#13dailyJun 5, 2026OpenAI

Summary

Flowsint — Graph-based OSINT investigation platform

The generated summary body for the selected provider.

OpenAImodel: gpt-5-mini

Highlights

1308 stars today
2Graph-based visual investigator
3Built-in enrichers (DNS, WHOIS, Maigret, crypto)

osint graph typescript docker fastapi neo4j enrichers

Overview

Flowsint is an open-source, graph-based investigation tool for reconnaissance and OSINT. It provides a visual graph interface and automated enrichers to explore relationships between entities (domains, IPs, ASNs, people, wallets, websites, emails, phones). The project is modular (flowsint-core, flowsint-types, flowsint-enrichers, flowsint-api, flowsint-app) and implemented primarily in TypeScript with backend services (Postgres, Neo4j) and a FastAPI server. The README highlights many concrete enrichers — DNS/WHOIS/subdomain discovery, reverse DNS, ASN/CIDR/IP enumeration, Maigret username searches, website crawling and webtracker detection, email breach checks and Gravatar, crypto wallet transactions/NFTs, plus an N8n connector for workflow integration.

Translation

Translated body generated separately from the summary.

No translation available yet.

README

reconurge/flowsint

Captured original README content.

Flowsint

Flowsint is an open-source OSINT graph exploration tool designed for ethical investigation, transparency, and verification.

Ethics: Please read ETHICS.md for responsible use guidelines.

https://github.com/user-attachments/assets/eaabfa81-d7b3-414d-8cf7-f69b4e37bab6

https://github.com/user-attachments/assets/7457d94a-cf1d-4a97-949f-f9b1d8d92644

https://github.com/user-attachments/assets/65c3f26e-7132-4853-be45-21b8933688bd

Contributing

Flowsint is still in early development and definetly needs the help of the community! Feel free to raise issues, propose features, etc.

Get started

Don't want to read ? Got it. Here's your install instructions:

Linux / macOS

1. Install pre-requisites

Cybersecurity researchers and analysts
Journalists and OSINT investigators
Law enforcement or fraud investigation teams
Internal threat intelligence and digital risk teams

Flowsint runs via Docker (Make is used on Linux/macOS; Windows uses Docker Desktop). Quick start in the README:

git clone https://github.com/reconurge/flowsint.git
make prod (Linux/macOS) or docker compose -f docker-compose.prod.yml up -d --build (Windows)
First login: visit http://localhost:5173/register to create an account

The project emphasizes local storage and privacy — “Everything is stored on your machine.” It is Apache-2.0 licensed and includes an ETHICS.md with responsible-use guidelines.

Flowsint is trending now due to rapid community interest (308 stars added today, rank #13 in daily trending). The repository combines a performant frontend built for thousands of nodes with extensive, ready-made enrichers (domain/IP/social/crypto/website/email) and modular core services (orchestrator, vault, celery tasks, pydantic types, FastAPI). That mix — strong privacy-first messaging, an N8n connector for automation, and clear Docker-based developer workflows — makes it an attractive, practical option for teams wanting an extensible, self-hosted OSINT graph platform. The README also calls for contributors (project is in early development), which likely fuels the current surge in interest.

2. Run install command

git clone https://github.com/reconurge/flowsint.git
cd flowsint
make prod

No Make needed. Works in both Command Prompt (cmd) and PowerShell.

1. Install pre-requisites

Docker Desktop (make sure it is running before the next step)
Git

2. Clone and set up environment files

git clone https://github.com/reconurge/flowsint.git
cd flowsint

copy .env.example .env
copy .env.example flowsint-api\.env
copy .env.example flowsint-core\.env
copy .env.example flowsint-app\.env

docker compose -f docker-compose.prod.yml up -d --build

Then go to http://localhost:5173/register and create an account. There are no credentials or account by default.

✅ OSINT investigations need a high level of privacy. Everything is stored on your machine.

Flowsint is a graph-based investigation tool focused on reconnaissance and OSINT (Open Source Intelligence). It allows you to explore relationships between entities through a visual graph interface and automated enrichers.

