Cloak HarborExposure Defense

System status

Cloak Harbor Personal Exposure Defense pilot surfaces. We show honest states — live, degraded, planned or missing environment configuration — and never present fallback fixtures as live data.

Pilot application operational · authorized_local · externalActionTaken:false

Persistence

  • Postgres case backendLive

    Durable principal, evidence, findings, Kanban, report and intent storage.

    env: DATABASE_URL or POSTGRES_URL

Case Management

  • Case KanbanLive

    Local case task creation and lane movement backed by the active case-state store.

    env: DATABASE_URL or POSTGRES_URL

  • Case calendarLive

    Case cadence derived from persisted remediation tasks.

    env: DATABASE_URL or POSTGRES_URL

Reporting / Handoff

  • Executive reportsLive

    Case-derived report generation and human-review intents persisted locally.

    env: DATABASE_URL or POSTGRES_URL

  • DocsLive

    Publish approved case-derived executive reports to the PlatPhorm Docs service.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

  • SheetsLive

    Export approved findings, risk scores and task matrices to PlatPhorm Sheets.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

  • FilesLive

    Upload approved reports, evidence bundles, and public media candidate manifests to the PlatPhorm Files service.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

Deployment

  • Visibility policyLive

    Runtime flag for redacted, private, or public authorized case data surfaces.

    env: CLOAK_VISIBILITY_MODE

  • Vercel runtimeLive

    Production request/runtime metadata and deployment environment awareness.

  • Vercel Connect OAuthPlanned

    Delegated provider authorization through Vercel Connect. Cloak Harbor keeps provider tokens server-side and exposes only authorization and token-metadata status.

    env: VERCEL_OIDC_TOKEN or VERCEL_TOKEN

Evidence Storage

  • Public media captureLive

    Bounded public-photo candidate manifests stored through Files for authorized case review.

    env: CLOAK_PUBLIC_MEDIA_CAPTURE, PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

  • Vercel Blob evidence storageLive

    Server-side private artifact storage for OSINT run packets, evidence bundles, exports, and screenshots.

    env: BLOB_READ_WRITE_TOKEN

  • AWS evidence vaultLive

    Server-side AWS object-store credentials for evidence vault workflows.

    env: AWS_ACCESS_ID, AWS_ACCESS_SECRET

  • HunchlyLive

    Local Hunchly export indexer for protected evidence review when a desktop export directory is configured.

    env: HUNCHLY_EXPORT_DIR

Auditability

  • TraceLive

    Link case workflow intents and route checks into the PlatPhorm trace layer.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

  • MonitorLive

    Availability and recurrence monitoring for the public-safe Cloak Harbor surface.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

Exposure Discovery

  • BrowserOpsLive

    Run browser journeys, screenshots and public-safe capture workflows for authorized cases.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

  • SearchOpsLive

    Bounded exposure discovery and recurrence monitoring for authorized identifiers.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

  • Wayback evidenceMissing env

    Server-side archive checks for authorized public evidence and historical source links.

    env: WAYBACK_API_KEY · missing WAYBACK_API_KEY

  • Numverify phone validationLive

    Server-side APILayer Numverify validation for authorized onboarding phone identifiers, with evidence, Kanban, webhook, and Sandbox records.

    env: NUMVERIFY_API_KEY

  • ACE correlation mapLive

    Local graph-aware correlation scoring over authorized client identifiers with explainable remediation planning.

    env: DATABASE_URL or POSTGRES_URL

  • Sherlock ProjectMissing env

    Local Sherlock CLI adapter for authorized username and alias correlation checks.

    env: SHERLOCK_BIN · missing SHERLOCK_BIN

  • SpiderFootMissing env

    Local SpiderFoot command adapter for authorized domain, email, and entity pivots.

    env: SPIDERFOOT_BIN · missing SPIDERFOOT_BIN

  • EpieosLive

    Human-review queue for authorized email and phone checks until an approved server API contract is added.

    env: DATABASE_URL or POSTGRES_URL

  • IntelTechniquesLive

    Cloak-owned source playbook automation inspired by public OSINT workflows; generates evidence links and approval tasks for authorized identifiers.

    env: DATABASE_URL or POSTGRES_URL

  • Recovery-answer exposure reviewLive

    Defensive LLM-assisted review queue for public clues that may weaken password recovery questions. It never stores actual answer values.

    env: DATABASE_URL or POSTGRES_URL

  • Overpass TurboLive

    Bounded OpenStreetMap address-surface review for authorized address identifiers.

    env: DATABASE_URL or POSTGRES_URL

Evidence Validation

  • TrustOpsLive

    Evidence confidence, false-positive review and trusted-domain validation.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

  • SpecLive

    Local schema and contract validation for findings, evidence and action packets.

  • EvalsLive

    Score risk-rubric consistency, release readiness and action-packet quality.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

  • Public filings / PACERLive

    SEC EDGAR and PACER-style source-link queue for authorized entity, domain, and name review.

    env: DATABASE_URL or POSTGRES_URL

Agent-Safe Operations

  • ClawsLive

    Agentic remediation requests that remain protected and human-gated.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

  • SandboxLive

    Safe replay and dry-run execution for action packets.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

  • WebhookLabLive

    Webhook simulation and delivery testing for protected events.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

  • WebhooksLive

    Protected local event emission, HMAC signing, optional delivery target, and Postgres delivery ledger for case lifecycle events.

    env: DATABASE_URL or POSTGRES_URL

  • AgentUILive

    Agent-facing workflow validation and human-machine handoff review surfaces.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

  • Vercel Sandbox diagnosticsLive

    Optional isolated diagnostics for redacted OSINT run packets using deny-all network policy.

    env: CLOAK_ENABLE_VERCEL_SANDBOX

  • Vercel AI GatewayPlanned

    Model routing for AI-assisted drafts. Template fallback remains available when missing.

    env: AI_GATEWAY_API_KEY or VERCEL_OIDC_TOKEN

  • AI provider fallbacksMissing env

    Server-side fallback credentials for provider-specific workflows when Gateway is unavailable.

    env: OPENAI_API_KEY or ANTHROPIC_API_KEY or GROK_API_KEY · missing OPENAI_API_KEY or ANTHROPIC_API_KEY or GROK_API_KEY

  • PentestLive

    Authorized OSINT and surface-assessment handoff through the JC PenTest Harness MCP.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

Topology

  • AtlasLive

    Cross-site topology and relationship context for Cloak Harbor workflows.

    env: PLATPHORM_API_KEY, CLOAK_ENABLE_PLATFORM_HANDOFFS

Communications

  • Twilio communicationsMissing env

    Approved phone verification and client-notification workflows from server-side routes.

    env: TWILIO_API_KEY · missing TWILIO_API_KEY