⬡ OSIRIS-v2

Open Source Intelligence & Reconnaissance Integrated System — v2 Fork

Comparison to Original Project (simplifaisoul/osiris)

Dimension	Original (`simplifaisoul/osiris`)	Osiris-v2 (this fork)
Map Engine	MapLibre GL	MapLibre GL + `pmtiles://` protocol + shader overlay
Offline Support	External tile dependency	`public/pmtiles/` Docker volume; air-gapped basemaps
Post-Processing	None	FLIR / NVG / CRT shader pipeline (`ShaderPost`)
Entity Link Graph	None	`react-force-graph-2d` interactive node-link graph
Security Tools	Limited / manual	13-tool deny-by-default registry with dispatcher (`/api/integrations/`)
Audit / Retention	In-memory only	Append-only audit + per-tool retention deadlines
Auth	Demo / stub	Real session auth + asset registry + consent checks
API Gateway	Per-route dispatch	Single gated dispatcher (`[tool]/[action]`) with capability allowlist
Wiki / Docs	Basic	Full v4–v15 plan docs, gap analysis, installation guides
Release	v1.0.19 artifacts	v1.0.5 with full feature set, all subagent work verified

This repository (ProjectZeroDays/osiris) is the v2 continuation — preserving every existing route, layer, and feature from the original while extending with PMTiles caching, WebGL shader pipeline, interactive entity graph, and complete security-tool integration blueprint (v4–v15).

A real-time global intelligence dashboard that aggregates live flight tracking, CCTV networks, earthquake monitoring, conflict zone mapping, and 24/7 news feeds into a single GPU-accelerated interface — now with native Android, Windows Electron apps, and integrated Cyber-Security toolkit.

Live Demo · Report Bug · Request Feature · Join Discord

Screenshots

_{Taiwan — Taipei's public traffic cameras streaming live on the Night map, one feed open full-size}

_{Seoul — live CCTV in 3D terrain around Namsan Tower, with the Cheonggyecheon feed playing}

_{Save an Area — draw a region and OSIRIS finds every camera inside it, ready to export as GeoJSON}

Overview

Osiris is a production-grade OSINT platform that provides situational awareness across multiple intelligence domains. Built with Next.js 16 and MapLibre GL, every data point is rendered via WebGL for 60fps performance even with thousands of concurrent entities on-screen.

Key Capabilities

Domain	Data Points	Sources
Aviation	Commercial, Private, Military, Jets	OpenSky Network
Maritime	39 Global Ports, 10 Chokepoints	Static Naval Intel
CCTV	17,000+ Cameras	TfL, WSDOT, Caltrans, ODOT, MDOT, HK Transport Dept, Taiwan THB, NZTA, Rijkswaterstaat, Public Webcams + more
Seismic	Real-time M2.5+	USGS Earthquake API
Fires	Active Hotspots	NASA FIRMS
News	24/7 Live Streams	23 Global Broadcasters
Weather	Severe Events	NASA EONET
Space	Solar Weather, Satellites	NOAA SWPC, N2YO
Cyber	CVE Threats, Vulnerability Scanning	NVD, Custom Scanner
Conflict	13 Active Zones	Static OSINT Intel
Crypto	BTC + ETH Wallet Tracing, OFAC SDN Match	blockstream.info, Blockscout, OpenSanctions
Sanctions	Person / Org / Vessel SDN Search	OpenSanctions (US OFAC SDN mirror)
Telegram OSINT	Geoparsed Posts from Public Channels	`t.me/s/<channel>` web preview

