EVULNABLE
Menu
Platform How It Works Capabilities Use Cases Methodology About
Contact
Contact Look up a company

Corporate Due Diligence, Evidence-Graded and Sourced

AI-assisted research and evidence-graded due diligence for screening companies, vendors, suppliers, and counterparties.

Look up a company See How It Works

$29.99 per report

Every finding cites its source and the date it was retrieved What could not be established is reported as a gap, never a clear Risk and confidence are reported separately, never merged

IllustrativeSample findings, not a real assessment. EVULNABLE screened as its own example.

Due Diligence ReportEVULNABLE · specimen
RiskNot established
ConfidenceReported
Gaps1
Key findings
Official VerifiedRegistration and active status confirmedCompanies register, read directly · retrieved 06 Mar 2025
Published ReportedTrading name matches the registry filingOne published source, not independently corroborated · retrieved 04 Mar 2025
Observed VerifiedMail authentication enforced; no breach disclosures foundTest EVULNABLE ran against the domain · retrieved 08 Mar 2025
○Gap — audited accounts not publicly filedNot a finding: no source consulted carries it

No data found is a gap, never a clear. Risk and confidence are reported separately.

View a full specimen report →34 sources · dated retrievals
What you get

See a Full Specimen Report

The same illustrative example the hero card shows, at report scale. Scroll it here, or open the complete specimen.

IllustrativeSample findings, not a real assessment. EVULNABLE screened as its own example.

Due Diligence ReportEVULNABLE · specimen
RiskNot established
ConfidenceReported
Gaps1
Key findings
Official VerifiedRegistration and active status confirmedCompanies register, read directly · retrieved 06 Mar 2025
Published ReportedTrading name matches the registry filingOne published source, not independently corroborated · retrieved 04 Mar 2025
Observed VerifiedMail authentication enforced; no breach disclosures foundTest EVULNABLE ran against the domain · retrieved 08 Mar 2025
Observed VerifiedNo match on the primary US, EU or UK sanctions listsOFAC SDN, EU consolidated and UK Sanctions List, read directly · retrieved 06 Mar 2025
Observed VerifiedNo listed ransomware activity foundRansomware.live · retrieved 07 Mar 2025
○Gap — audited accounts not publicly filedNot a finding: no source consulted carries it
○Gap — beneficial ownership not independently verifiedNot a finding: EVULNABLE does not independently verify beneficial ownership

No data found is a gap, never a clear. Risk and confidence are reported separately.

View a full specimen report →34 sources · dated retrievals
Open the Full Specimen Report →
What a screen reads

Coverage: Registries, Sanctions Lists, and What Is Not Covered

Every screen reads directly from named government registries and official sources. Coverage depends on what each jurisdiction publishes and which of these a screen actually reads for a given subject; a missing record is reported as a gap, never treated as a clean result.

Corporate registries
RegistryJurisdiction
SEC EDGARUnited States — public companies
Companies HouseUnited Kingdom
Secretary of State business registryUnited States — Oregon and Iowa
DLCP business registryUnited States — District of Columbia
Corporations CanadaCanada
Registro de Empresas y SociedadesChile
BORME gazetteSpain
Sanctions lists
ListPublished by
OFAC SDN listUnited States government
Consolidated sanctions listEuropean Union
UK sanctions listUnited Kingdom government

What is not covered

  • PEP (politically exposed person) screening is not included on the current screen.
  • Beneficial ownership is not independently verified.
  • Employment, tenant, consumer credit or any other background screening of individuals is not performed — EVULNABLE screens businesses.
  • No analyst reviews a report before it reaches you; every report says so on its own cover.
One company, screened

$29.99 per report

An evidence-graded due diligence screen of one company. Every finding cites its source and the date it was retrieved, and what could not be established is listed as a gap rather than passed over. No analyst reviews a report before it reaches you, and every report says so on its own cover.

Current screen includes entity identification, primary sanctions screening, technical/cyber observations and published-source research where available. PEP screening is not included. Unassessed areas remain explicit gaps — see Methodology for current source coverage.

You see exactly which company would be screened before you pay for anything. Nothing is charged until you confirm payment on the checkout page.

Look up a company Talk to Us

See how your data is handled — what is collected, how long it is kept, and how to request a correction or deletion.

Built for teams that manage risk
🛡
Security
▤
Compliance
⚙
Procurement
⚖
Legal
↗
M&A / Investment
▥
Financial Services
◎
Third-Party Risk
How it works

From Company Name to Report in Four Steps

The first two steps show you which company would be screened, before anything is bought.

  1. Enter the company

    Type the company name. Add its registration number and a two-letter country code if you have them — the registration number is the surest way to identify a company.

  2. See which company we'd screen

    We check the registers directly and show which company would be screened, before anything is bought. If more than one matches, you choose. If none does, nothing is screened and nothing is charged.

  3. Confirm and pay

    Confirm which company, add your email — the receipt and the report both go there — and pay on the secure checkout page. A domain, which enables the cybersecurity check, and a promo code are optional. Nothing is charged until you confirm payment on the checkout page. The report is $29.99.

  4. Get the report

    The screen runs once your payment is confirmed. The report reaches your inbox when it is done: the email links to it and deliberately contains no findings, because email is not a confidential channel.

Illustrative screens, using a sample company. Walk through the full flow.

Where database-only checks stop

Identifying and Reporting Coverage Gaps

Basic database checks only show part of the picture. Important information may exist in government websites, local registries, court records, regulator notices, media, historical company names, or related entities.

EVULNABLE is designed to use AI-assisted research to identify those gaps and investigate further, and to state plainly the ones it cannot close.

