Skip to content
About

An independent specialist practice, a narrow scope, a high bar for confidentiality

Signum Cyber is an independent mobile-security and digital-forensics practice based in Zagreb. It works exclusively on the technical examination of devices and user accounts controlled by the client.

The practice does not perform investigative work. We do not identify, track or accuse anyone, and we do not gather information about third parties. We work with private clients and with anyone who needs a sober technical assessment without dramatisation.

The methodology follows documented examination procedures for iOS and Android devices and relies on verifiable artefacts. Where something cannot be established, it is stated explicitly as a limitation of the examination.

  • Discretion by default

    No public references and no case studies with recognisable detail. Visits are by appointment only, and the exact office location is disclosed after intake.

  • Verifiability over persuasion

    Every statement in the report carries its source and method. We do not express probabilities of compromise and never promise absolute security.

  • A narrow, clearly defined scope

    Device, user-account and credential-exposure examination. Account security hardening happens only after evidence preservation and separate written authorisation.

A person by a window holding a phone in a quiet, softly lit room
Operating principles

We work calmly, without dramatisation and without conclusions before examination.

  • No tracking cookies and no behavioural analytics.
  • Client-owned devices; company devices only with formal written authority.
  • Intake in Zagreb, by appointment only after the assessment.
  • Available across the European Union; devices are shipped to Zagreb.
Scope and limitations

What the examination does not cover

  • We do not carry out investigative work and do not identify, track or accuse individuals.
  • We do not promise physical full-file-system acquisition or universal detection of monitoring software.
  • We do not attribute responsibility to any person or organisation.
  • The absence of indicators within the available dataset does not prove that no compromise occurred.
  • A credential-exposure record does not in itself prove device compromise.
Safety notice

If you feel unsafe, safety comes first.

If there is any risk of violence, stalking or coercion, do not examine the device yourself and do not confront the person you suspect. Reach out to people you trust and to the relevant services first, and only then to a technical examination.

  • In an emergency in Croatia, call 112.
  • Contact us from a separate trusted device and a network the other person cannot access.
  • If your immediate safety requires action, safety takes priority over preserving traces.