Digital Footprint Audit

Purpose

This audit maps the publicly indexed digital footprint of HaloRRS across federal contracting databases, state corporate registries, certificate transparency logs, the Wayback Machine, USPTO trademark systems, court record indexes, and the firm's own web properties.

What can anyone with a search engine learn about your organization in 30 minutes?

For a small disaster-recovery consultancy that sells trust as its primary product, competitive intelligence exposure means your prospective school-district clients, competing FEMA-PA consultancies, and litigation-prone counterparties can reconstruct more about your operating model, client portfolio, and beneficial ownership than any single disclosure was intended to reveal.

Methodology

Eight parallel reconnaissance agents queried the following categories of public data:

• Advanced search (Google dorking) — file-type and operator-targeted queries against the open web
• Wayback Machine CDX API — historical snapshot inventory for halorrs.com
• crt.sh certificate transparency logs — SSL/TLS issuance history and SAN inventory
• USASpending, SAM.gov, GovTribe, HHS TAGGS — federal contract and grant records
• NARF/NILL, CourtListener, Justia, JudyRecords, Federal Register, USPTO — legal and regulatory filings
• DNS / dig, security headers, HTML generator inspection — technical infrastructure profile
• FEMA disaster declarations, EPA, USGS — disaster engagement nexus
• News, PR Newswire, Business Wire, conference programs, LinkedIn — media and public narrative

Findings

Governance & Sensitive Documents

Queries used:

"HaloRRS" filetype:pdf "confidential" OR "internal" OR "proprietary"
"Halo Response & Recovery" filetype:pdf
"HaloRRS" filetype:pdf "agreement" OR "contract" OR "MOU" OR "scope of work"
"HaloRRS" filetype:pdf "case study" OR "after action" OR "lessons learned"
"HaloRRS" filetype:pdf "proposal" OR "bid"
site:halorrs.com filetype:pdf
"HaloRRS" intitle:"index of"
"Halo Recovery Responder" filetype:pdf
"HaloRRS" "scope of work" OR "task order"
"HaloRRS" school district contract OR agreement
"Halo Response and Recovery" board minutes OR agenda OR resolution
"HaloRRS" presentation OR webinar OR conference filetype:pdf OR filetype:pptx

Assessment: CLEAN Summary: Despite 12 operator combinations targeting confidential PDFs, scope-of-work documents, after-action reports, and board governance materials, no HaloRRS-related sensitive documents are indexed on the public web. Either the firm operates under tight document hygiene or its work product lives behind client portals (e.g., FEMA Grants Portal, district-board document management systems).

Wayback Machine Archive

Domain queried: halorrs.com

Archive Summary:

Notable archived paths:

Assessment: CLEAN Summary: HaloRRS has a minimal Wayback footprint — only 26 unique pages across a ~21-month window, with zero PDFs and zero exposed admin/config/backup paths. The archive's value is not as a security finding but as a roster signal: the /team/* pages confirm a Joplin-tornado-recovery and school-safety pedigree, positioning HaloRRS as a senior-advisor consultancy rather than a high-volume publisher.

Certificate Transparency

Domain analyzed: halorrs.com

Certificate Summary:

Subdomains Discovered via SANs:

Assessment: LOW Summary: Clean, minimal certificate footprint — only the root domain and www subdomain across 23 certificates spanning ~2.5 years, indicating a single-system organization with no subdomain sprawl. The infrastructure migrated from GoDaddy (annual manual certs) to Let's Encrypt + Google Trust Services (90-day automated renewals) in mid-2024 — characteristic of a move onto Wix or a similar managed platform. The brief overlap window suggests a planned cutover, not an emergency migration.

Funding & Contract Records

Queries used:

site:usaspending.gov "HaloRRS" OR "Halo Response & Recovery"
site:sam.gov "HaloRRS" OR "Halo Response & Recovery"
"HaloRRS" UEI OR CAGE code
"Halo Response & Recovery" school district contract
site:govtribe.com "HaloRRS"
"HaloRRS" "$" "million" OR "thousand" contract
"HaloRRS" SBA OR small business
"Halo Recovery Responder" subscription OR pricing
"HaloRRS" "purchase order" OR "task order"
"HaloRRS" Wynne Arkansas OR "Butte County" contract

USASpending Recipient Profile:

• URL: USASpending search — Halo Response and Recovery — No matching recipient
• Significance: HaloRRS does not appear as a federal prime contractor or grant recipient. Their work is sub-recipient consulting to school districts and counties spending FEMA Public Assistance and CDBG-DR pass-through dollars.

