I’ve been building PRISM - a self-hosted OSINT toolkit you run yourself instead of pasting investigation targets into someone else’s web service.
Give it a domain, IP, email, phone, or username and it runs 22+ modules in parallel into one dashboard: WHOIS, DNS, crt.sh subdomains, GeoIP, threat intel (Shodan/VirusTotal/AbuseIPDB/Censys), breach data, username search across 3000+ sites (Blackbird + Maigret), dark-web mirror checks, and more. Results come with an entity graph, a GeoIP map, an OPSEC exposure score (0–100), and HTML/PDF/CSV/Markdown exports.
14 of the 22 modules work with zero API keys (missing keys degrade gracefully instead of erroring).
Stack: FastAPI + Next.js 14, runs with one docker compose up. MIT licensed.
Demo: https://getprism.su/ Github: https://github.com/NovaCode37/Prism-platform
Built it solo - feedback welcome, especially on which modules you’d want added.
Tried it. ANY given username generates a list of the same sites (e.g. instagram, reddit, imgur, etc) and simply slaps the given username to the base url and gives that as a “result” even if the user doesn’t exist on that platform. Even the “AI Analysis” is simply a report of nonexistent platforms and users. You can achieve better results by simply using a bash script.
What would be better ways of doing it?
use curl and try to “ping” the user page to see if it exists (200) or not (400)
Same experience. 🫤
Yeah. Very disappointing.
Full of AI fingerprints yet no disclosure.
Yep, I’m a solo dev and I use AI assistance while building this. So, I should’ve been upfront about it. The code’s all reviewed, tested, and MIT-licensed, so it’s fully auditable. I’ll add a disclosure to the README
So you vibecoded a security product and named it after a famous government program known for spying unlawfully on American citizens
To what, capitalize on the SEO?
This is kinda gross dude, not gonna lie
at this point “prism” must be one of the most overused project names, there’s no hope for any seo using that name
Did the LLM choose the name? There’s an obvious existing semantic link between PRISM and intel, so congrats on choosing an un-searchable name.
There’s also the NSA PRISM, which is older than the current LLM garbage. It’s just a basic ass name that makes for a good pun on something that changes how you see things.
Yes that’s the one I was referring to.
Especially rough with the Snowden post on the top of most people’s front page today.
Xd, prism is basically un-googleable that one’s on me cause there is not a great SEO foresight. The name was mine though
Your targets never leave your PC
how can that be true if the whole thing relies on sending the infos to the API providers?
Terrible name. It’s taken.
Stack: FastAPI + Next.js 14, runs with one docker compose up. MIT licensed.
Isn’t this what every chatbot builds with by default?
Isn’t there also a palantir module called prisma or something?
AFAIK no. The only prisma I know is this one.
That’s pretty darn cool:
Hiya, love that you actually tested it. That’s exactly the kind of 30-second recon it’s built for. The “missing security headers” check catches a surprising number of sites.
If there’s a module or source you’d want added, I’m genuinely taking requests that’s how the roadmap gets shaped. Thanks for trying it!
You bet. I’ve dropped it in my ‘Projects’ folder. Thank you for sharing.
WHOIS exposes 2 contact email(s) — registrar privacy not used
Registrar privacy is in fact used. It’s just the Namecheap abuse email address and an anonymized *@withheldforprivacy.com mail address. It shouldn’t list those as results.
Thanks, I’ll fix that. I’ll add a filter for known privacy-proxy and registrar abuse domains
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
Fewer Letters More Letters AP WiFi Access Point DNS Domain Name Service/System ISP Internet Service Provider
[Thread #21 for this comm, first seen 20th Jun 2026, 21:30] [FAQ] [Full list] [Contact] [Source code]
This looks really cool. One minor bug: with the online demo, at least on mobile (chrome, iOS), the target text field never brings up the keyboard so it can’t be used.
Oh thanks, I’ll fix that
So I have an interest in self hosting things in the future (nextcloud, chatmail), but for now I’m scared of opening my network to attacks, and also I don’t have a network right now I just hotspot from my phone when needed and torrent things at my friend’s house.
That said how would I go about using this? I’m guessing something to do with docker or porteus (maybe? The other one that wasn’t vulnerable to that recent thing), then when I want to check out X website I just “spin up the docker container” (still not 100% what that means but I’ve heard the verbiage), hotspot the pc (for now), and run it through the program? Am I understanding that right?
Sorry I’m so green, gotta start somewhere! I feel like a grandma calling an Xbox a “Nintendo” haha.
Super cool, I’m gonna host it when I have some time !
NSA is that you?
Also jokes aside, how does the use case compare to some existing tools like BBOT?
This seems morr geared towards public facing targets than targeted information OSINT (user profiling, etc.)
