WHAT IS IT?
Flowsint is an open source OSINT graph investigation tool. It lets you visually explore relationships between entities (domains, IPs, emails, social accounts, organizations…) and automatically enrich data through around fifty specialized enrichers. Built for cyber analysts, researchers and investigators, it puts a strong emphasis on ethical use and privacy.
WHY IS IT INTERESTING?
- Graph-based investigation: A visual interface where each entity becomes a node linked to the others. You follow the connections by mouse instead of cross-referencing spreadsheets by hand.
- 40+ automated enrichers: Domains, IPs, ASNs, social media, organizations, cryptocurrencies, websites, emails… the ecosystem covers the bulk of recon work.
- Privacy by design: Data is stored locally on the user's machine, not in a third-party cloud.
- Performant at scale: Optimized to render thousands of nodes without lag, making large investigations actually usable.
- Modular and extensible: A layered architecture (core, types, enrichers, API, frontend) that makes adding your own sources and workflows straightforward.
USE CASES
- Map a target's infrastructure (domains, IPs, ASNs) during an attack surface audit
- Link accounts, emails and organizations in an OSINT investigation
- Automatically enrich indicators during threat intel work
- Visualize transaction chains or entities tied to cryptocurrencies