Private / Outtake × LyondellBasell Global Security

Protective OSINT for LYB executives, facilities, and high-profile events.From raw signal to actor context before it goes physical.

Outtake helps Executive Protection and Global Security read threat signals across text, image, video, audio, language, and geolocation, connect aliases into Person of Interest records, and deliver the context teams need to act.
0
Countries
0
LYB locations
0
Global headquarters
0
Protective OSINT layer
Organizations protected by Outtake
OpenAI
NVIDIA
IBM
Microsoft
Anthropic
Lockheed Martin
Global external-signal footprint
X logo
Facebook logo
Instagram logo
TikTok logo
YouTube logo
Telegram logo
WhatsApp logo
Reddit logo
Threads logo
Truth Social logo
Mastodon logo
Meta logo
Bluesky logo
LinkedIn logo
Google logo
Bing logo
Dark webDomainsAds

Outtake monitors the external surfaces where threats form, coordinate, and move toward executives, facilities, and events.

01 / The global security mandate

Protective intelligence has to support the operating decision.

The Global Security remit spans critical infrastructure, crisis management, functional readiness, physical and personnel security, regulatory alignment, supply-chain protection, and business continuity. Protective OSINT only matters when it gives EP and Global Security the context to act before a concern reaches the ground.

Critical infrastructure

Protect facilities, operations, supply chains, people, and communities.

Crisis readiness

Bring POI, escalation, and proximity context into incident and continuity decisions.

Risk-based governance

Give EP, GSOC, and site leaders evidence-grade context for action.

LYB protective-intelligence footprint Live context
Principal
Executive / family
Facility
Plant / office
Event
Venue / route
Person of Interest
Aliases / proximity
Evidence-grade context
EP / GSOC briefing
02 / Documented attention around LYB

Public attention becomes a protective-intelligence problem when it converges on a person, place, or moment.

These are verified public events, not evidence of a direct threat. Each creates a bounded window where EP and Global Security need coordination, proximity, actor, and escalation context.

JAN–APR 2025
Houston · Workforce transition

Refinery closure and unionized layoffs

The refinery shutdown moved into workforce separation for roughly 400 employees, about 70% represented by United Steelworkers. A USW official publicly criticized the closure.

Protective-intelligence relevance

Grievance · workplace violence · site transition

View source
MAY–AUG 2025
Channelview / Houston · Community opposition

Permit meetings drew organized local pushback

Residents and environmental groups challenged expansion and recycling plans, raising pollution, public-input, and trust concerns at executive- and site-leader-facing meetings.

Protective-intelligence relevance

Coordination · venue · route and proximity

View source
MAR 2026
Bayport Choate · Facility incident

Plant fire triggered emergency response and a community social surge

A process upset and fire brought hazmat, pollution-control, and local emergency response while nearby residents posted images, concerns, and competing interpretations across local channels.

Protective-intelligence relevance

Eyewitness media · misinformation · site access

View source
2025–2026
Europe · Cross-border restructuring

Closures and asset sales created localized labor attention windows

The Maasvlakte POSM closure and proposed sales across France, Germany, the UK, and Spain put site-specific workforce and works-council processes into motion.

Protective-intelligence relevance

Multilingual labor · local leadership · facilities

View source
03 / What peer teams are running into

The signal is there. The EP team needs the actor and proximity context.

These are anonymized patterns from peer energy and chemicals companies, not claims about LYB’s current environment.

01
Principal protection

Daily monitoring still depends on analysts catching the right signal by hand.

Peer teams review new executive impersonation, doxxing, fixation, and harassment signals every day. The difficult part is understanding whether the same actor is escalating across aliases and platforms, not counting isolated posts.

02
Lean global coverage

A small team absorbs every workplace-violence or crisis spike.

One peer team covering protective intelligence and workplace violence saw an event jump from roughly 1,000 mentions to 4,000 in three days. Only three or four warranted escalation, but analysts reviewed the full volume by hand.

03
Threat assessment

Keyword volume obscures fixation, tone shifts, and proximity.

Common names, regional language, misspellings, and indirect phrasing inflate noise. At the same time, a veiled threat, route reference, image, or location cue can carry the context that determines whether a signal matters.

04
Visual and geolocation gaps

Images, stories, video, and location context sit outside the normal workflow.

Analysts at peer companies maintain personal observation accounts because existing tools do not interpret visual content, geolocation references, landmarks, intersections, or travel routes in context.

05
Facilities and events

Activist coordination and labor-related activity require scoped monitoring, not a permanent firehose.

Peer energy and chemicals teams need to stand up coverage around facilities, executive appearances, meetings, and periods of elevated attention, then step it back when the risk window closes.

Person of Interest / trajectory
01
Commentary
02
Fixation
03
Hostility
04
Proximity
Linked account
X / alias 01
Linked account
Telegram / alias 02
Linked account
Instagram / alias 03
One actor · three accountsEscalation detected
One recurring pattern

One post is a signal. The actor’s trajectory is the investigation.

Outtake links aliases and accounts into one Person of Interest record, tracks fixation and tone shifts over time, and carries forward the context EP needs when the actor reappears on a new platform.

04 / Protective OSINT operating model

From a raw signal to the actor context EP needs.

Outtake defines the principal or location first, detects across every format, traces the actor across platforms, and briefs the team with evidence-grade context.

Outtake / Global security record Active: Define
01 Define
02 Detect
03 Assess
04 Act
State 01
Protected principal
State 02
Facility or venue
State 03
Event and travel window
Protected principal
Entity registered
Facility
Travel route
Event window
Family exposure
Monitoring boundary defined

The same investigation advances from scoped coverage to signal detection, actor assessment, and an operational briefing.

Explore Actor Tracing
05 / Outcomes for global security

More coverage should create fewer, better-informed EP decisions.

01

Principal protection

Track fixation, tone shifts, aliases, doxxing, impersonation, and proximity around protected executives and their families.

02

Facility and event awareness

Scope monitoring to plants, offices, executive appearances, travel routes, and periods of elevated activist or labor attention.

03

Crisis and workplace violence

Give incident leaders documented POI and escalation context for threat assessment, continuity, and response decisions.

04

Analyst leverage

Let a lean team focus on the few signals with credible relevance to a person or place, not the entire global mention stream.

Outtake × LyondellBasell Global Security

Give LYB Global Security the actor and proximity context behind the alert.

Across principals, facilities, travel, events, and crisis workflows, Outtake turns open-source signals into POI context, escalation history, geolocation, and evidence-grade briefings.

A practical next step

Review LYB’s executive and location exposure with Outtake.

Contact Us Explore Executive Protection