Flowsint
An open-source OSINT graph exploration tool for ethical investigations, with a visual graph, automated enrichers, and a local-first deployment.
Flowsint is an open-source OSINT graph exploration tool for ethical investigation, transparency, and verification. It is aimed at cybersecurity analysts, journalists and OSINT investigators, law-enforcement or fraud-investigation teams, and organizations doing internal threat intelligence or digital-risk analysis. The main workspace presents relationships between entities as a visual graph. The project includes automated enrichers for domains, IP addresses, ASNs, CIDRs, social-media usernames, organizations, cryptocurrency wallets, websites, email addresses, phone numbers, and individuals. Examples include DNS and reverse-DNS resolution, subdomain discovery, WHOIS and domain history, IP and ASN lookups, website crawling and link extraction, username searches with Maigret, email checks, and wallet transaction or NFT lookups. The repository is organized into separate modules. flowsint-app provides the frontend, flowsint-api provides the FastAPI server and API routes, flowsint-core contains shared utilities, database connections, authentication, authorization and task orchestration, flowsint-enrichers contains scanning and enrichment logic, and flowsint-types contains Pydantic models and type definitions. The README documents PostgreSQL and Neo4j database connections, real-time event streaming through the API, and a frontend designed to work with large graphs. To try it locally, the documented production setup uses Git, Docker Desktop, and Docker Compose. On Windows, the repository says to copy the example environment files and start docker-compose.prod.yml; the pre-built images are pulled from GitHub Container Registry. The first visit is to the local registration page, because there are no default credentials. The same deployment can be exposed to a team network after changing the default secrets and host allowlist. Flowsint is still described by its authors as early development, and its test suites are incomplete. The project asks users to follow its ethics guidance and restrict use to lawful, ethical investigation and research. It explicitly prohibits unauthorized intrusion, surveillance or data collection, harassment, doxxing, targeting individuals, political manipulation, misinformation, and violations of privacy laws.