SAM.gov Registration:

• Status: Not surfaceable via public web search (SAM.gov entity search is JavaScript-rendered; no scrapeable result).
• UEI/CAGE: Not publicly advertised.

Funding Records Found:

Subsidiary / Related Entities:

Assessment: CLEAN Summary: HaloRRS has zero discoverable federal prime contracts or grants and no scrapeable SAM.gov registration. The CLEAN federal result is itself the finding: HaloRRS is structured to advise disaster-affected K-12 school districts and counties on FEMA reimbursement, insurance advocacy, and recovery planning — meaning revenue flows from local procurement (district board action items) which is largely invisible to federal databases. To map their actual contract footprint requires querying individual school district board minutes and state procurement portals (MissouriBUYS, Texas SmartBuy, California Public Bidder, Arkansas Procurement).

Legal & Regulatory Records

Queries used:

"HaloRRS" OR "Halo Response & Recovery" "articles of incorporation"
site:bizapedia.com "HaloRRS"
site:opencorporates.com "HaloRRS"
site:law.justia.com "HaloRRS"
site:courtlistener.com "HaloRRS"
"HaloRRS" lawsuit OR litigation OR complaint
site:judyrecords.com "HaloRRS"
site:federalregister.gov "HaloRRS"
site:uspto.gov "HaloRRS" OR "Halo Recovery Responder" trademark
site:tsdr.uspto.gov "halorrs"
"halorrs llc" sunbiz Florida foreign LLC

Incorporation / Business Filings:

Trademarks:

Litigation / Court Records:

Regulatory Filings:

Assessment: LOW Summary: HaloRRS is publicly traceable but only thinly so. The only indexed primary-source corporate filing is a Florida foreign-LLC registration confirming a Springfield, MO principal office and pointing back to a Missouri domestic LLC. Trademark protection for the marketing-prominent "Halo Recovery Responder™" is common-law only — no federal USPTO registration exists, which is a soft IP exposure for a company whose product brand is its primary differentiator. No litigation, no Federal Register filings, and no indexed SAM.gov record were found.

Infrastructure & Technical Surface

Domain analyzed: halorrs.com

DNS Configuration:

Infrastructure Profile:

Subdomain Inventory:

Assessment: LOW Summary: Entirely managed-hosting stack — Wix for web (DNS, hosting, CDN, TLS all delegated) and a GoDaddy-provisioned Microsoft 365 tenant with Proofpoint Essentials mail filtering. Zero owned infrastructure, one subdomain, no IPv6, only Wix-default security headers. Textbook small private-firm posture: marketing-site-only web presence, outsourced everything, minimal internal IT footprint. The Proofpoint Essentials layer is a mild upmarket signal — costs more than bare M365, suggests an MSP or GoDaddy reseller provisioned a "business security" bundle.

Disaster & Environmental

Queries used:

"HaloRRS" Joplin OR tornado OR Missouri
"HaloRRS" "Sandy Hook" OR Newtown OR Connecticut
"Halo Response & Recovery" disaster response client OR engagement
"HaloRRS" hurricane OR wildfire OR shooting
"HaloRRS" FEMA OR "public assistance" OR "individual assistance"
"HaloRRS" Uvalde OR Parkland OR "mass shooting" recovery
"HaloRRS" "Hurricane Harvey" OR Helene OR Milton OR Maria
"C.J. Huff" Joplin superintendent
"Michele Gay" "Safe and Sound Schools"
"Jane Cage" Joplin "Citizens Advisory Recovery Team"

Disaster Events Linked to HaloRRS:

Federal Disaster Programs in Their Engagement Areas:

Assessment: CLEAN (disaster nexus is the firm's core marketing — no hidden engagements found) Summary: Five publicly documented disaster engagements, all in the K-12 / community-recovery space. Target client is a school district or county navigating FEMA Public Assistance and CDBG-DR after a federally declared disaster. The Sandy Hook association is one degree removed (advisor relationship via Safe and Sound Schools) — they are not the firm that did Sandy Hook recovery; they have Michele Gay on the masthead. No mass-shooting recovery work (Uvalde, Parkland) and no Maria/Maui/Lahaina/Marshall presence found.

