Desktop OSINT workbench

GhostWire

Investigate in one place. Personas, evidence, link graphs, timelines, and tools—connected in a private desktop workspace.

One workspace. Every thread.

Follow the signal without losing the story.

GhostWire brings the moving parts of an investigation together—from isolated research identities to evidence, transforms, notes, and shareable case reports. Your data stays local unless you choose to use an external tool or API.

01 / IDENTITIES

Isolated personas

Build research identities with separate browser sessions, accounts, mailboxes, and optional VPN exits.

02 / CONNECTIONS

Link graph + transforms

Map entities and relationships, then enrich the graph with live lookups and API-powered transforms.

03 / EVIDENCE

Case-ready evidence

Capture findings with timestamps and hashes, build timelines, and export complete reports.

04 / LOCAL-FIRST

Local by default

Investigations live on your machine in a local database, with portable backups when you need them.

Open source

Inspect the tool before it inspects anything.

GhostWire is fully open source under the MIT license. Download a release, verify its checksum, or build the desktop app yourself from the same source.

Browse the source

Elsewhere in the empire

Other projects

Games, trackers, tools, and places for those very specific corners of the internet.