VIGILITI Achieves AICPA SOC 2 Type II Attestation

/in /by

VIGILITI, the AI-powered information intake platform purpose-built for fusion centers and public safety organizations, today announced it has achieved AICPA SOC 2 Type II attestation. The independent audit, conducted by a licensed CPA firm, confirms that VIGILITI’s systems meet rigorous standards for security, availability, and confidentiality — the controls that matter most to the agencies and partners it serves. 

SOC 2 Type II attestation is one of the most recognized independent security attestations in the technology industry. For law enforcement, fusion centers, and federal agencies that process sensitive tip data, suspicious activity reports, and whistleblower submissions, it provides verifiable assurance that VIGILITI’s platform has been independently evaluated — not just self-assessed. 

“Public safety agencies are entrusted with some of the most sensitive information that exists,” said Lisa London, Founder and CEO of VIGILITI. “SOC 2 Type II attestation reflects our responsibility to earn and maintain that trust. Our agency partners deserve more than our word — they deserve independent validation that the controls protecting their data are real, tested, and working.” 

The attestation covers VIGILITI’s cloud-hosted platform environment and the controls governing data access, system monitoring, incident response, and information confidentiality. It complements the platform’s existing compliance posture, which includes support for GovCloud deployment options for agencies operating under federal data residency standards. 

SOC 2 Type II attestation is particularly significant for VIGILITI’s growing work with federal Inspector General offices and whistleblower intake programs. Agencies operating under the Whistleblower Protection Act, the Whistleblower Protection Enhancement Act, and other federal disclosure statutes require high confidence that the systems capturing sensitive disclosures protect submitter’s confidentiality. The SOC 2 Type II report provides documented, audited evidence of those protections. 

How a Mother’s Tip Stopped a White House Attack Plot — and What It Means for Threat Intelligence

/in /by

This past June 10, a mother in Danville, Ohio, picked up the phone and called local police about a “disturbance” involving her 19-year-old son. She wasn’t reporting a crime. She was reporting a feeling, the kind every parent recognizes when something in their child has shifted. New firearms. New friends online, men who claimed to be ex-military, who sent him maps and images late at night. A son suddenly obsessed with physical training and “recons” he wouldn’t explain.

That single phone call is the reason five men face federal charges today instead of attacking a UFC event held on the White House grounds. According to the criminal complaint, the plot involved explosive-laden drones over the crowd and snipers positioned on the evacuation routes, aimed at sitting members of Congress and other “high value targets.” The stated goal, in the suspect’s own words, was to “jumpstart” a revolution.

It did not start with a dashboard. It did not start with an algorithm flagging an anomaly in a sea of data. It started with a mother who noticed, and who knew what to do with what she noticed.

It’s the same pattern in nearly every targeted violence case that gets stopped in time. DHS-funded threat assessment research has shown for years that most of these incidents are preceded by observable behavior, behavior that someone, somewhere, saw. A purchase. A comment. A map left open on a phone screen. The intelligence exists before the attack does.

The only question is whether it reaches someone who can act on it, and whether it reaches them in a form they can use.

That second part gets overlooked constantly. A worried mother calling a non-emergency line is not the same as a worried mother giving investigators a clean, structured, time-stamped account of firearms purchases, online handles, and travel plans.

The difference between a vague report and an actionable one often determines whether the next forty-eight hours are spent verifying a tip or chasing a trail that’s already gone cold. In this case, investigators moved fast enough to identify a Signal chat with roughly twenty co-conspirators and unravel the plot in days. That speed is not guaranteed. It depends entirely on how well the system captures what the reporting party already knows.

It’s the argument VIGILITI has been making since day one. Threat intelligence does not begin with analysis. It begins at intake, the moment a parent, a coworker, a neighbor, or a teacher decides to say something. If that moment is handled by VIGILITI’s patented information intake layer, designed to draw out the who, what, when, and where without leading the reporter or putting words in their mouth, the resulting report is something investigators can move on immediately.

The Ohio mother did everything right; in a sense, she probably never thought to name. She watched her son closely enough to notice when something stopped adding up, and she picked up the phone instead of telling herself it was nothing. The system on the receiving end has to match that courage every time, for every caller, whether they’re calm and articulate or scared and rambling.

Not every concerned parent, or citizen for that matter, will have a case this clear. Most won’t be able to name a Signal group or point to a sniper position on a map. They’ll just know that something is wrong. The agencies and organizations that get this right, public safety, fusion centers, corporate security, are the ones that built an intake process capable of taking that uncertainty and turning it into something investigators can act on immediately, without forcing a frightened family member to do the analyst’s job for them.

A mother’s instinct stopped an attack on the White House lawn. The system she called into has to be worthy of that instinct.

How strong is your front door?