One Platform for Secure, Persistent Online Investigations

Each SockPuppet instance includes an always-on cloud-based desktop, customizable to your investigative needs. With persistent storage and isolated environments, all activities remain separate and secure.

Equip your investigative environments with a mobile phone device that match the regional characteristics of your choice. These phones allow for persistent, consistent communication endpoints for investigative research workflows.

Alias provides access to genuine end-user internet connectivity in the geographic region you select—avoiding VPNs, datacenter IPs, and other easily flagged network sources. Your research environments operate from authentic local network conditions, with traffic routed through real consumer networks outside of the virtual environment, ensuring natural, consistent attribution.

Access region-specific SMS numbers tied to local mobile operators, ensuring that your investigation’s communication aligns with its geographical footprint. This feature supports verification workflows across platforms that require SMS-based confirmation, eliminating the need for disposable or physical device.

Alias offers optional evidence capture capabilities via full-session screen recording across both the virtual desktop and virtual phone, capturing everything that occurs during an investigation for review, training, or evidentiary use. Recordings can be played back, downloaded as evidence bundles, or integrated with third-party case-management platforms to maintain a clear chain of custody. Each instance also includes ForensicOSINT, enabling high-clarity, court-admissible screen captures, full-page preservation, and legally-tailored evidence reports with secure authentication.

Our platform empowers you to customize your online presence, ensuring that your activities align with your intended identity. Whether you’re conducting sensitive research or engaging in discreet investigations, you can confidently manage how your online investigation is perceived, enhancing both security and operational success.

Each Alias instance includes a dedicated Secure File Vault for safe, bi-directional file transfer between your local environment and the virtual workspace. Files never come into direct contact, preserving segmentation and maintaining operational security. This out-of-band transfer workflow allows you to securely move evidence, reports, downloads, and exports without exposing your identity or device. Additionally, files uploaded to the platform can have metadata stripped ensuring sensitive attribution details are not leaked into investigations.

The Credential Vault is a built-in system for managing every component of your investigation — PII, Photos and supporting images, background context, and account credentials — securely in one place. Each investigation’s data stays fully organized and contained within the platform, eliminating the need to store sensitive details on local devices or external systems where they could be exposed. This ensures consistency, operational security, and clean separation between the investigator’s personal environment and their investigative work.

For organizations with heightened security requirements, Alias supports customer-owned encryption keys for all virtual devices and stored data. This ensures that SockPuppet, infrastructure providers, and third parties cannot access your investigative environments or evidence. You retain full control over key management, safeguarding sensitive workflows and maintaining strict data sovereignty.