Nobody can monitor “everything.” The honest map of what’s visible online.

I build a reputation-monitoring tool for a living, so believe me when I say this against my own interest: anyone who promises you full coverage of the internet is lying to you. Not exaggerating. Lying. The access required to keep that promise does not exist, not for me, not for the most expensive agency you can hire, not for anyone.

This post is the map I wish existed when I started: what any legitimate tool can actually see, platform by platform, and what stays dark no matter how much you pay. I would rather tell you this on my own blog than have you find out after paying someone.

The visible layer: what honest monitoring genuinely covers

• Open web and news. Search-indexed pages, news sites, press, blogs, forums. This is the dependable backbone. If a newspaper, a blog, or an indexed forum mentions your name, it is findable, in most languages.
• Reddit. Searchable through an official interface. Threads, comments, communities.
• Bluesky and Mastodon. Open by design. Public posts are searchable.
• Newsletters and blogs with feeds. Substack and most blogs publish standard feeds anyone can watch.
• Breach databases. Whether your email address appears in known data breaches can be checked legitimately (the Have I Been Pwned model), and it never requires exposing the leaked secrets themselves.
• Indexed fragments of the closed platforms. Some public Instagram or YouTube pages get indexed by search engines. Those crumbs are findable. This matters for the next section, because crumbs get sold as coverage.

The dark layer: limits on outside access

• Keyword monitoring across Instagram, Facebook, or TikTok feeds. The platforms offer that access to no outside service. Full stop. What a tool can catch is what search engines have already indexed from them, which is partial and delayed. A service claiming it “watches everything on social media” is describing a product that cannot exist.
• X (Twitter) without a serious budget. Searching X programmatically is a paid, gated product: shallow access costs real money and full access costs an enterprise budget. Most consumer services quietly skip it and do not mention that.
• Private accounts, direct messages, closed groups. These are not generally available to an outside public-web search. Access authorized by an account owner or participant is different from public monitoring; it does not make private content openly searchable.
• Messaging apps. Access depends on the type of conversation. Telegram has public groups and channels as well as private chats. Its ordinary cloud chats differ from end-to-end encrypted Secret Chats. Public content and private conversations should not be treated as one category.

This dark layer matters: an outside search cannot be assumed to cover private conversations or restricted content. And it matters more every month: with deepfake abuse escalating to the point where schools are removing student photos from their websites, knowing precisely where your visibility ends is not pedantry. It is the difference between informed caution and false comfort.

How the industry handles this gap

Mostly by not mentioning it. The word “everything” does heavy lifting in this market, and the gap between what is promised and what is delivered has been measured:

• A 2024 Consumer Reports evaluation followed 32 volunteers across 13 people-search sites over four months. The services reduced exposure and saved time, but every participant’s information remained on some sites at every checkpoint. This small evaluation shows why paying for removal should not be mistaken for complete removal.

None of this means these categories of service are useless. It means the promises outrun the access, and the customer pays the difference.

What honest monitoring looks like instead

One design decision fixes most of this, and I think every service in this industry should be forced to adopt it:

Every report opens with a coverage map. One page, first page, that lists what was checked, what was found, and what stayed dark. Checked: news, open web, indexed pages, Reddit, Bluesky, Mastodon, feeds, breach databases. Dark: private accounts, DMs, closed groups, unindexed social feeds. Every time, even when the answer is “nothing found.”

Because “nothing found in the places that can be checked” is an honest, useful answer. “All clear” is not, and no one can truthfully say it.

The visible layer is worth watching precisely because it is where the consequences happen. The moments people actually get blindsided, a recruiter’s search result, a creditor’s call, a printout in an interview, an indexed smear, an extortion email quoting a breached password, live overwhelmingly in the layer that CAN be watched. You cannot see everything. You can absolutely see the part that gets used against you.

If you find threats, impersonation, or intimate-image abuse, our free guide covers steps to take when harmful content appears.

If you want the full map

I wrote a short, free PDF called Monitoring Reality that goes platform by platform in plain words: what can be seen, what cannot, and the blind spots most services keep quiet about. No purchase needed. Read it and you will be harder to overcharge, whether you ever buy from me or not.