Discover what everyone else misses.
OopsieMarbles continuously discovers, connects, and explains external exposure across identities, infrastructure, credentials, code repositories, documents, social platforms, and underground sources.
Stop chasing alerts. Start understanding risk.
Security isn't about collecting data. It's about connecting it.
Every exposed identity, credential, domain, repository, forum post, document or screenshot is another piece of a much larger puzzle.
Discover
Collect external intelligence from hundreds of public and restricted sources.
Connect
Build relationships between people, infrastructure, organizations, credentials, and digital assets.
Explain
AI-assisted investigations summarize why something matters and what should happen next.
Every relevant signal.
One person, every artifact that points back at them, and a score that moves only when independent sources agree.
Unmanaged VPN host answering on a corporate subdomain
4d agoSubdomain takeover candidate on a dangling CNAME
5d agoLive API key committed to a public repository
6d agoContractor account active after offboarding
9d agoEmployee résumé listing internal tooling and versions
11d agoNetwork diagram published on a public wiki
12d agoInternal invite link indexed by a search engine
18d ago
More evidence. Less guessing.
We don't promise perfect visibility. We promise better understanding.