/01
Undiscovered
Keys sit in photos, notes and files that nobody has reviewed for them, so the asset never enters the record.
State and local agencies
$30M+
in seizable digital assets identified for state and local agencies using CAT Labs.
European agency
$1M+
seized from seed phrases Recovery CAT found in evidence the agency already held.
Private keys found
100s
of crypto private keys hidden in agency data, discovered and accounted for.
Agencies possess enormous volumes of digital evidence and records containing private keys, recovery phrases, and cryptocurrency wallets. These artifacts can provide control over substantial financial assets, yet often remain:
/01
Keys sit in photos, notes and files that nobody has reviewed for them, so the asset never enters the record.
/02
Funds live in case notes and spreadsheets, outside property and financial accountability processes.
/03
A seed phrase on a workstation or in a shared folder is a copy of the asset, open to anyone with access.
/04
One person can often see, copy or move a key with no second approval and no reliable log.
/05
Wallets tied to a case can be emptied after seizure by anyone else who holds a copy of the key.
/06
When an auditor or court asks who handled an asset and when, there is no complete answer.
Recent headlines prove the insider theft risk is real and systemic.
Blockchain analytics trace an address once you have one.
Discovery inside the data, then custody, monitoring and audit on one record.
Discovery engine
Scans forensic images, mobile extractions, cloud returns, documents, communications and other collected data for private keys, seed phrases and wallet artifacts, including text in photos and handwriting. Validates each find, derives addresses, checks balances, audits access to private keys, decrypts wallets.
Explore Recovery CAT →Security & custody
Holds key material under lattice-based threshold encryption, with transfer approval and seed access split between different people. No single insider can reveal a key or move an asset.
Explore Security CAT →The Digital Asset Inventory and Audit Act of 2026 (H.R. 10317), introduced in the House on September 8, 2026, would require every federal agency that seizes or collects electronic data to scan it for cryptocurrency key material, secure what it finds, and audit its digital assets every year.
The bill is pending in the House Judiciary Committee. The need it describes exists today: agencies already hold data that controls digital assets, and few can show where those assets are and who can reach them.
CAT Labs helps agencies build a defensible digital asset accountability program now, whatever the final requirements look like.
H.R. 10317 · introduced Sep 8, 2026 · pending
Expertise
Founded by a former DEA Special Agent who led the Hydra takedown, with former HSI and DEA forensic leadership on the team.
Technology
Ingests E01, AFF4, APFS, Cellebrite UFDR and Magnet AXIOM cases. On-device OCR and vision models read keys in images and handwriting. Six U.S. patents held by the team.
Deployment
On premises, fully air-gapped, or in AWS GovCloud and Azure Government, with a ledger of who saw, exported or derived every key.
NSF SBIR awardee
Award #2404481. Federal agencies and primes can buy CAT Labs technology sole-source under SBIR Phase III.
Contract vehicles
GSA MAS, Army ITES-SW2, and NASA SEWP / NASPO through Carahsoft.
Woman-Owned Small Business
CAGE 9JG62 · UEI ER1PDM1KV3B3 · NAICS 541511.
Recognition
World Police Summit 2025 Startup Innovation Award, first place.
It is the set of controls an institution needs to know which digital assets it holds or controls, protect the keys behind them, and prove what happened to each one. CAT Labs provides discovery, inventory, custody, monitoring and audit on one platform.
No. Blockchain analytics trace activity once you know a wallet address. CAT Labs works earlier and later: it finds the keys and wallets inside your data, then keeps them under controlled custody and on an auditable record. Most institutions use both.
No. Recovery CAT reads the output of the tools you already run, such as Cellebrite, Magnet AXIOM and forensic images, and adds the digital asset pass those tools were not built for.
No. The bill is pending. Agencies already hold data that controls digital assets, and an accountability program can start with discovery and inventory today.
On premises, fully air-gapped, or in AWS GovCloud and Azure Government. Sensitive data does not need to leave your environment.