Skip to content
Project Revelare
Not CJIS compliant. Do not use for CJIS-regulated data. Project Revelare is early / partial. Maturity labels (Stable, Beta, Demo, Planned) mark what is real; see the roadmap. Do not treat IOC or case output as production-grade or court-ready. Documents you analyse never leave your browser; only identifiers are saved (plus short context snippets if you opt in per upload). How we handle data.

Upload evidence

Files are read and analysed in your browser. The files themselves are never uploaded. What is saved: file name (for files inside an archive, the path within it), size, SHA-256 hash and the indicators found, plus short context snippets only if you tick the box below.

No case yet? Create one.

Off by default. When ticked, up to 3 snippets of about 120 characters of the surrounding text are kept for each identifier, so you can see where it appeared. That is a small amount of document text leaving your browser. Snippets are encrypted with the same key as indicator values, only you can see them (in the indicator detail row), and they are deleted with the source or case. Leave it off for material you must not store outside your systems.

Drop files here or

Text, logs, email, HTML, JSON, CSV work best. ZIP, TAR, GZ and TAR.GZ archives are unpacked here in your browser, nested up to 5 levels, and each file inside becomes its own source. Other binaries (PDF, Office) are scanned for readable strings. Max 100 MB per file, 512 MB per archive, 1 GB unpacked.