{"repo":"assafkip/kipi","free":true,"listed":false,"github":"https://github.com/assafkip/kipi","clone":"git clone https://github.com/assafkip/kipi.git","description":"Open-source, self-hosted OSINT investigation platform: turn documents into a live, investigated entity graph. Autonomous agent, graph analytics (centrality, communities, pathfinding), keyless-first tool belt.","language":"Python","stars":61,"topics":["entity-graph","fraud-investigation","graph-analytics","investigation","osint","threat-intelligence","ai-agent","anthropic","cybersecurity","document-intelligence"],"license":null,"category":"security-tools","readme_excerpt":"kipi Drop a dense intel report on it. Get a live, investigated entity graph. The graph above built itself. One seed domain went in. An agent pulled WHOIS, DNS, certificates, and the live sites, then pivoted on what it found. No queries to write. Watch the full 75 seconds, with sound. kipi is an open-source, self-hosted OSINT investigation platform. It turns documents into an investigation. PDFs, screenshots, spreadsheets, pasted notes go in. A typed entity graph comes out. Then an autonomous investigator digs the open web and builds the graph out in front of you: infrastructure pivots, typed edges, gated findings, a written brief. The analyst stays the top authority. Every schema, finding, and edge gets confirmed, corrected, or rejected by a human. The machine proposes. You decide. Two things sit together here that I never found in one commercial OSINT platform: document ingestion into entities, and real graph analytics (centrality, communities, pathfinding) on the same investigation canvas. What you're watching The demo runs a real case. Two seed domains go in: trumpfundus.com and trumpstake.us . By the end, kipi has mapped a Russian-language affiliate fraud network. White-label fake crypto casinos. The backend operator is registered to a shell company in Reykjavík, one month after Brian Krebs killed its predecessor. 20,000+ affiliates. 60 to 80 percent of stolen deposits, paid out in crypto. A Musk-branded clone, flagged for phishing, sitting in the same cluster. Then it wr","default_branch":null,"files":null,"tree":[],"storefront":"/r/assafkip","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/assafkip/kipi/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}