Detection should begin with the assumption that sophisticated threats may already be present.
MISSION
Mobile devices are critical infrastructure, yet the same mechanisms designed to protect them blind the people defending them. Sophisticated attackers exploit that asymmetry to their overwhelming advantage.
We recognized this imbalance and built Dataflow Forensics to level the playing field and close the gap.
Our technologies enable security teams to detect threats at the same elevated privilege level as the threats they face, with full custody of sensitive data maintained in secure environments.
Dataflow Forensics is a U.S. based research and technology company advancing mobile security forensics for government and national security organizations.
Founded in 2022. Headquartered in New York.
DFFIND, is a consent-based threat detection system provided exclusively to vetted government agencies and their authorized contractors.
DFFIND operationalizes threat detection outside the mobile operating system sandbox, scaling privileged access into an automated threat detection capability.
Consent-based Detection, informed by exploitation research.
Dataflow Forensics operates as part of the Dataflow Security Group, alongside its sister organization Dataflow Security.
Within the group, Dataflow Security focuses on advanced vulnerability research across modern operating systems and platforms. Dataflow Forensics translates those discoveries into operational capabilities used by government agencies on unlocked devices.
One team advances vulnerability research. The other operationalizes those discoveries into unsandboxed detection capabilities deployed in the field.
Co-Founder & Chief Technology Officer
Jonathan Levin is widely recognized as a leading authority on modern operating system internals.
He is the author of the Android Internals and macOS/iOS Internals series of books, widely regarded as the definitive references on the architecture and security mechanisms of modern operating systems.
His research focuses on kernel architecture, system security mechanisms, and exploit techniques across mobile and desktop platforms. His work forms the technical foundation of DFFIND.
Co-Founder & Chief R&D Officer
John Aakerblom leads research and development at Dataflow Forensics, focusing on advanced mobile threat detection.
With a background in kernel-level development and anti-malware technologies, he has spent the last decade doing security research on Android and iOS, developing offensive and defensive techniques for both the execution and discovery of sophisticated attacks.
His work at DFF translates vulnerability research and operating system analysis into capabilities that allow security teams to detect intrusions at the deepest levels of modern mobile platforms.
Co-Founder & Chief Executive Officer
Amitai Wolt is an entrepreneur and technology executive focused on building globally impactful companies.
Prior to founding Dataflow Forensics, he held leadership roles in several ventures and served as acting COO and CFO of a security startup that was acquired. He has also advised high-growth technology firms on strategy, operations, and international expansion.
At Dataflow Forensics, Amitai leads company strategy and development.
Detection should begin with the assumption that sophisticated threats may already be present.
Privileged system access must be applied with discipline and safeguards.
Deep system visibility should not come at the cost of unnecessary exposure of personal data.
Sensitive information must remain under the control of the agency that generated it.
Sustained defensive capability requires continuous research and system-level expertise
