OSINT & Exposure

Exposure findings

Review the active case findings with evidence, risk signals, and remediation posture. Authorized local records are redacted in public views.

Data mode

authorized_local

client_not_selected

Findings

0

case-state store

Evidence

0

configured

Connectors

8

authorized adapters

OSINT connector suite

Authorized-source adapters for ACE correlation mapping, Sherlock, SpiderFoot, Epieos, IntelTechniques, Hunchly, Overpass Turbo, and public filings. Local and bounded adapters can persist findings, evidence, and kanban tasks; provider/manual adapters create human-review work with source links.

Select client first

Runnable

3

Human review

2

Needs config

3

ACE correlation map

correlation-analysis · local-analysis

Runnable

Local graph-aware correlation risk model over the authorized client identifier set. It recommends human-approved exposure reduction, not automated metadata poisoning.

full_namephoneemailaddresshandlebusiness_entitydomainalias
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
None

Sherlock Project

identity-correlation · local-cli

Needs config

Username correlation across public sites when a local Sherlock CLI is installed.

handlealias
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
SHERLOCK_BIN

SpiderFoot

identity-correlation · local-cli

Needs config

Local SpiderFoot CLI/service bridge for approved identifiers. The route records a task unless a local command is configured.

domainemailbusiness_entityfull_name
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
SPIDERFOOT_BIN

Epieos

identity-correlation · human-review

Human review

Email and phone OSINT provider. Treated as human-review unless an approved server API contract is added.

emailphone
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
EPIEOS_API_KEY

IntelTechniques automation

checklist · local-analysis

Runnable

Backend source-playbook automation inspired by public OSINT workflows. Cloak owns the query generation, evidence linking, and human approval tasks.

full_namephoneemailaddresshandlebusiness_entitydomain
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
None

Hunchly

capture · local-export

Needs config

Local Hunchly export ingestion. Uses HUNCHLY_EXPORT_DIR when a desktop capture export is available.

evidence_export
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
HUNCHLY_EXPORT_DIR

Overpass Turbo

geo · bounded-http

Runnable

Bounded OpenStreetMap address-surface review for authorized address identifiers.

address
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
None

Public filings / PACER

public-records · human-review

Human review

Business/entity public-records review queue with SEC EDGAR and PACER source links.

business_entitydomainfull_name
Runtime contract
Protected action
Runs only through server routes that use PLATPHORM_API_KEY.
External action taken
false
Required config
None

OSINT run ledger

Completed adapter runs from Postgres. Public rows redact protected identifiers and artifact URLs; protected operator APIs can read full run details.

0 recent
No OSINT runs are persisted for this client yet. Run the authorized adapter suite from the workbench.
IDFindingSeverityConfidenceStatusRisk
No findings match your filters.

0 of 0 findings · click a row to open the evidence drawer

Cloak Harbor Personal Exposure DefenseProduction pilotHuman approval requiredPassive OSINT onlyNo external sendingResponsible-use policy