Research domains, URLs, IPs, organisations, repositories, packages and file hashes with public sources you pick yourself. Rule-based analysis, and optional AI analysis, turn the findings into observations that cite their evidence.
One person on a phone, or a team on a local network. Both editions share the sources, the rule-based analysis and a versioned JSON exchange format. No account, no ads, no tracking, no telemetry.
You add one target and choose the sources. Before anything is sent, the app shows which value goes to which service.
Every finding keeps its source link, retrieval time, an evidence excerpt with SHA-256 and your review status.
Rule-based analysis turns findings into plain sentences marked Info, Attention or Missing, without any network request and without an overall risk score.
Reports (PDF, HTML, JSON, CSV) keep every claim linked to its source.
scroll · follow one target
Every claim, back to its source.
passive · source-first · no verdict
Key-free sources that work out of the box
Google Public DNS
RDAP · IANA
Wayback Machine
GitHub
OSV.dev
urlscan.io
Wikipedia · Wikidata
OpenStreetMap
01 / ai analysis · windows
AI that reads findings. Never rewrites them.
Optional. You decide where the model runs: offline on the server, or with a cloud provider after you confirm. The output is shown as interpretation, linked to the findings it cites.
Selected findings
you choose which
Output language
any of the nine
Local · offline
open models from Hugging Face SHA-256 verified downloads bundled llama.cpp CPU or Vulkan GPU
Analysis queue
one after another · large selections split to fit provider rate limits respected · parts merged
Original findings and their review status are never changed · every cloud analysis is recorded in the activity log
02 / editions
Two editions. One file format.
The Android app keeps everything on your phone. The Windows edition runs as a small server for a team on one PC or a trusted local network. Investigations move between them as versioned JSON.
v0.1.0 · Android 8.0+
target value onlyfindings with evidenceoptional, after you confirm
Exchange: versioned JSON, both ways
03 / sources
Sources you pick. Quotas you can read.
Key-free sources work out of the box. The others use your own free key, with setup instructions in the app. Quotas and terms change; this list mirrors the project's API registry.
Source
Target types
Key
Free quota (as stated)
Notes
Evaluated and left out, on purpose
Services that upload files or detonate samples: out of scope.
Paid, closed or unclear services.
ip-api.com: the free tier is HTTP only.
Phone-number lookup APIs: personal data; person profiling is out of scope.
04 / privacy and scope
Passive by design. Honest about limits.
A query sends only the target value to the sources you selected. Everything else stays on your phone or your own server.
What it does
Shows before it sends. Which value goes to which service, before any query starts.
Keeps evidence. Source link, retrieval time, an excerpt with SHA-256 and your review status for every finding.
Protects keys. AES-GCM with Android Keystore on the phone, a server key vault on Windows.
Stays local. The Windows admin panel listens only on the server itself.
What it never does
No active attacks. No port scanning, exploitation, login bypass, file uploads or person profiling. Ping is the only active check and is never preselected.
No verdict. There is deliberately no overall risk score.
No keys in output. API keys never appear in reports or exports.
No internet exposure. The Windows user panel uses plain HTTP and is meant for a trusted local network only. IP geolocation estimates a network, not a person.
05 / install
Download. Verify. Start.
Compare the SHA-256 with the release notes before you install. Java and llama.cpp are bundled with the Windows ZIP; AI models are downloaded later from the admin panel.
Early releases. Android 0.1.0 is tested with unit tests and on an Android 15 emulator, not yet on many real devices. Windows 0.2.2 is tested end to end on Windows 11, on CPU and a Vulkan GPU. Key-based sources and cloud AI providers are not yet tested with live keys for every provider.