Architecture

┌─────────────────────────────────────────────────┐
│                  OSIRIS CLIENT                   │
│  ┌──────────┐  ┌──────────┐  ┌───────────────┐ │
│  │ MapLibre  │  │  HUD     │  │  RECON Toolkit│ │
│  │  GL (GPU) │  │ Panels   │  │  Port Scan    │ │
│  │  WebGL    │  │ Layers   │  │  DNS / WHOIS  │ │
│  │  Render   │  │ Controls │  │  Vuln Scanner │ │
│  └──────────┘  └──────────┘  └───────────────┘ │
├─────────────────────────────────────────────────┤
│               NEXT.JS API ROUTES                 │
│  /api/flights         /api/earthquakes          │
│  /api/cctv            /api/news                 │
│  /api/fires           /api/maritime             │
│  /api/gdelt           /api/satellites           │
│  /api/weather         /api/scanner              │
│  /api/sentinel        /api/telegram-feed        │
│  /api/osint/*  (whois, dns, ip, cve, sanctions, │
│                 crypto, sweep, threats, …)      │
├─────────────────────────────────────────────────┤
│              EXTERNAL DATA SOURCES               │
│  OpenSky · USGS · NASA · NOAA · TfL · NVD      │
│  GDACS · EONET · FIRMS · N2YO · RSS Feeds      │
│  blockstream.info · Blockscout · OpenSanctions  │
│  t.me public previews                            │
└─────────────────────────────────────────────────┘

Platforms

🌐 Web (Next.js 16)

The flagship web application with MapLibre GL GPU-accelerated rendering.

Quick Start:

git clone https://github.com/simplifaisoul/osiris.git
cd osiris
npm install
npm run dev

Open http://localhost:3000

📱 Android (Kotlin + Jetpack Compose)

Native Android app with WebView integration, splash screen, and Cyber-Security tools dashboard.

Build:

cd android-app
# Requires Android SDK at C:\Android and Gradle 8.5
./gradlew assembleRelease

Features:

Splash screen with app icon (1s delay)
WebView loading osiris.app with full JS support
Material 3 UI with purple theme
Cyber-Security tools dashboard (connects to API server at 10.0.2.2:8080)
Category tabs: recon, exploit, payload, crypto, network, web, mobile, forensics, etc.
Tool execution with JSON output display

APK Location: android-app/app/build/outputs/apk/release/osiris-app-release.apk

🖥️ Windows Desktop (Electron 30)

Native Windows desktop application with system tray, native menus, settings window, and full Cyber-Security integration.

Build:

cd electron-app
npm install
npm run dist

Features:

Hidden-inset title bar with native window controls
System tray with minimize-to-tray, context menu
Native application menu (Osiris, View, Tools, Window, Help)
Settings modal with toggles (tray, auto-updates, dark mode, compact mode, start on login)
System info panel (CPU, memory, uptime, Electron/Node/Chrome versions)
Update checker with status banner
Keyboard shortcuts: F12 DevTools, Ctrl+R Reload, F11 Fullscreen, Ctrl+H Hide, Ctrl+Q Quit
Secure IPC with contextBridge, context isolation enabled
Cyber-Security tools dashboard, reading the platform's registry at OSIRIS_PLATFORM_URL rather than keeping its own copy of the manifest
Category tabs with tool counts, tool cards, parameter modals, real-time output
A session of its own: the app signs in, holds the token in the main process so it never reaches the renderer, and keeps it encrypted with the operating system's credential store

Executables:

Standalone: electron-app/dist/win-unpacked/Osiris.exe (169 MB)
NSIS Installer: electron-app/dist/Osiris Setup 1.0.0.exe (73.3 MB)

Cyber-Security Toolkit Integration

Osiris now includes an integrated Cyber-Security toolkit exposing 1,275 tools across 28 categories from C:\Projects\Cyber-Security\Tools.

The tool-collection worker

The wide collection — 1,275 tools across 28 categories — runs in a separate process (intel/osiris_api.py) that imports tool modules and runs some of them as subprocesses.

