process.
Intake: A comprehensive questionnaire covering:
- Data (Classification, Access, Storage)
- Devices (Hardware, Configuration, Software)
- Communication (Email, Tools, Online Presence)
- Physical Security (Office, Travel)
- Education (Trainings)
- External Services (Vendors & Contractors)
- Contingency Planning (Backups, Procedures)
- Responsibility (Roles, Governance)
- Policies, Privacy, Geography, Organizational Structure
Report Generation:
- Digital Wellness Report
- Recommendation Report
- Grading Sheet
- Policy Templates
Training: Tailored to the organization’s needs, online or in-person.
Follow-Up: Six months later, SMEX checks progress, reassesses risk, and updates the digital grade.
Regrading: One year later, a second intake and updated report are completed.
Final Evaluation: A survey to assess the project’s overall impact.
Confidentiality is guaranteed through a signed Code of Conduct. Reports include clear milestones and timelines to support step-by-step progress.
2. Digital Safety Helpdesk
The Digital Safety Helpdesk supports activists, journalists, bloggers, marginalized communities, and human rights defenders in Arabic-speaking countries experiencing cybersecurity incidents or online threats.
What We Help With:
- Doxxing
- Online harassment or blackmail
- Hate speech and cyberbullying
- Sextortion
- Defamation campaigns
- Device behavior anomalies
- Surveillance concerns
- Gender-based online violence
Helpdesk Services:
- Account recovery and impersonation removal
- Hacked account reactivation
- Security tips for devices and platforms
- Content removal related to harassment, fake news, hate speech, etc.
All requests are triaged by urgency and capacity through an internal incident handling system.
3. Digital Forensics Lab (DFL)
The Digital Forensics Lab uncovers digital threats that impact people’s safety and privacy. Our cybersecurity experts analyze compromised devices, investigate suspicious applications, and research spyware, malware, and surveillance tools to understand how they are used.
The DFL’s goal is to support individuals, journalists, and members of civil society in navigating risks that could compromise their digital security.
Our Forensic Lab service is in the process of being integrated fully into the Threat Lab’s public offerings.
It provides:
Threat Analysis:
- Phishing and suspicious link analysis
- Suspicious SMS and file checks
- Malware and software threat detection
- Website hacking recovery
Endpoint & Server Security Checks:
- Server hardening and architecture review
- Android application analysis
- Device protection suggestions
Digital Forensics:
- Android & iPhone forensic analysis (bugreports, sysdiagnose, backups, takeouts)
- Endpoint forensics (Windows & Linux logs and artifacts).
Trainings:
- One on one digital security training tailored to the user after forensic analysis.
- Group training for human rights defenders, journalists, or an organization’s team members, based on the incident that occurred.
Web Security Analysis & Governance:
- Security checks for lightweight web apps
- Governance support and planning for cyber-hygiene
Facing a digital attack, hacked account, online harassment, or security threat?
Reach out to us immediately.
Our Digital Safety Helpdesk provides fast, confidential, and human-centered support.
We can help with:
Account security and recovery
Phishing and hacking incidents
Online harassment and threats
Privacy and digital safety guidance