Refolk
ReferenceInvesting and deal sourcing

The Stealth Founder Signal Reference: Reading One Person's Pre-Launch Footprint

You will be able to take any single pre-formation signal on one person and state what it proves, how it misleads, and how fast it decays.

15 min readLast reviewed August 7, 2026Read as Markdown

Key takeaways

  • The strongest single pre-formation signal is an absence: a departure from a high-density employer with no public landing at a new one, because a missing next-employer is costly to fake while a title is not.
  • In Refolk's index, 315 people in the US carry a stealth title against 44 in the UK, a 7.2x gap that means UK-focused readers must lean harder on footprint and network signals.
  • Patents are confirmation, never early warning: a 12-month provisional clock plus an 18-month publication lag mean a visible patent almost always trails formation.
  • A cofounder-matching profile is a weak standalone signal: YC's platform ran a 25% invite-acceptance rate at scale, so most searchers never convert to committed founders.
  • No published false-positive rate per signal exists; this is a load-bearing gap, so rank clustered time-correlated signals from one person far above any single flag.
  • Some founders keep a visible stealth title as inbound bait for VCs, which corrupts the one signal easiest to query and inflates its false positives.

You are looking at one person's public footprint and need to judge whether they are quietly forming a company, and how much to trust each clue in front of you. This reference is for early-stage investors, platform and talent partners, and angels who source deals before they are announced. It treats each pre-formation signal on its own row so you can jump to the one signal in front of you, read what it proves, how it misleads, and how fast it decays, and rank the person accordingly.

This is not a workflow for building a tracking system. It is a lookup document for reading a single individual. The core finding to carry through every row: the earliest signals are the least certain, so a cluster of co-occurring signals from one person beats any single flag, and the strongest single signal is an absence rather than a presence.

What signals exist, and are they about the person or the company?

There are seven documented pre-formation signals, and the first thing to know about any one of them is whether it describes the person or the footprint of a company they may be forming. That split governs both lead time and reliability.

People-level signals describe the individual directly: a title change, a departure, GitHub activity, and cofounder-search behaviour. Footprint signals describe a company that is starting to exist on paper: a new domain, an incorporation or trade-registry filing, and a patent. Practitioner and vendor write-ups converge on this same set.

SignalLevelWhat it is
Title change to Founder / Stealth / building something newPeopleSelf-authored headline edit
Departure from high-density employer, no next rolePeopleEmployment record with a blank or removed next employer
New GitHub org repo or contribution-graph spikePeopleTechnical build activity
Cofounder-search / founding-hire postsPeople / networkPublic recruiting for a team
New domain registrationFootprintWHOIS record under 30 days old
Incorporation / trade-registry filingFootprintStructured company record
Patent filingFootprintProvisional or published application

The reason the split matters: employment and network signals come first in time but are ambiguous, while footprint signals lag by weeks but are structured and harder to fake. A network signal adds something an employment signal cannot - that the person is recruiting people to join them, which is pre-product evidence of company formation. Taken together, employment plus network signals distinguish a stealth founder departure from any other senior departure.

How fast does each signal arrive, and how fast does it decay?

Lead time and reliability trade off against each other. The earliest signals are the least certain; the most certain arrive last, sometimes after the company already exists. No source publishes a dated distribution, so the timing below is directional.

SignalLevelRelative timing
Departure from high-density employerPeopleEarliest; weeks to months before build
Recruiting / founding-hire postsPeople / networkConcurrent with early build
New domain / incorporationFootprintLags departure by weeks
Patent publicationFootprintLags filing by 18 months

Two structural facts anchor the slow end of that table. A provisional patent gives the filer 12 months to file a non-provisional claiming priority to it, and an application becomes publicly available 18 months after filing unless a non-publication request was filed. So a patent you can see almost always reflects a company that already launched. It is confirmation, never early warning.

Decay works in the other direction for the fast signals. A departure with no public landing is a strong flag in its first weeks; if six months pass and the person still has no company on paper, the same record now argues for a sabbatical or a long job search rather than a founding. Down-weight every signal as it ages, and re-run the read on a schedule rather than trusting a snapshot.