It is not an API a client may reach. The platform's dispatcher is the only thing that talks to it, and it says so with a shared secret compared in constant time. The worker answers nothing but its health check without that secret, and it binds to loopback unless told otherwise.

cd intel
pip install -r requirements.txt

export OSIRIS_WORKER_KEY=$(openssl rand -hex 32)
export OSIRIS_WORKER_PORT=8080
python osiris_api.py

# The health check is open: it says whether the worker is alive and what
# it can see, and nothing about that is a secret.
curl http://127.0.0.1:8080/api/health

# Everything else needs the secret.
curl -H "X-OSIRIS-Worker-Key: $OSIRIS_WORKER_KEY" \
  http://127.0.0.1:8080/api/tools

The platform reaches it through three allowlisted capabilities and checks the tool against the worker's own catalogue before asking it to run anything:

Platform capability	What it does
`tool-collection:collection.execute`	Runs one tool from the collection
`tool-collection:collection.list`	Lists the tools the worker can see
`tool-collection:collection.health`	Asks the worker whether it is alive

A tool's result carries its provenance — the tool, the path it was loaded from, the SHA-256 of its source, the entry point, the time and the duration — and a finding produced by one is recorded as inferred, never as observed.

Tool Categories (28)

Category	Tools	Description
recon	16	Reconnaissance & OSINT (Shodan, Censys, DNS, WHOIS, Google Dorks)
exploit	41	Exploits & Vulnerabilities (PoCGen, searchsploit integration)
payload	8	Payload Generation (msfvenom, custom encoders)
crypto	6	Cryptography & Encryption (GrayFish AES-256-GCM)
network	13	Network Tools (nmap, masscan, port scanners)
web	14	Web Application Security (nuclei, sqlmap, XSS scanners)
mobile	3	Mobile Security (ADB, Frida, Frida scripts)
forensics	28	Forensics & Analysis (exiftool, volatility, file carving)
postexploit	28	Post-Exploitation (privilege escalation, persistence)
brute	4	Brute Force & Cracking (hashcat, john, hydra)
c2	8	Command & Control (Sliver, Covenant, custom C2)
social	1	Social Engineering (phishing templates, SET)
rat	3	Remote Access Tools (AsyncRAT, Quasar, custom)
core	6	Core utilities (logging, env, deps, opsec, GrayFish)
scan	4	Scanning utilities
control	13	Control systems (ICS/SCADA)
ops	4	Operations utilities
weapons	14	Weaponized tools
strix	79	Strix framework tools
overlord	4	Overlord C2
QuantumCLI	15	Quantum CLI tools
Q-Android	3	Android exploitation
PoCGen	41	Proof-of-Concept Generator
Pagasus-Pro	6	Pegasus-style tools
Ruflo	7	RuFlo tools
shadowdragon	7	ShadowDragon integration
keV	1	CISA KEV feed
dorks	4	Google dorking
crack	1	Cracking utilities
catalog	1	Tool catalog
K8tools	19	Kubernetes security tools
OmniRoute	118	OmniRoute networking
LazyOwn	861	LazyOwn collection
guaardvark-system-manager	9	GuaardVark system management
camwar	4	Camera warfare
markets	1	Marketplace tools
social	1	Social engineering
sshshell	3	SSH shell tools
vphone-aio-clone	1	VPhone AIO clone
shotdroid	1	ShotDroid
remote-admin-tool-main	1	Remote admin
nmap-vulners-2.0.2	1	Nmap vulners
Ladon	1	Ladon scanner
eapm	1	EAPM
dash	1	Dashboard

Running the worker

The worker needs a shared secret before it answers anything but its health check, and it binds to loopback by default:

cd intel
pip install -r requirements.txt

export OSIRIS_WORKER_KEY=$(openssl rand -hex 32)
export OSIRIS_WORKER_PORT=8080
python osiris_api.py

The platform reaches it with the same key, set in its own environment as OSIRIS_WORKER_URL and OSIRIS_WORKER_KEY. A worker started without a key refuses every route but its health check, and the platform refuses to talk to a worker that answers without one.

