Cobwebs Technologies is an Israeli OSINT and web intelligence vendor founded in 2009 in Tel Aviv by Udi Levy and Omri Timianker, acquired in June 2023 by Penlink, a US-headquartered surveillance vendor. The company’s platforms automate the collection and analysis of public web data, dark web sources, and social media for law enforcement, intelligence, and corporate security customers. Cobwebs was added to the US Department of Commerce Entity List in November 2021, alongside NSO Group, Candiru, and Positive Technologies, for activities contrary to US national security interests.
What it means in practice
Cobwebs’ Tangles platform aggregates publicly available information from open web, social media, dark web, deep web sources, and commercial data brokers into investigative workflows. The product supports identity tracing, network mapping, content monitoring, and geographical analysis. Cobwebs also offers Web-Loc, a mobile tracking product that uses cellular and Wi-Fi positioning data sourced from commercial advertising networks. The combined product set provides investigators with persistent surveillance capability against targets identified by phone number, email, social media handle, or face image.
Specific things to know
Cobwebs’ Entity List addition in November 2021 was based on findings that the company had supplied tools to foreign governments that used them against journalists and activists. The June 2023 acquisition by Penlink, completed after the Entity List addition, restructured the corporate ownership but did not remove the underlying capability. Penlink operates in adjacent surveillance markets including communications intercept and IoT data analysis. The combined entity continues to market the Cobwebs product line to government customers.
Change today
If you are a journalist, activist, or other plausible target of Cobwebs-class capability, the operational answer combines several defensive practices: data minimisation across public-facing accounts, careful management of pseudonymous identities to prevent linkage, recognition that commercial advertising data is part of the surveillance pipeline (which limits the privacy of phone-based location data), and operational compartmentation between identities that should not be linkable. The phone-number-as-identifier problem is structural and is one of the most consistently exploited surfaces in this market.
Related articles
See our coverage of the US Entity List actions against commercial spyware vendors, the role of commercial advertising data in surveillance pipelines, and the operational defences for high-risk targets against OSINT aggregation.