The pre-formation timeline, widest window first

  1. Departure, no landing
    weeks-to-months out

    earliest, most ambiguous

  2. Recruiting / founding-hire posts
    concurrent with build

    intent to assemble a team

  3. New domain / incorporation
    lags departure by weeks

    structured, harder to fake

  4. Patent publication
    18 months after filing

    confirmation only

Earlier signals give more lead time but carry more noise; later ones confirm but lose the stealth window.

Reading each signal row by row: what it proves, how it lies

Each signal below stands alone. Jump to the one in front of you. Every row states what the signal proves when honest and what it looks like when it misleads.

The stealth or building-something-new title

What it proves: the person wants to be seen as pre-formation. It is the easiest signal to query and therefore the easiest to stage.

How it lies: some founders keep a visible stealth title as inbound bait. More VC inbound happens in stealth mode, because for VCs scouting early-stage deals, searching for founders with stealth in a LinkedIn title is trivial. So the title population includes people farming attention without an incorporated company, alongside consultants, freelancers, and people between jobs. Filters are needed to narrow to people building real companies.

The departure with no public landing

What it proves: the person left a named high-density employer and has attached no new one. This is the strongest single signal because a missing next-employer is costly to fake, while a title is free to author. A repeat founder or strong operator's departure tends to precede their next startup by weeks or months.

How it lies: a removed employer can mean a layoff, a sabbatical, or a quiet job search. The check is the network signal - are they recruiting? That is what distinguishes a stealth founder departure from any other senior departure.

The new GitHub organization repo

What it proves, when corroborated: early product development. A developer who recently left a senior role and starts pushing to a new organization-level repository is worth flagging, especially if the repo is private but visible through contribution graphs.

How it lies: most new repos are side projects, not ventures. Require a README that describes a product, multiple contributors joining within weeks, consistent commit velocity, and commercially-suggestive repo naming before you treat a repo as founding activity.

The cofounder-search or founding-hire post

What it proves: intent to assemble a team. When someone posts for a Founding Engineer, First Designer, or Early GTM Hire, they are likely building.

How it lies: a cofounder-matching profile can be exploratory. When YC's platform ran at scale it showed a 25% invite-acceptance rate, so most searchers never convert. Corroborate with a departure or footprint signal.

The fresh domain

What it proves: something was named. Weakly.

How it lies: heavily. Legitimate startups launch, enterprises create sub-brands, and new products get dedicated landing pages, so a domain under 30 days old may be entirely benign. WHOIS privacy on many TLDs masks the registrant name, organisation, and email. Use the creation date as a weak timing signal only, and tie the domain to the person, not to a matching name.

The incorporation or registry filing

What it proves: a company legally exists. This is a strong structured signal, but it lags departure by weeks and only appears once the person has committed to paper.

The patent filing

What it proves: confirmation of a technical company, already formed. Use the filing or priority date, not the publication date. A law-firm figure claims startups with early patent filings are 6.4 times more likely to secure venture capital, though that claim's methodology is not shown.

The strongest signal a founder can give is the one they cannot cheaply fake: a departure with nowhere listed to land.

Why the strongest read is a cluster, not a single flag

The single strongest read is a departure from a high-density employer combined with no public landing at a new one, and the strongest read overall is several signals from the same person inside one short window. When multiple signals from the same individual appear in a short time window, that combination is a high-confidence detection of founding activity.

This is a direct consequence of the lead-time trade-off. Because the earliest signal is always the least certain, no single early flag is trustworthy on its own. Clustering fixes that: a stealth title plus a departure plus a founding-engineer post plus a fresh domain, all in six weeks, is a different object than any one of those alone. Rank clustered, time-correlated signals from one person far above any single signal, however strong that single signal looks.

Where a signal sits on lead time versus reliability

Early arrivalLate arrival
Stealth title alone
Treat as a candidate flag only; needs a corroborator
Departure, no landing
Rank up; costly to fake and arrives early
Fresh domain alone
Weak timing hint; tie to the person before trusting
Patent publication
Confirmation of a company that already exists
Low reliabilityHigh reliability
The earliest signals are the least certain, which is why clustering beats any single early flag.

Some markets make clustering harder because the raw pool is thin. In Refolk's index, the US carries 315 stealth-titled people against 44 in the UK - a 7.2x gap. A UK-focused reader working the same title filters sees a far thinner pipeline, so footprint and network signals carry more of the weight there.

