Back to directory

kipi

A self-hosted OSINT investigation platform that turns uploaded documents into an entity graph, then runs an autonomous agent that pivots on open-web infrastructure to extend the investigation.

kipi

kipi is an open-source, self-hosted platform for open-source intelligence investigations. Documents such as PDFs, screenshots, spreadsheets or pasted notes are turned into a typed entity graph, and an autonomous agent then digs the open web, pivoting on infrastructure such as WHOIS records, DNS and certificates to extend the graph with new findings, gated behind human confirmation at each step.

The platform combines document-to-entity extraction with graph analytics such as centrality, community detection and pathfinding on the same investigation canvas, a combination the author says is not available together in commercial OSINT tools. Every claim in the generated brief carries its source and an evidence grade, so a DNS record and an analyst's hunch are graded differently rather than presented as equally certain.

It runs locally with an install script and requires an Anthropic API key as its one external dependency.

More in Security

See all 287
  • The Standup

    standup.thecompound.tech

    A daily email and dashboard tracking software releases, security advisories, outages and breaking changes across the vendors and repositories a team depends on, surfacing only what needs action rather than a full news feed.

  • Drop

    droprun.sh

    A rootless Linux sandbox for developers, built on user namespaces with optional gVisor isolation, that confines coding agents and third-party packages without leaving your normal work environment.

  • Compliance Posture

    complianceposture.com

    A free, searchable directory that tracks the security and compliance certifications, such as SOC 2, ISO 27001, HIPAA, and GDPR, of over 400 SaaS vendors across twenty categories, with side-by-side comparisons.