Features

Intelligence Layers (Web)

16 toggleable data layers with real-time entity counts
GPU-accelerated rendering — all map data rendered via WebGL, not DOM
Progressive loading — data fetched on-demand when layers are activated
Viewport-aware — only loads relevant data for the visible region

OI — a prediction engine (bring your own key)

OI Assist: talk to the map (press O). Ask in words, typed or spoken, and OI flies you there, switches the layers on, finds what is live (flights, military aircraft, ships, quakes, fires, weather, news, cameras, satellites), marks it on the globe in cyan with the area it searched, lists it in cards you can click through, reads the markets, opens panels and starts forecasts, all on your own model key.

OI Forecast: a prediction engine inspired by the community-made Pythia and by MiroFish. From Pythia comes the idea of forecasting from the live world OSIRIS already watches; from MiroFish, the method: cast the actors who shape an outcome and play them against each other in parallel simulated worlds. Ask a question and OI researches it from sources you can check (news, prices, prediction markets and the live feeds), runs the worlds, and has a report agent weigh the result against the crowd's price and a statistical baseline before it writes a calibrated forecast, every claim linked to its source. The whole run plays out on the globe as it happens.

Your own data: add files (CSV, JSON, Markdown, text, logs, web pages) or paste up to 100,000 characters. The world model reads it once; or have every actor read it in every period, and quote it. The extra input tokens are shown before you run, on your own key.
Your own key: OpenAI, Anthropic, Google Gemini, OpenRouter, Groq, DeepSeek, xAI, Mistral or Qwen. Kept in your browser, sent per request in a header, never stored on the server.
REST API under /api/oi with live Server-Sent Events, and an MCP server at /api/mcp so agents such as Hermes, Claude and Cursor can run predictions, steer them and read OSIRIS intelligence. See the docs.

RECON Toolkit

Port Scanner — TCP connect scan with service fingerprinting
DNS Lookup — Full record resolution (A, AAAA, MX, NS, TXT, CNAME)
WHOIS — Domain/IP registration data (auto-cross-checked against OFAC SDN)
SSL/TLS Inspector — Certificate chain analysis
IP Intelligence — Geolocation, ASN, threat reputation (auto-cross-checked against OFAC SDN)
Vulnerability Scanner — CVE lookup against NVD database
Crypto Wallet Trace — BTC + ETH lookup (balance, tx history, OFAC SDN sanctions flag)
OFAC Sanctions Search — query persons, organizations, vessels and aircraft against the US OFAC SDN list

Live Broadcast Network

23 live 24/7 news streams from global broadcasters
Click any news dot on the map to open the live stream
Feeds from NBC, CBS, ABC, Sky News, Al Jazeera, France 24, NHK, WION, and more

Telegram OSINT Layer

Public-channel feed scraped from the unauthenticated t.me/s/<channel> web preview — no Bot API token, no MTProto
Default curated set of 5 channels (EN + RU/UA war reporting), overridable via OSIRIS_TELEGRAM_CHANNELS
Posts are geoparsed against a multilingual place dictionary (EN + Cyrillic + Arabic) and plotted on the map
Click any cyan dot to read the post and jump to the original on Telegram

Crypto Wallet Intelligence

BTC lookups via blockstream.info (Esplora API, keyless)
ETH lookups via Blockscout's public ETH instance (eth.blockscout.com, keyless)
Every lookup is cross-checked against the OFAC SDN sanctioned-address list (mirrored from 0xB10C/ofac-sanctioned-digital-currency-addresses)
Sanctioned wallets surface a red SANCTIONED — OFAC SDN badge in the RECON panel

OFAC SDN Cross-Check

Standalone SANCTIONS tab in the RECON toolkit — full-text search across persons, organisations, vessels and aircraft
WHOIS and IP-intel routes auto-cross-check registrant / ASN-owner names against the SDN list and surface an inline alert
Data sourced from OpenSanctions (CC-BY 4.0) — keyless, ~7 MB cached in-memory for 24h

Conflict Zone Monitoring

13 active conflict/tension zones with severity-coded warning markers
Active Wars: Ukraine, Gaza, Sudan, Myanmar, DRC, Yemen
High Tension: Syria, Lebanon, Sahel, Somalia, Red Sea
Elevated: Taiwan Strait, Korean DMZ