MarketStealth-titled peopleShare of the two-country total
United States31588%
United Kingdom4412%

The phrasing you filter on also changes the population. In the US, a bare stealth title returns 315 people, while a Founder title paired with building something new returns 209 - about 66% as many. The most common employer string in that sample was Stealth Startup.

QueryPeople matched
Title contains "Stealth"315
"Founder" title + "building something new"209
315
US stealth-titled people in Refolk's index
Against 44 in the UK, a 7.2x gap that thins the pipeline for UK-focused readers.

Running these title-and-departure filters by hand across public LinkedIn and the open web is where most of the time goes. Describing the person you want in plain English and getting the matched set back removes that friction.

The read: seven steps from profile to ranked likelihood

Work one person at a time. The order below puts the early, ambiguous signals first and lets the later structured records confirm or kill them. Sources disagree on one point: some vendor checklists sweep domains and registry filings first because they are queryable at scale, while the fuller read places footprint after employment and network. This procedure follows the fuller read.

Reading one person's pre-formation likelihood

  1. Pull the person's current state
    Capture the current title, the employer field, and whether an employer is listed. You know if the profile shows Stealth, building something new, or a blank employer.
  2. Establish the departure fact
    Confirm they left a named high-density employer and whether a new employer is publicly attached. An employment signal alone says someone left a job; done when the departure is dated and no public landing is confirmed or refuted.
  3. Check for network and hiring evidence
    Look for founding-engineer or first-designer posts and ex-colleagues moving into the same orbit. A network signal adds that they are recruiting; done when team-formation is present or absent.
  4. Sweep footprint records
    Run WHOIS for a fresh domain and search incorporation, registry, and patent filings. Done when any structured record is found and dated, or confirmed absent.
  5. Check technical and social intent
    Look for new GitHub organization repos, contribution-graph spikes, and cofounder-matching or cofounder-wanted posts. Done when technical and social intent signals are logged with dates.
  6. Time-correlate the cluster
    Score higher when several signals land in one short window from the same person. Done when you have a count of co-occurring signals and the span they cover.
  7. Rank and decay
    Down-weight each signal as it ages and escalate tight clusters. Done when the person carries a current rank you will re-run on a schedule.

The output of the read is a rank, not a yes or no. A person with a departure-plus-absence and a founding-engineer post inside a month sits near the top. A person with only a stealth title sits in a holding pen until a second signal lands or the flag decays.

How this read goes wrong: the false positives

Most bad calls trace to one of seven failure modes. Each has a specific tell and a specific check. This is the part of the reference worth the most attention, because ranking a false positive costs a fund meetings and credibility.

  1. Stealth title as inbound bait. An operator keeps a stealth title to farm VC inbound without an incorporated company. Check: require a footprint or hiring signal before ranking up.
  2. Blank employer read as founding when it is a job search. A removed employer can mean a layoff or sabbatical. Check: look for the network signal, the recruiting behaviour that separates a founder departure from any senior departure.
  3. Fresh domain treated as a company. The newly-registered signal alone generates false positives, because legitimate startups, product launches, and marketing campaigns all create domains. Check: tie the domain to the person, not just to a matching name.
  4. WHOIS privacy read as identity. On many TLDs the registrant name, organisation, and email are masked. Check: use the creation date only as a weak timing signal; never infer identity from a masked record.
  5. Patent read as early warning. The 18-month publication lag means a visible patent may reflect a company already launched. Check: use filing and priority dates, treat as confirmation.
  6. GitHub side project mistaken for a venture. Check: require a product README, multiple contributors within weeks, consistent commit velocity, and commercially-suggestive naming.
  7. Cofounder-matching profile read as a committed founder. A matching profile can be exploratory given the 25% acceptance rate at scale. Check: corroborate with a departure or footprint signal.
One-person signal read, copy-paste
Person:
Current title: [stealth / founder / building something new / other / blank]
Employer field: [named / removed / blank]
Departure: [employer name] left [date] -> next employer: [named / none]
Network signal: [founding-hire post? y/n] [ex-colleagues moving? y/n]
Footprint: [domain age] [incorporation? y/n] [patent filing date, not publication]
Technical: [new GitHub org repo? y/n] [product README? y/n] [contributors joining? y/n]
Social intent: [cofounder-matching profile? y/n] [cofounder-wanted post? y/n]
Signals in the last 8 weeks: [count]
Rank: [top / hold / discard]  Re-check on: [date]

Fill one row per person. Rank on cluster size and signal age, not on any single strong signal.

