Cobwebs Technologies
Cobwebs Technologies (PenLink) · Israel
Confidence 4/5
Technical capabilities
Cobwebs Technologies sells “WebLoc” and “Tangles” platforms for open-source intelligence (OSINT), social-media monitoring, dark-web research and mobile-device location intelligence. The vendor positions the products to government, law-enforcement, intelligence, and corporate security customers.
The Tangles platform performs entity resolution across social-media accounts, public databases and dark-web sources. WebLoc combines mobile advertising-ID location data, cellular triangulation derived from carrier feeds where available, and inferential targeting based on social-media disclosures. The Meta December 2021 disclosure included specific examples of fake accounts maintained by Cobwebs across Meta’s platforms for collection purposes.
Documented use
- US Immigration and Customs Enforcement (ICE): contracts disclosed through USAspending.gov for surveillance-vendor procurement.
- New York Police Department: NYCLU and Brennan Center disclosures (2021) identified NYPD Cobwebs procurement as part of opaque surveillance technology spending.
- Multiple US federal agencies: FBI, US Treasury, US Postal Inspection Service per public procurement records.
- International customers: government and law-enforcement entities across Europe, Asia and Latin America. Specific naming is limited by sales-confidentiality clauses.
The Meta December 2021 disclosure was the first sustained public attribution of Cobwebs activity. Meta removed approximately 200 fake accounts tied to Cobwebs collection operations.
Customer states
Cobwebs serves government customers across at least 35 countries per company marketing and public procurement records. The vendor states adherence to Israeli Defense Export Controls Agency (DECA) licensing. PenLink ownership since January 2023 brings additional US compliance overlay through the parent’s domestic regulatory framework.
Legal and sanctions status
- Not on the US Department of Commerce Entity List.
- Not designated by US OFAC.
- Subject to Israeli DECA export-licensing controls.
- Named (without regulatory action) in Meta Threat Report on Surveillance-for-Hire Industry (December 16, 2021).
- PenLink acquisition closed January 25, 2023.
Technical countermeasures
- Reduce public social-media footprint: Cobwebs builds on accessible web data. Privacy settings, periodic content review, and removal of historical exposure reduce surface.
- Account hygiene: hardware security keys, session-token revocation, and reviewing connected apps reduce vulnerability to scraping-based collection.
- Compartment identities: distinct accounts for activist, professional and personal contexts; avoid shared email addresses or phone numbers across them.
- Mobile location hygiene: limit ad-ID collection (iOS App Tracking Transparency, Android Privacy Sandbox where available); reset advertising identifiers regularly.
- Platform reporting: report suspected fake accounts to Meta and other platforms’ trust-and-safety teams.
Sources
- Meta, Threat Report on the Surveillance-for-Hire Industry (December 16, 2021)
- Brennan Center for Justice, NYPD use of surveillance contractors
- NYCLU, NYPD surveillance technology disclosures (2021)
- Reuters, PenLink acquires Cobwebs Technologies (January 2023)
- USAspending.gov, Federal contracts: Cobwebs Technologies
- Privacy International, Surveillance Industry Index profile
Update log
April 18, 2026: Entry created. Sourced from the Meta Threat Report on the Surveillance-for-Hire Industry (December 16, 2021), Brennan Center and NYCLU FOIL disclosures of NYPD usage, Reuters coverage of the PenLink acquisition (January 2023), and US federal contract records.
There’s no perfect setup. Anyone selling you perfect is selling fear. The goal is simple: make yourself a harder target than the person next to you.
