Weight 22
Identity and access
Protect core accounts, recovery paths and administrator roles.
OBSERVA
Safe
Workflows/Authorized defensive workspace
OPSEC Dashboard
Identity, device, browser, account and communication hygiene.
72
OPSEC Score
Transparent defensive score, not a proof of compromise.
OPSEC Five-Step Loop
1Identify critical information
2Analyze adversaries and scenarios
3Inspect exposure surfaces
4Rate likelihood and impact
5Assign countermeasure owner, deadline and review date
HIBP Pwned Passwords Check
Privacy-preserving k-anonymity check. The password is hashed in the browser and never stored in reports by default.
The password is hashed in your browser with SHA-1. OBSERVA sends only the first five hash characters and the suffix for comparison; the password is never stored or reported.
Weight 18
Device hygiene
Keep devices updated, encrypted and separated by sensitivity.
Weight 16
Browser separation
Reduce cross-context leakage between personal, work and research sessions.
Weight 16
Communication hygiene
Protect sensitive content and metadata in routine collaboration.
Weight 14
Cloud sharing
Keep sharing explicit, time-bound and reviewable.
Weight 14
Travel and network posture
Reduce risk in public networks and temporary work environments.