Keeping the read current

A pre-formation read is a snapshot of a moving target, so schedule a re-run rather than trusting one pass. The signals decay at different rates: a departure loses force after a few months without a company, a fresh domain ages out of the under-30-day window, and a patent that publishes turns from absent to confirmatory 18 months after it was filed. Re-run the read on your holding-pen names at least monthly.

Two mechanisms move faster than your snapshot and are worth watching directly. First, the stealth population itself is growing - the number of people working for startups in stealth has more than tripled in two years per LinkedIn data - so title filters return more people and more noise over time, which raises the value of corroborating signals. Second, cofounder-matching activity is now large: three months after launch, YC's platform had 16,000 profiles and 33,000 matches, so a matching profile is common and weakly predictive on its own.

Before you rank this person, confirm

  • The title is corroborated by at least one footprint or hiring signal, not standing alone.
  • The departure is dated and the no-public-landing status is confirmed, not assumed.
  • Any fresh domain is tied to the person, not just to a name that matches.
  • Patent evidence uses the filing or priority date, treated as confirmation not warning.
  • A GitHub repo meets the product-README, contributors, velocity, and naming bar before counting.
  • You have counted co-occurring signals within one short window and ranked the cluster above any single flag.
  • A re-check date is set so aged signals get down-weighted.

When you keep this reference open beside a profile, the discipline is simple: read the one signal in front of you for what it proves and how it lies, refuse to rank on a single flag, weight the cluster, and set a date to look again. The people worth your time will show an absence you can trust before they show a title you cannot.

Questions practitioners ask

Should a stealth LinkedIn title alone move someone up my list?

No. A stealth title is the signal easiest to query and therefore the easiest to fake, because some operators keep it to farm VC inbound without an incorporated company. Treat it as a candidate flag only. Move the person up only when you pair the title with a footprint record or a hiring signal such as a founding-engineer post. On its own it proves intent to be seen, not a company being built.

What is the earliest reliable signal that someone is founding a company?

The departure from a high-density employer with no public landing at a new one. It arrives weeks to months before any build and is costly to fake, since a missing next-employer is hard to stage. It is ambiguous on its own, though, because a blank employer can also mean a layoff or sabbatical. Corroborate it with a network signal that they are recruiting people to join them.

How long before launch do these signals typically appear?

Lead time trades off against certainty. Departure and recruiting signals come earliest, weeks to months out, but are ambiguous. Footprint signals like a new domain or incorporation lag departure by weeks. Patent publication lags filing by 18 months, so it almost always trails formation. No precise dated lead-time distribution per signal is publicly established, so treat all timing as directional.

Can I trust a patent filing as an early stealth-founder signal?

No, treat it as confirmation. A provisional starts a 12-month clock and an application publishes 18 months after filing unless a non-publication request was filed. A visible patent therefore almost always reflects a company that already exists. Use the filing or priority date rather than the publication date, and treat the signal as verification of formation, not as a warning that arrives inside the stealth window.

Why is a fresh domain registration such a noisy signal?

Because legitimate startups, enterprise sub-brands, product launches, and marketing campaigns all create new domains, a domain under 30 days old may be entirely benign. WHOIS privacy on many TLDs also masks the registrant name and email, so you cannot infer identity from a masked record. Use the creation date only as a weak timing signal and tie the domain to the person, not just to a matching company name.

How is stealth different when a founder is only selectively hiding?

Stealth is a spectrum. At one end a company is entirely invisible with no website, team, or disclosed funding; at the other it admits it exists but declines details. The defining trait is intentional information restriction, not total invisibility. Selective stealth suppresses public-title and website signals while leaving structured footprints such as registry filings, patents, and GitHub contribution graphs intact, along with network and hiring signals.

Try it on your own search

Stop building boolean strings. Just describe the person.

Type one sentence and I plan the search, read GitHub, public LinkedIn and Crunchbase records, and the open web live, then hand back a ranked shortlist with the reasoning behind every name. No filters to learn, no export to clean up, no sales call to sit through.

  • One sentence in, a ranked shortlist out. No boolean, no filters, no seat to buy.
  • Read live at search time, not from a database that went stale last quarter.
  • Watch every step as it runs, and see why each name made the list.

500 free credits on sign-up. No card, no demo call. See real searches.

Read next