Visualize scattered digital clues as a connected graph for investigation
You can connect scattered clues such as domains, IP addresses, social media accounts, and cryptocurrency wallets on a single screen. Flowsint places this information on a graph of nodes and edges, using automated Enrichers to fill in the relationships. It helps cybersecurity analysts and investigative journalists grasp complex digital traces at a glance and conduct investigations within legal boundaries.
Automated Information Enrichment
The core of Flowsint is the 'Enricher' system, which automatically collects related information based on the input entity.
- Domain and IP Analysis It collects network-based information such as reverse DNS, WHOIS, ASN lookups, and subdomain enumeration.
- Individual and Organization Information It tracks email breach history, phone number verification, associations between individuals and organizations, and domains owned by organizations.
- Website and Social It supports website structure crawling, tracker identification, and social media user search via Maigret.
- Cryptocurrency Tracking It extracts transaction history and NFT holding information from wallet addresses to understand the flow of digital assets.
Local-First Privacy Design
Because OSINT investigations handle sensitive data, data sovereignty is important.
- Local Data Storage All investigation data is stored on the user's local machine to ensure privacy.
- Easy Installation With just Docker and Make (or Git), you can set up a running environment immediately with a few commands.
- Secure Deployment Settings When deploying to a network, you must change the authentication token signing key, API key encryption key, and database password.
Modular Architecture and Scalability
The tool consists of independent modules, making maintenance and extension easy.
- Independent Module Structure Core logic, data collection, API, and UI are separated, allowing each part to be developed and tested independently.
- Performance-Optimized UI It provides a modern interface that responds without latency even for large-scale node graphs.
- Community Contribution In its early development stage, it welcomes issue reporting, feature suggestions, and code contributions as it grows together.
Boundaries of Ethical Use
Flowsint must be used only for legal and ethical investigation and research purposes. It is suitable for cybersecurity researchers, journalists, law enforcement agencies, and organizations handling internal threat intelligence. Conversely, use for unauthorized intrusion, surveillance, doxxing, political manipulation, or violation of privacy laws is strictly prohibited. The README specifies responsible use guidelines through the ETHICS.md document, and misuse of the software is an act contrary to the defined ethical principles. Before adopting this tool, you must familiarize yourself with the ethical guidelines and verify that your purpose of use falls within legal and ethical boundaries. Additionally, when deploying to a network, setting up a reverse proxy for HTTPS is recommended, which is particularly important when going beyond a trusted LAN environment.
