Metadata, computed offline
EXIF and GPS from images, file hashes, IOC parser, e-mail headers with SPF, DKIM and DMARC, solar position for chronolocation, coordinates in the Swiss LV95 and LV03 grids. None of it leaves the browser.
Open-source investigation · Switzerland
OSINT tools in your browser — every step stays verifiable.
38 tools and 796 verified sources: image metadata, DNS and whois, e-mail headers, coordinates in the Swiss LV95 grid. The computing happens in your browser, not on our server.
Free account · case file free for 7 days · no credit card
0tools
0verified sources
0topic pages
0languages
What is inside
38 tools that compute: metadata, domains, e-mail headers.
Not a list of links: every tool computes. What runs locally stays on your device; live lookups go straight to the source, never through our server. All 796 sources were checked over HTTP.
Live: domains, DNS, whois
DNS over DoH, RDAP whois, certificate transparency for subdomains, ASN and network data via RIPEstat, GitHub recon, weather archives back to 1940, corporate structures via LEI.
Document and seal
Case timeline, report generator and the sealed case file in one interface. Every entry is chained to the previous one with SHA-256, and every seal carries a public verification link.
How you work with it
From first find to sealed record: how an investigation runs.
- 01
Enter
Domain, IP, e-mail, username or coordinates — the type is detected automatically and the matching tools are suggested.
- 02
Ask
The built-in assistant understands problems described in plain language and opens the right tool with the value already filled in.
- 03
Let it run
Long scans keep running in the background while you work elsewhere. Finished results announce themselves.
- 04
Record
Timeline and report take shape alongside. On request they become a chained case file whose hash anyone can recompute.
The difference
An investigation log any third party can recompute.
Screenshots in a Word document prove nothing. Every step is chained and hashed with SHA-256 over canonical JSON; the public link confirms hash and timestamp without revealing title, text or sources.
Chained
Each entry carries the hash of the one before it. Alter a step afterwards and the chain visibly breaks at exactly that point.
Recomputable
The hash covers a fixed field order in canonical JSON. Anyone holding the entry recomputes it with any SHA-256 tool — no need to take our word for it.
Third-party verifiable
Every seal has a public verification link. It confirms the hash and the timestamp — without an account and without revealing title, text or sources.
Pricing
The tools are free. Working without a limit costs 7.95 dollars.
Workbench
Free
permanently, with a free account
- All 38 tools
- 796 verified sources
- Your own boards, stored locally
- 10 seals a day, each with a check link
Case file
$7.95/month
final price · cancel monthly
- Everything in Workbench
- Seals without a daily limit
- Verification report as Markdown and JSON
- Chain check across the whole case file
- AI agent: OSINT research on request
- Active scans & exploitability check
Payment via Stripe. Card details never reach us.
Practice
On request
for teams and public bodies
- Multiple investigators
- Shared case archive
- Dedicated instance on your server
- Training and onboarding
Questions
What we get asked about data, offline work and verification.
Do I need an account?
Yes, for the workbench. The account is free and takes a minute — it keeps your boards and your case file together. The wiki with its 796 sources and the public seal verifier stay open without signing up.
Where does my research data live?
Boards, notes and tasks stay in your browser’s local storage. Exactly one exception: whatever you explicitly seal lives on our server in Frankfurt — a seal without the sealed text would prove nothing. Beyond that the server knows only your e-mail, subscription status and a password hash.
Does it work offline?
Mostly yes. Metadata, hashes, solar position, coordinates, encoders and the assistant compute without a connection. Only the live lookups — DNS, whois, certificates, weather — need the network.
Will a case file hold up in court?
That is decided by the proceedings, not by a tool — and it differs by jurisdiction. What we provide: complete, verifiable documentation that nobody can alter unnoticed. Anyone promising more is selling an illusion.
Can I cancel monthly?
Yes, from your account in two clicks via Stripe. Afterwards every file you already sealed stays valid and verifiable — they belong to you, not to the subscription.
Who is this not for?
For investigations without a mandate or legal basis. The tools query public registers and your own input — what you do with them is on you.
Free for everyone
Is this text message real? The scam checker answers in plain language.
The same analysis that runs in our tools, stripped of the jargon: paste a suspicious message, link, e-mail or IBAN and find out whether it carries the usual signs of fraud — and what to do next. Built for parents and grandparents, free, no account, and nothing ever leaves the device.
Named, not just flagged
It names the trick — the “Hi Mum” message, the fake parcel fee, the bank that is not the bank — and says in one sentence what to do about it.
Nothing is sent
The check runs entirely in the browser. The message stays on the device — no upload, no account, no record of what anyone pasted.
Honest about its limits
“Nothing suspicious” is never a guarantee, and it says so. A well-made fake sets off no alarm — which is why every answer ends with a way to check for real.