Domain Enrichers

Reverse DNS Resolution - Find domains pointing to an IP
DNS Resolution - Resolve domain to IP addresses
Subdomain Discovery - Enumerate subdomains
WHOIS Lookup - Get domain registration information
Domain to Website - Convert domain to website entity
Domain to Root Domain - Extract root domain
Domain to ASN - Find ASN associated with domain
Domain History - Retrieve historical domain data

IP Information - Get geolocation and network details
IP to ASN - Find ASN for IP address

ASN to CIDRs - Get IP ranges for an ASN

CIDR to IPs - Enumerate IPs in a range

Social Media Enrichers

Maigret - Username search across social platforms

Organization Enrichers

Organization to ASN - Find ASNs owned by organization
Organization Information - Get company details
Organization to Domains - Find domains owned by organization

Cryptocurrency Enrichers

Wallet to Transactions - Get transaction history
Wallet to NFTs - Find NFTs owned by wallet

Website Enrichers

Website Crawler - Crawl and map website structure
Website to Links - Extract all links
Website to Domain - Extract domain from URL
Website to Webtrackers - Identify tracking scripts
Website to Text - Extract text content

Email to Gravatar - Find Gravatar profile
Email to Breaches - Check data breach databases
Email to Domains - Find associated domains

Phone to Breaches - Check phone number in breaches

Individual Enrichers

Individual to Organization - Find organizational affiliations
Individual to Domains - Find domains associated with person

Integration Enrichers

N8n Connector - Connect to N8n workflows

The project is organized into autonomous modules:

flowsint-core: Core utilities, orchestrator, vault, celery tasks, and base classes
flowsint-types: Pydantic models and type definitions
flowsint-enrichers: Enricher modules, scanning logic, and tools
flowsint-api: FastAPI server, API routes, and schemas only
flowsint-app: Frontend application

flowsint-app (frontend)
    ↓
flowsint-api (API server)
    ↓
flowsint-core (orchestrator, tasks, vault)
    ↓
flowsint-enrichers (enrichers & tools)
    ↓
flowsint-types (types)

Linux / macOS (requires Make):

Windows (cmd or PowerShell, no Make — create the .env files first, see Get started):

docker compose -f docker-compose.dev.yml up -d --build
docker compose -f docker-compose.dev.yml logs -f

The app is accessible at http://localhost:5173.

Core utilities and base classes used by all other modules:

Database connections (PostgreSQL, Neo4j)
Authentication and authorization
Logging and event handling
Configuration management
Base classes for enrichers and tools
Utility functions

Pydantic models for all data types:

Domain, IP, ASN, CIDR
Individual, Organization, Email, Phone
Website, Social profiles, Credentials
Crypto wallets, Transactions, NFTs
And many more...

Enricher modules that process data:

Domain enrichers (subdomains, WHOIS, resolution)
IP enrichers (geolocation, ASN lookup)
Social media enrichers (Maigret, Sherlock)
Email enrichers (breaches, Gravatar)
Crypto enrichers (transactions, NFTs)
And many more...

FastAPI server providing:

REST API endpoints
Authentication and user management
Graph database integration
Real-time event streaming

Frontend application.

Modern and UI friendly interface
Built for performance (no lag even on thousands of nodes)

Development workflow

Adding new types: Add to flowsint-types module
Adding new enrichers: Add to flowsint-enrichers module
Adding new API endpoints: Add to flowsint-api module
Adding new utilities: Add to flowsint-core module

Each module has its own (incomplete) test suite:

# Test core module
cd flowsint-core
uv run pytest

# Test types module
cd ../flowsint-types
uv run pytest

# Test enrichers module
cd ../flowsint-enrichers
uv run pytest

# Test API module
cd ../flowsint-api
uv run pytest

Follow the modular structure
Use Poetry for dependency management
Write tests for new functionality
Update documentation as needed

⚖️ Legal & Ethical Use

Ethics: Please read ETHICS.md for responsible use guidelines.

Flowsint is designed strictly for lawful, ethical investigation and research purposes.

It was created to assist:

Cybersecurity researchers and analysts
Journalists and OSINT investigators
Law enforcement or fraud investigation teams
Organizations conducting internal threat intelligence or digital risk analysis

Flowsint must not be used for:

Unauthorized intrusion, surveillance, or data collection
Harassment, doxxing, or targeting of individuals
Political manipulation, misinformation, or violation of privacy laws

Any misuse of this software is strictly prohibited and goes against the ethical principles defined in ETHICS.md.

Who it's for

Getting started

Why It Matters

2. Run install command

Windows

1. Install pre-requisites

2. Clone and set up environment files

3. Build and start

First login

What is it?

Available Enrichers

Project structure

Core modules

Module dependencies

Development setup

Prerequisites

Run

Development

Module details

flowsint-core

flowsint-types

flowsint-enrichers

flowsint-api

flowsint-app

Development workflow

Testing

Contributing

⚖️ Legal & Ethical Use

❤️ Support