Offline Basemap & Optical Post-Processing

PMTiles offline basemap — drop a .pmtiles vector archive into public/pmtiles/ (Docker volume) and switch to an air-gapped mode with no external tile server
WebGL shader post-processing — FLIR thermal, NVG green phosphor, CRT scanlines over the live camera / map stream via an instant canvas overlay

Interactive Entity Graph

Node-link graph for tagged entities (crypto wallets, IPs, aircraft tail numbers) built with react-force-graph-2d
Desktop side panel (GRAPH) + mobile drawer tab (entitygraph)

Performance Optimized

75% reduction in edge requests vs initial release
Aggressive polling relaxation (15-30 min intervals for stable data)
Static data served from memory (zero external API calls for news feeds)
layerFetchedRef prevents duplicate API requests

Quick Start

Web (Next.js)

git clone https://github.com/simplifaisoul/osiris.git
cd osiris
npm install
npm run dev

Open http://localhost:3000

Without a database the platform runs single-tenant and needs no sign-in. With one — see BUILD.md — it demands a session, and a platform with no accounts grows its own first one: visit it and the first-run screen creates the administrator and signs it in.

# A durable deployment: findings, audit, quotas, the asset registry.
export DATABASE_URL=postgres://user:pass@127.0.0.1:5432/osiris
npx drizzle-kit migrate

# Give an existing account a password, then sign in with it.
npm run user:password -- operator@osiris.local "your-password-here"

Android (Kotlin)

cd android-app
# Set up Android SDK at C:\Android
# Gradle 8.5 at C:\Android\gradle-8.5
./gradlew assembleRelease

APK: android-app/app/build/outputs/apk/release/osiris-app-release.apk

Windows Desktop (Electron)

cd electron-app
npm install
npm run dist

Executables: electron-app/dist/win-unpacked/Osiris.exe and electron-app/dist/Osiris Setup 1.0.0.exe

Cyber-Security API Server

cd intel
pip install -r requirements.txt
python osiris_api.py

Server at http://localhost:8080

Docker / Self-Hosting

git clone https://github.com/simplifaisoul/osiris.git
cd osiris
cp .env.template .env
docker compose up -d

Open http://localhost:3000

Prebuilt image (GHCR):

docker pull ghcr.io/simplifaisoul/osiris:latest
docker run -d -p 3000:3000 --env-file .env ghcr.io/simplifaisoul/osiris:latest

Documentation

docs/README.md is the wiki's index: what each page is for, and when you would want it.

Document	Covers
docs/TROUBLESHOOTING.md	Real failure modes, with the cause and the fix
BUILD.md	Building each client, the database, migrations, seeding
DOCKER.md	Self-hosting, Compose, CasaOS, and which keys the code reads
CI_CD_SETUP.md	Pipeline jobs, secrets, self-hosted runners, release flow
SECURITY.md	Responsible use and reporting a vulnerability
docs/RELEASE-DOCS.md	Release process and packaging
docs/GAP-ANALYSIS.md	v4-v12 security claims, audited against the code
docs/ADDING-A-TOOL.md	Adding a tool: the manifest, the allowlist, the adapter, the window, the beacon, the tests
docs/LICENSES.md	Every source's licence, what it obliges, and the share-alike warning
docs/ROADMAP.md	What is built, what is next, and what is deliberately not on the list
`/docs` (in the running app)	Every public API endpoint, generated from the catalog

The API catalog at src/app/docs/apiCatalog.ts is checked against the routes on disk by a test, in both directions — a route with no entry fails, and an entry with no route fails.

Release Artifacts

Latest tagged release: v1.0.3 — the PMTiles offline basemap, shader post-processing pipeline, and Entity node-link graph features. Pre-existing release artifacts in the releases/ directory may correspond to other versions.

Artifact	Size	Description
`electron.exe`	169 MB	Windows standalone executable
`osiris-app-release.apk`	10.31 MB	Signed Android APK
`osiris-electron-1.0.19-x64.nsis.exe`	73.3 MB	NSIS installer
`RELEASE-NOTES.md`	4.4 KB	Release documentation

Health and readiness

Two routes, two questions. A load balancer and a container health check want the second one.

