Webscreenshots, downloaded files, git repos, docker images & APKs bbot grabbed during the scan
WAF Detections
Protocol Detections
Loading...
Loading checklist…
Loading timeline…
DataroomAnalyst evidence → brain facts
Upload the target's own documents (SOC 2, pentest reports, architecture, asset inventory, policies).
Text is parsed and stored as high-confidence, analyst-sourced brain facts
(dataroom:<file>) the AI and agents read — to fact-check scan findings against what the company told you.
Processed locally
Drop files here or click to browse
PDF · DOCX · XLSX · PPTX · TXT · CSV · images · max 25 MB
Ask the dataroomgrounded in your documents, with citations
Click the Master Analysis tab to load your finding registry.
Click the Context Session tab to prepare your diligence call.
Storya tappable visual brief of this target
Loading story…
Finding Detail
⚡Full AI Analysis0%
idleno AI calls yet
AI routing — recent calls
No AI calls recorded yet.
Settings
Appearance
Theme
Switches the interface palette. Your choice is saved on this device and applies across every page.
AI & Models
Routing mode
Smart
Best provider per task, auto-fallback
Cloud
Cloud providers only
Local
100% on-box · offline emergency
Active routeresolving…
Provider status
Routing Cascade
Cloudfastest · highest quality
↓ fallback if cloud unavailable
LM StudioMac / remote · private
URL
Model
checking…
↓ fallback if LM Studio unreachable
Ollamalocal server · emergency fallback
URL
Model
checking…
✗ Missing
✗ Missing
✗ Missing
Each provider's model is picked in its row above. Lists poll live from every endpoint.
Default Analysis Profile
Applied to new analyses. Per-domain overrides this.
Google Workspace
Connect your Google account so agents can export deliverables — Docs, Slides, Sheets, Drive, Calendar.
Least-privilege (drive.file — only files this app creates). Token stored locally, never committed.
Loading…
OSINT Integrations
API keys are saved to .env (encrypted at rest when the vault is unlocked) and take
effect immediately. Every module auto-activates the moment its key is present — none are required.
Loading…
Portfolio
Default Sort
How targets are ordered in the portfolio grid
Default View
Layout for target cards
Show Archived by Default
Include archived scans in portfolio view
Data & Cache
Data Limits
Set to 0 for no limit. Changes apply immediately.
Portfolio Limit
Max targets per portfolio request
Correlation Limit
Max correlations returned per category
Target Detail Limit
Max items loaded per tab
Cache Management
Clear All Caches
Forces fresh data fetch on next load
Archive Manifest
Index of archived scan files used by the Evolution feature.
Manifest Status
Loading…
Connection
⚠ Connection changes require an app restart to take effect.
Generate a secret key: python3 -c "import secrets; print(secrets.token_hex(32))"
Add to .env: FLASK_SECRET_KEY=<output>
Add OAuth redirect URIs in GCP Console for your OAuth client
Restart the app — auth gate activates automatically
Access Allowlist
Audit Trail
Append-only audit log— events
All logins, scans, exports, brain updates, and dream operations are recorded to data/audit.jsonl. ISO 27001 A.12 / GDPR Art.30 compliant.
Session Config
Cookie: HttpOnly · Secure · SameSite=Lax
Lifetime: 7 days
Storage: Server-side filesystem (data/sessions/)
Password storage: None — Google OAuth only
Privacy & data
Control what leaves this box. h0SINT is local-first — these toggles govern when analysis may use
cloud AI and what gets written to disk. Changes apply immediately.
Breach-corpus and data-room contents are stored locally only and never committed. See the encrypted
secrets vault under Security to protect API keys at rest.
Avatar
Loading…
A single living energy orb that reacts to what the agent is doing — colour and turbulence
shift across phases. Leave Follow phase on for phase-driven colour, or pin your own.
Orb color
Core & glow tint
Notifications
Loading…
Keyboard shortcuts
↑↓ navigate↵ openesc close
Report Builder
Arrange · edit · AI-augment every section, then generate the final report
✓ Saved
AI
Generate section
Generate visual / diagram
Structure
𝐇 Heading
¶ Text block
― Divider
⤓ Page break
Findings & Analysis
Findings table
Verification status
CVE table
Data visualisation
Risk gauge
KPI band
Severity chart
Attack surface
Geo distribution
Finding categories
Network topology
Domain sphere (3D)
Diagram (Mermaid)
Surface data
DNS records
IP addresses
Open ports
Technologies
URLs
Emails
WAF
Protocols
OSINT
OSINT intel
Restore
Removed sections appear here.
No report loaded yet. Run Full AI Analysis first.
Export Center
Every report, data feed & deck for — in one place. single source of truth · post-triage