Talk to Quinn,
not a sales pipeline.

About Quinnlan Varcoe

The investigator on the other end of the call.

I'm Quinnlan Varcoe. I founded Witness in 2022 after a decade of incident response and threat intelligence work for Fortune 50 enterprises and the defense industrial base. I hold 15 active certifications across GIAC, AWS, Splunk, CompTIA — the same credentials that get forensic findings admitted in federal court.

I started this practice because the people who actually need DFIR work — individuals being stalked, attorneys preparing for trial, family offices recovering from wire fraud, small businesses hit by ransomware — were getting the worst of an industry built for billion-dollar enterprise contracts. Either they were priced out, or they were sold automated scans dressed up as investigations, or they were handed off to junior staff after the sales call. None of those outcomes are acceptable.

I scope every engagement and oversee the practitioner team executing the work. Alex Riffenburgh, our Co-Founder & CTO, oversees the technical work hands-on under my methodology, and I review every case before findings leave the practice. No sales pipeline. No off-shoring. No black-box delivery. If we are not the right fit for your case, I'll tell you, and where possible I'll refer you to someone who is.

Who we work with

• Individuals and families facing stalkerware, account compromise, identity theft, romance scams, or domestic-violence situations involving digital evidence.
• Attorneys who need court-admissible forensic phone extraction, e-discovery support, expert-witness testimony, or spoliation analysis — primarily in family law and commercial litigation.
• Family offices and HNW principals who need discreet investigative support, privacy services, and a security program ownership layer their wealth manager cannot provide.
• Small and mid-sized businesses that need real cybersecurity without the enterprise pricetag — managed services, vCISO, incident response.
• Other security firms, MSPs, and law firms who refer cases to us or sub-contract us as a white-label partner. See enterprise services for partnership terms.

What we will not do

• Take a case where simpler steps would actually resolve the situation
• Bill for work that wasn't scoped or approved in writing
• Promise outcomes we cannot guarantee — recovery, attribution, prosecution
• Run a single automated scan and email a one-line result
• Hand your case off to junior staff after the consultation

How an engagement begins

1. Confidential consultation. NDA-protected. 30-60 minutes. Direct conversation, no sales process.
2. Scoped engagement. Written proposal — fixed fee where it applies, hourly with milestone caps for open-ended investigations.
3. Investigation and findings. Court-admissible standards. Written report you can act on.