Skip to content
Not CJIS compliant. Do not use for CJIS-regulated data. Project Revelare is early / partial. Maturity labels (Stable, Beta, Demo, Planned) mark what is real; see the roadmap. Do not treat IOC or case output as production-grade or court-ready. Documents you analyse never leave your browser; only identifiers are saved (plus short context snippets if you opt in per upload). How we handle data.

What is done in the dark will be brought to light

Project Revelare is an early-access investigation toolkit. Pull indicators (IPs, emails, URLs, domains, hashes, wallets, phone numbers, CVEs) out of documents and logs, organise them into cases, and see how cases connect.

Your documents stay on your device

Files are read and analysed in your browser. We store identifiers: file name, size, SHA-256 hash and the indicators found. Never the document. Short context snippets are kept only if you opt in per upload.

How data handling works

Cases and reports

Group analysed sources into cases, review indicators by type, and export a printable report or CSV.

Link analysis Beta Alpha Access

Find indicators shared across sources and cases, such as the same wallet, IP or email showing up in two investigations.

Log analysis Beta Alpha Access

Summarise web and auth logs locally: top IPs, status codes, paths and time range. Save the IPs to a case.

API Intelligence Beta Alpha Access

RDAP registration and DNS lookups for IPs and domains, straight from public registries.

Gumshoe

A noir terminal adventure (plus cyberpunk and fantasy cases). Free, and saves when you're signed in.

Play Gumshoe

Honest status

Revelare is early and partial. Extraction is pattern-based (regular expressions with basic validation) and will produce false positives. Every tool carries a maturity label (Stable, Beta, Demo or Planned); App automation, deployment and shared spaces are Planned and listed on the roadmap. "Alpha Access" marks the paid tier, not maturity. The platform is not CJIS compliant and its output is not court-ready.