Route	Question	Answers
`GET /api/health`	Is the process up?	200, always. It checks nothing else on purpose — a probe that fans out on every call is a self-inflicted outage under load.
`GET /api/ready`	Can this instance serve?	200 when it can, 503 when it cannot, and the body names the check that failed.

/api/ready checks that the database is reachable and has its tables, that there is at least one account anybody can sign in as, and that the tool-collection worker answers if one is configured. A platform with a database and no accounts is up and useless — it demands a session and has nobody to make one for.

Both answer without a session, because a probe cannot sign in.

Environment Variables

OSIRIS works partially without any API keys — all core feeds use public, keyless sources. Copy .env.template to .env and set only what you need:

# Published host port (container always listens on 3000). Default: 3000
OSIRIS_PORT=3000

# RECON scanner backend (the only vars the current code reads).
# SCANNER_KEY must match the backend's OSIRIS_KEY — generate with: openssl rand -hex 32
SCANNER_URL=
SCANNER_KEY=

# Optional, for higher rate limits / future sources
FIRMS_API_KEY=                # NASA FIRMS
OPENSKY_CLIENT_ID=            # OpenSky OAuth2
OPENSKY_CLIENT_SECRET=
N2YO_API_KEY=                 # N2YO satellites
AIS_API_KEY=                 # aisstream.io maritime

# Cyber-Security API
CYBER_API_URL=http://localhost:8080/api

Without SCANNER_URL/SCANNER_KEY the RECON toolkit returns 503; every other layer works out of the box. .env is gitignored — only the template is committed.

Tech Stack

Layer	Technology
Web Framework	Next.js 16 (App Router, Turbopack)
Web Language	TypeScript 5
Map Engine	MapLibre GL JS (WebGL)
Animations	Framer Motion
Icons	Lucide React
Styling	Custom CSS Design System
Deployment	Vercel Edge Network
Android Framework	Kotlin + Jetpack Compose Material 3
Android Min SDK	26 (Android 8.0)
Android Target SDK	34 (Android 14)
Desktop Framework	Electron 30 + Electron Builder
Cyber API	Flask (Python 3.11+)
Crypto	GrayFish (AES-256-GCM)

Keyboard Shortcuts

Web

Key	Action
`F`	Toggle flight layers
`E`	Toggle earthquakes
`S`	Toggle satellites
`D`	Toggle day/night cycle
`Escape`	Close panels

Electron Desktop

Key	Action
`F12`	Toggle DevTools
`Ctrl+R`	Reload
`F11`	Toggle Fullscreen
`Ctrl+H`	Hide to Tray
`Ctrl+Q`	Quit
`Ctrl+Plus`	Zoom In
`Ctrl+Minus`	Zoom Out
`Ctrl+0`	Reset Zoom

Acknowledgements

Public webcams — the cameras in this layer are open data: each one is broadcast publicly by whoever runs it, on their own site or their own channel. What the web lacked was a catalogue of them.

bekijkhet.nu is that catalogue, and it is the basis for every camera in the layer. Bram and Annelies have kept it by hand since 2012, and without their index these cameras would still be scattered across several hundred unrelated sites with no way to find them.

OSIRIS links every one of them straight through to the operator who runs it, which is also how bekijkhet.nu asks to be read.

OI — the method behind OI follows MiroFish, the open-source swarm-intelligence prediction engine: seed a parallel world from real material, populate it with agents, let them interact while variables are injected, and hand the simulation to a report agent. OSIRIS rebuilds that method natively for its own feeds and globe; no MiroFish code is used.

🆕 Recently Released (v1.0.3)

PMTiles Offline Basemap Caching

Air-gapped .pmtiles vector basemaps via Docker volume (public/pmtiles/). Protocol handler (pmtiles://) registered with MapLibre; OFFLINE BASEMAP layer group in LayerPanel; usePmtiles hook + /api/pmtiles routes for list/upload/delete/tile serving.

