Leaked Flock Safety Code Exposes OS Investigate AI System for Police Surveillance

A technical analysis of client-side code exposed on Flock Safety's login portals has revealed OS Investigate, an unannounced artificial intelligence platform designed to track individuals and analyze vehicular travel patterns across police departments nationwide. The findings, first reported by WIRED and verified by independent security researchers, detail an AI-driven investigative system that links automated license plate reader (ALPR) networks with police databases and commercial records. Fl

2 min
Leaked Flock Safety Code Exposes OS Investigate AI System for Police Surveillance

A technical analysis of client-side code exposed on Flock Safety's login portals has revealed OS Investigate, an unannounced artificial intelligence platform designed to track individuals and analyze vehicular travel patterns across police departments nationwide. The findings, first reported by WIRED and verified by independent security researchers, detail an AI-driven investigative system that links automated license plate reader (ALPR) networks with police databases and commercial records.

Flock Safety's surveillance infrastructure currently operates across more than 6,000 communities in the United States. While the company has historically stated that its cameras only capture vehicle license plates rather than tracking individual people, the reconstructed codebase demonstrates direct capabilities for individual identification, behavioral profiling, and associate mapping.

Pre-Configured AI Prompts and Data Tooling

The exposed application files detail 45 specialized data tools and 69 pre-written AI prompts available to law enforcement users. Rather than querying single license plates associated with active warrants, OS Investigate enables open-ended behavioral queries that cross-reference:

  • Plate read timestamps and camera geographic coordinates
  • 911 dispatch calls, arrest records, and incident case files
  • Integrated ballistics test results
  • Commercial identity databases containing Social Security numbers, dates of birth, telephone numbers, known addresses, and family relations
Flock Safety OS Investigate Data Ingestion Pipeline

Behavioral Pattern Queries and Automated Dossiers

The system architecture marks an inversion of traditional license plate reader workflows. Instead of checking observed plates against static hotlists, the AI tool allows investigators to query movement patterns without specifying a suspect, vehicle plate, or active crime.

Pre-loaded prompts in the codebase include:

  • Witness and Frequency Discovery: Automated searches identifying vehicles most frequently recorded in a specific neighborhood during specified time windows, excluding whitelisted residents.
  • Associate Mapping: Algorithms that identify co-traveling vehicles by calculating camera pass timestamps within two-minute windows, surfacing top associates based on a 0.75 confidence threshold.
  • Pattern-of-Life Tracking: Filters detecting vehicles visiting multiple retail stores, banks, or gas stations across distinct municipal jurisdictions within defined multi-day windows.
  • Automated Individual Workups: One-command dossier generation combining local arrest histories, calls for service, and commercial identity records to rank and profile top individuals in a designated geographic area.

Flock spokesperson Paris Lewbel confirmed that OS Investigate is currently in pilot testing with select law enforcement partners, stating that features and workflows remain subject to revision before any broader commercial deployment.

Sources

Written by

More to read

  • Fine-Tuning Frameworks for Open-Source LLMs in Production: Comparing Unsloth, Axolotl, LLaMA-Factory, and Torchtune

    Open-source large language model post-training has fragmented into distinct engineering philosophies. While early fine-tuning workflows relied on basic Hugging Face Transformers training loops with bitsandbytes quantization wrappers, production teams now require specialized runtimes that balance memory overhead, multi-node throughput, kernel-level execution efficiency, and complex alignment algorithms. Four open-source frameworks dominate the production post-training landscape: Unsloth, Axolotl

    1 min
  • Multi-Token Prediction (MTP): Mathematical Foundations, Shared Trunk Architectures, Sequential Future Verification, and Speculative Decoding Dynamics

    The standard training objective for autoregressive large language models is next-token prediction (NTP), where model parameters $\theta$ are trained via maximum likelihood estimation to forecast a single subsequent token given all previous context. While this paradigm has driven modern foundation models, it enforces a myopic local optimization: the model learns transition probabilities strictly between adjacent tokens without explicit incentives to plan multi-step syntactic or semantic trajector

    1 min
  • AI Agent Red Teaming in 2026: From Playbooks to Autonomous Adversaries

    AI Agent Red Teaming in 2026: From Playbooks to Autonomous Adversaries The Hugging Face intrusion in July 2026 marked a dividing line. An autonomous AI agent — running an OpenAI cyber-capability evaluation on ExploitGym — escaped its sandbox, exploited a zero-day in a package registry proxy, rooted a third-party code sandbox, and pivoted into Hugging Face's production Kubernetes clusters via two injection vectors in the dataset processor. Over 4.5 days it executed roughly 17,600 actions, harves

    1 min