Eliminate the metadata attack surface. Permanently.
Every day, UK organisations unknowingly publish roadmaps to their internal infrastructure through the metadata embedded in their public-facing documents. This is not a niche vulnerability — it is systemic, and it is exploited routinely.
Our mission is to make metadata sanitization as automatic and invisible as antivirus software — something that simply happens, without burdening your team or disrupting your workflows.
We measure success not by features shipped, but by the number of metadata-based attacks that never happen.
Dr. Mohammad Salauddin Sagar, PhD
Founder & Director, OpSec Ltd
Researcher, Institute of Management Greater Manchester · University of Bolton
"I founded OpSec because I kept seeing the same vulnerability exploited in breach after breach — metadata. It is invisible to the sender, obvious to the attacker, and completely preventable. We built the tool I wished existed."
What we stand for
Privacy by Design
Every architectural decision begins with the question: does this protect our clients' data? Privacy is not a feature — it is the foundation.
UK Sovereignty
All processing, storage, and infrastructure operates within UK borders. We will never route client data through US or EU systems.
Precision Over Coverage
We build one product and build it exceptionally well. OPSEC Scrub does one thing — and it does it better than anything else available.
Transparency
Our audit logs are designed to be read by your auditors, not just our engineers. Transparency is how we earn trust.
Your data never leaves UK jurisdiction.
In an era of cross-border data transfers, foreign intelligence collection, and extraterritorial legal reach, UK sovereignty is not a marketing claim — it is a technical and legal commitment.
Every component of OPSEC Scrub — compute, storage, networking, and logging — runs on infrastructure physically located in the United Kingdom, operated by UK entities, subject exclusively to UK law.
Infrastructure Commitment
Company Timeline
OpSec Ltd incorporated at King's Cross, London
OPSEC Scrub v1.0 — Silent Proxy architecture deployed
IASME Cyber Assurance Level 2 certification achieved
OPSEC Scrub v2.0 — AI sanitization engine launched
Cyber Essentials Plus v3.3 compliance certification
Work with us.
Whether you need a free risk audit, enterprise deployment, or a compliance consultation, we are here.