WebGL Shader Post-Processing Pipeline

Canvas overlay over MapLibre with instant visual post-processing: FLIR thermal gradients, NVG green phosphor, CRT scanlines. ShaderPost component with shaderMode (none/flir/nvg/crt) and shaderIntensity; OPTICAL POST-PROCESSING layer group.

Interactive Entity Node-Link Graph

EntityGraph via react-force-graph-2d converts tagged entities (wallet / IP / aircraft) into interactive link analysis. Desktop GRAPH tool-rail trigger + mobile entitygraph drawer tab.

Plan Document — Remaining Implementation Tasks

Consolidated from Osiris complete plan (v4–v15) — docs/plan/. Sections completed/remaining:

Section	Title	Status	Key Deliverables
01	Core Integration Blueprint v4	✅ Complete	13 security tools, manifest, icons, adapters, authz, audit, retention, dispatcher, detail pages
02	Network & Sensor Extensions v5	✅ Complete	`nrsuite`, `strykerapp` added to manifest; custom icons (`NrSuiteIcon`, `StrykerAppIcon`); adapters (`nrsuite.server.ts`, `strykerapp.server.ts`)
03	Drone RID & Surveillance Mapping v6	🔄 Partial	`esp32-drone-rid`, `esp32-surveillance-cams` in manifest; `DroneRidIcon`, `CopCamIcon`; adapters (`esp32-rid.server.ts`, `esp32-surveillance.server.ts`); map layer needs wire-up
04	Flock & ALPR Mapping v7	🔄 Partial	`flock-detector`, `haveibeenflocked`, `plate-ocr`, `camera-feed` in manifest; icons (`FlockIcon`, `HibfIcon`, `PlateOcrIcon`, `CameraFeedIcon`); adapters (`flock.server.ts`, `hibf.server.ts`)
05	Out-of-Scope Closure Plan v8	🔄 Partial	Explicit exclusions documented: live capture/BPF, HTTPL reports, drone inference, track reconstruction, reference backends
06	Gap Analysis v4 to v8	🔄 Partial	6-tier gap analysis exists (`docs/GAP-ANALYSIS.md`); Tier-1 build/security gaps mostly closed
07	Shared Platform Foundation v9	🔄 Partial	DB migrations, schemas (`schemas.ts`), `health.server.ts`, `readiness.server.ts`, `retention.server.ts`, `audit.server.ts`, `state.server.ts`, `capabilities.server.ts` present; rate limiting/quotas, first-run UX, Docker security headers, map layer live refresh need verification
08	Wifite3 & Quantum-CLI v10	🔄 Partial	`wifite3` (active-transmit) and `quantum-cli` (disabled-by-policy) in manifest; `WifiIcon`; adapter (`wifite3.server.ts`); dispatcher additions present
09	Universal Tool UI & Beacons v11	🔄 Partial	Universal window primitives, beacon registry, popup/detail panel partially implemented via existing `OsirisMap` overlays
10	Full UI & Integration Closure v12	🔄 Partial	Inventory of all requested features; gap analysis shows most security-tool pieces in place
11	Scanner, Cell, Police & Local AI v13	🔄 Partial	`scanner-feeds`, `imsi-catcher`, `police-reports`, `ai-settings` in manifest; `ScannerIcon`, `CellTowerIcon`, `PoliceIcon`, `AiProvidersIcon`; adapters (`scanner-feeds.server.ts`, `imsi-catcher.server.ts`, `police-reports.server.ts`, `ai-settings.server.ts`)
12	Verification, README & Wiki v14	🔄 Partial	`docs/README.md`, `docs/GAP-ANALYSIS.md`, `docs/ADDING-A-TOOL.md`, `docs/ROADMAP.md`, test matrix partial; full README update in progress
13	Emergency Broadcasts & AMBER Alerts v15	🔄 Partial	CAP adapter; `scanner-feeds` layer; AMBER/Silver/Blue classifier needs wire-up