Media & Public Narrative

Queries used:

"HaloRRS" news 2024 OR 2025 OR 2026
"Halo Response & Recovery" announcement OR launch
site:prnewswire.com "HaloRRS"
site:businesswire.com "HaloRRS"
"HaloRRS" CEO OR founder OR president
"HaloRRS" school safety conference OR webinar
"HaloRRS" award OR recognition OR finalist
"Jennifer Huff" HaloRRS
"HaloRRS" LinkedIn OR Twitter OR podcast

Press Releases / Wire Coverage:

Leadership Names Discovered:

Conference / Public Speaking Circuit:

Assessment: LOW Summary: Small, reputation-driven family firm. Zero PR Newswire / Business Wire releases — no paid wire strategy. All earned media is C.J. Huff personal-brand coverage (not HaloRRS corporate news). Tight K-12 safety conference circuit; LinkedIn shows 2-10 employees with no recent posts. Decision-making access runs through Jennifer Huff (CEO) and C.J. Huff (BD), with grants/CDBG technical access through Teresa Huff and Seth Spencer. No press scandals, no controversies surfaced — public narrative is clean and consistent.

Risk Summary

Overall footprint assessment: MINIMAL

HaloRRS has an unusually tight digital footprint for a disaster-recovery firm. The thinness of indexed documents, contracts, and press is consistent with the firm's actual structure (Feb 2024 incorporation, family-owned, K-12 channel) rather than evidence of operational concealment. The reputational center of gravity is C.J. Huff's personal brand; the contractual center of gravity sits inside school district board minutes that are not aggregated by federal databases.

Recommendations

Immediate Actions

1. File federal trademarks for "Halo Recovery Responder," "Halo Responder," and the "HaloRRS" wordmark with USPTO. The product brand is currently common-law-only — anyone can file ahead of you and contest your right to use the name in commerce.
2. Publish a DMARC record at _dmarc.halorrs.com (start at p=none for monitoring, escalate to p=quarantine once aligned). Without DMARC, halorrs.com email addresses can be spoofed in school-district phishing campaigns — a meaningful risk for a vendor whose entire premise is trust during crisis.
3. Add CSP, X-Frame-Options, and Referrer-Policy headers if Wix's plan permits custom headers; otherwise consider whether the marketing-only Wix posture matches the firm's growth trajectory.
4. Confirm SAM.gov registration is active and discoverable. If you intend to bid on federal disaster-recovery RFPs (CDBG-DR pass-through, FEMA debris monitoring contracts), the lack of an indexed SAM presence is a positioning weakness.
5. Decide whether the multi-state LLC pattern (MO domestic, FL foreign, possibly more) needs an unambiguous public corporate-page disclosure. Small firms sometimes leave registered-agent details easy to find; sometimes hard. Pick one and be consistent.

Ongoing Monitoring

1. Set a quarterly USPTO TESS watch for filings on "Halo Recovery Responder," "Halo Responder," "HaloRRS," and adjacent K-12 safety/recovery marks.
2. Monitor school district board minutes in known and prospective client geographies (Wynne AR, Joplin MO, Butte County CA, Region 4 ESC TX, Calallen ISD TX) for vendor selection actions naming HaloRRS or competitors.
3. Watch for cybersquatting on halorrs.io, halorrs.app, halorrs.org, halorecoveryresponder.com, and similar variants.

Strategic Considerations

1. Your "third-party document footprint" is enviably small — but it is also a signal. Sophisticated counterparties (large district legal counsel, larger competing consultancies) will read the absence of after-action reports, case studies, and white papers as a smaller body of work than your marketing implies. Decide whether to publish or to keep deliberately quiet.
2. The Sandy Hook association via Michele Gay is one degree removed. This is fine — but be careful that marketing copy never overstates HaloRRS's role in Sandy Hook recovery itself. The Newtown Public Schools recovery was led by other actors, and a misstatement in print could draw a sharp response.
3. The Halo Recovery Responder™ product is unprotected IP. If it is a meaningful piece of the business model, the trademark gap is the most important commercial risk in this audit.

What This Means

Competitive intelligence exposure means your rivals, district counsel, and prospective partners can reconstruct more about your operations than any single disclosure was intended to reveal. For HaloRRS the picture they assemble is largely flattering — a tight, credentialed family firm with deep Joplin-tornado lived experience and a short, defensible client list. The vulnerabilities are quieter: an unprotected product mark, an absent DMARC record, and a SAM.gov footprint that is invisible to the indexes prospective federal partners actually search. None of those are urgent. All of them are cheap to fix.

Prepared by Oahe Data. This audit is provided as an informational assessment of publicly available data. No unauthorized access was performed or attempted.