Research capabilities

Research Domains Covered

Multi-source research across corporate, legal, regulatory, financial, reputational, and cyber domains. Availability varies by jurisdiction and source.

▦

Corporate identity & registration

Legal status, register details, identifiers, activity, and the former names a search on today’s name would miss.

⌘

Ownership, group & related entities

Parents, subsidiaries and affiliates, with publicly disclosed ownership information where available. EVULNABLE does not independently verify beneficial ownership.

♙

Directors, officers & management

Business-role information when a verified source ties a named officer, director or owner to the screened entity. EVULNABLE does not perform standalone background screening of individuals.

◇

Sanctions lists & government records

The primary US, EU and UK government sanctions lists, plus enforcement notices, gazettes and official records our research surfaces where a jurisdiction publishes them.

⚖

Litigation, insolvency & court records

Proceedings, judgments and financial distress, from court and registry sources where they are published.

▣

Adverse media, in the local language

Negative coverage and allegations — including the reporting an English-only search never returns.

♨

Cyber exposure

DNS, mail authentication, certificates and publicly observable posture, tested directly rather than asserted.

↶

What could not be established

Every unanswered question is recorded as a gap, with where the answer lives and what it would take to get it.

Where a report comes from

Public Records and Official Registries, Analyzed With AI

Every screen reads directly from named government registries and official sources, then runs an AI-assisted research pass that checks, cross-references and grades what those sources actually say. The value is in that verification and correlation work on every paid report, not in the records themselves being publicly available.

▦

Corporate registries

SEC EDGAR (US), UK Companies House, the Oregon and Iowa Secretaries of State, DC’s DLCP business registry, Corporations Canada, Chile’s Registro de Empresas y Sociedades, and Spain’s BORME gazette — read directly from each register, not through a reseller.

◇

Sanctions lists

The primary US, EU and UK government sanctions lists, read directly from each government’s own publication.

⚖

Ransomware history

Ransomware.live’s listed-victim data, used under its terms and named here as its terms require. An independent project with no SLA or warranty — treated as unverified, not an official record.

♨

Public internet signals

DNS, mail authentication (DMARC, SPF, DKIM, DNSSEC) and certificate checks EVULNABLE runs itself against the subject’s own domain — our own measurement, not a public record.

Coverage depends on what each jurisdiction publishes and which of these a screen actually reads for a given subject; a missing record is reported as a gap, never treated as a clean result. Naming a source here describes what EVULNABLE reads from it — none of these bodies reviews, sponsors or endorses an EVULNABLE report.

How the research agent works

What the Research Agent Does

The research agent is designed to do more than condense a mechanical report. It can identify gaps, investigate former names and related entities, search additional sources, compare records, translate material, and decide when further research is needed.

Identifies gaps and promising leads Searches additional and local-language sources Seeks corroboration and records when it cannot be established. Flags likely false positives Preserves evidence traceability

This kind of research has real limits: translation can misstate a source, a name alone can point at the wrong entity, and different sources can disagree. The confidence grades and gap register on every report exist because of that, not instead of it — a flagged false positive is a caught one, not a solved one.

Research cycle
Collect
Analyze
Identify Gaps
Research
Corroborate
Repeat if Needed
Global research

Research Across Language Barriers.

Relevant evidence may exist outside the English-language web. The system can identify useful languages, generate native-language searches, translate retrieved information, and preserve original source material.

Multi-language research Local and regional sources Original evidence retained Translation review flags when appropriate
Evidence-first approach

From Finding to Original Source

Important conclusions are designed to remain traceable to supporting evidence and source information.

Report Statement

The customer-facing conclusion written in context.

Finding

The structured issue, assessment, and confidence level.

Supporting Evidence

The records, documents, or sources supporting the finding.

Original Source

Source URL, retrieval date, language, and provenance.

Four marks, kept apart. A report says what the exposure is, where each fact came from, how well established it is, and what could not be established at all — and it never merges them into one number. A low-risk finding you can rely on and a low-risk finding nobody could verify are not the same information, and a single score would have to hide one of them.

A gap is not a clean result. Where nothing was found, the report records that we looked and could not tell, with the record that would settle it. Averaging is not used, because it lets an unexplained gap read as reassurance.

And the rating measures the diligence effort warranted, not the probability that anyone has done anything wrong. How a report is graded.

Use cases

Common Use Cases

Vendor Due Diligence

Evaluate suppliers and vendors before onboarding.

Third-Party Risk

Add research depth to counterparty risk decisions.

M&A / Investment

Gather additional intelligence before deeper transaction review.

Strategic Partnerships

Understand counterparties before significant relationships.

Procurement

Support more informed vendor-selection decisions.

Corporate Investigations

Go beyond basic screening when more context is needed.

Trust, security & privacy

Trust and Security Practices

The product is designed around evidence traceability, controlled AI research, privacy-aware reporting, a stated retention position, a route to correct a finding, and every report marked as an unreviewed draft.

That applies to every report: no analyst reviews one before it reaches you, and each says so on its own cover.

What this product is for. EVULNABLE screens businesses — companies, vendors, suppliers and counterparties. It does not perform employment, tenant, consumer credit or any other background screening on individuals, and it is not a consumer reporting agency. It does not build a roster of a company's directors or officers from public records; a person's name appears in a report only when a verified, cited fact names them, the same as any other finding.

An EVULNABLE report complements the commissioning organization's commercial screening and does not replace it; both should be run in parallel for audit-trail purposes.

Evidence Traceability Stated Gaps Source Transparency Corrections & Disputes Controlled AI Research Privacy-Aware Reporting Retention Stated Plainly Secure Data Handling