Critical remaining items from v9 Shared Foundation

DB migrations / schema enforcement: verify drizzle-kit migrate against current schema
Real auth + asset registry: replace demo auth in /api/integrations routes
Rate limiting + quota: quota.server.ts exists; wire into dispatcher
First-run experience: screen when no accounts exist (see first-run flow)
Docker security headers / CSP: verify .env + compose
Health / readiness: already present (/api/health, /api/ready)
Map layer live refresh: logic to refresh GeoJSON/WMTS sources on viewport change
Icon verification: all custom SVGs verified; add icon test

License

MIT — see LICENSE for details.

🛠️ SUPPORT THE OSIRIS PROJECT

The OSIRIS Global Intelligence Grid is entirely open-source, but running the backend scanners and data firehoses isn't cheap.

If you want to help keep the servers alive, and support us to get access to better tools unlock the Special OSIRIS Console, you can officially support the project here:

🔗 Support OSIRIS on Patreon

Supporters receive the 🔴 RedTeam Console role and access to encrypted developer comms.

Built by simplifaisoul

Join our Discord to be a part of this movement!

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
android-app		android-app
docs		docs
drizzle		drizzle
electron-app		electron-app
engine/__pycache__		engine/__pycache__
intel		intel
nginx		nginx
public		public
releases		releases
runs		runs
scratch		scratch
src		src
tests		tests
tools		tools
.dockerignore		.dockerignore
.env.example		.env.example
.gitattributes		.gitattributes
.gitignore		.gitignore
BUILD.md		BUILD.md
CI_CD_SETUP.md		CI_CD_SETUP.md
DOCKER.md		DOCKER.md
Dockerfile		Dockerfile
GOAL.md		GOAL.md
LICENSE		LICENSE
PROGRESS-v7-v13.md		PROGRESS-v7-v13.md
PROGRESS.md		PROGRESS.md
README.md		README.md
SECURITY.md		SECURITY.md
deploy.sh		deploy.sh
docker-compose.yml		docker-compose.yml
drizzle.config.ts		drizzle.config.ts
eslint.config.mjs		eslint.config.mjs
next.config.ts		next.config.ts
package-lock.json		package-lock.json
package.json		package.json
postcss.config.mjs		postcss.config.mjs
tsc_out.txt		tsc_out.txt
tsconfig.check.json		tsconfig.check.json
tsconfig.json		tsconfig.json
vitest.config.ts		vitest.config.ts

Latest commit

History

Folders and files

Repository files navigation

⬡ OSIRIS-v2

Open Source Intelligence & Reconnaissance Integrated System — v2 Fork

Screenshots

Overview

Key Capabilities

Architecture

Platforms

🌐 Web (Next.js 16)

📱 Android (Kotlin + Jetpack Compose)

🖥️ Windows Desktop (Electron 30)

Cyber-Security Toolkit Integration

The tool-collection worker

Tool Categories (28)

Running the worker

Features

Intelligence Layers (Web)

OI — a prediction engine (bring your own key)

RECON Toolkit

Live Broadcast Network

Telegram OSINT Layer

Crypto Wallet Intelligence

OFAC SDN Cross-Check

Conflict Zone Monitoring

Offline Basemap & Optical Post-Processing

Interactive Entity Graph

Performance Optimized

Quick Start

Web (Next.js)

Android (Kotlin)

Windows Desktop (Electron)

Cyber-Security API Server

Docker / Self-Hosting

Documentation

Release Artifacts

Health and readiness

Environment Variables

Tech Stack

Keyboard Shortcuts

Web

Electron Desktop

Acknowledgements

🆕 Recently Released (v1.0.3)

PMTiles Offline Basemap Caching

WebGL Shader Post-Processing Pipeline

Interactive Entity Node-Link Graph

Plan Document — Remaining Implementation Tasks

Critical remaining items from v9 Shared Foundation

License

About

Resources

Security policy

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages