AUTHORIZED INVESTIGATIONS · SOURCE PROVENANCE · OPERATOR TRUTH

Find the signal.
Keep the evidence.

hyDox is Hypatia's multi-source OSINT investigation console for the team: public-source discovery, identity resolution, infrastructure intelligence, source health, provenance, synthesis, and export in one operator workspace.

Open hyDox →Explore the toolkit
Catalogcurrent step counts in the console
Sourcesreadiness checked in the console
Outcomesexplicit state for each lookup
1operator evidence surface

OSINT that tells you when it failed.

No green checkmarks for dead scrapers. hyDox separates transport health from source execution and exposes FINDING, NO_FINDING, NOT_APPLICABLE, FAILED, TIMEOUT, UNAVAILABLE, DEGRADED, and NOT_RUN states.

IDENTITY

Username, email & person discovery

Correlate handles, emails, names, public profiles, aliases, and related identities across source-specific adapters.

INFRASTRUCTURE

Domain, IP & device intelligence

Passive infrastructure enrichment, DNS and host context, Shodan-backed host intelligence when configured.

PROVENANCE

Source evidence cards

See which source produced a finding, how long it took, what state it returned, and whether the result is degraded.

SYNTHESIS

Operator-ready dossiers

Combine source evidence into a readable report while preserving the underlying source trail for verification.

READINESS

Dependency & API telemetry

Check local CLI and dependency availability. Upstream access and configuration are verified only by the actual lookup.

CONTROL

Bounded execution

Timeouts, concurrency limits, protected-target policy, Moloch guardrails, and explicit degradation instead of silent guesses.

Registered specialist sources.

Availability varies by installed adapter and dependencies. A catalog entry does not mean a source is ready; missing implementations remain unavailable.

BlackbirdMaigretSpiderFoottheHarvesterShodan PythonSherlockHoleheSERPERFECTor+ source-specific agents

Built for the team, not the public.

The marketing page is public. The investigation console is authenticated and uses Hypatia's central account system.

  • Team, admin, super-admin, operator, and owner roles can enter the console.
  • OSINT APIs remain authenticated and keep existing blacklist/Moloch protections.
  • No iframe OS dependency. The app runs directly on hydox.app.
ACCESS FLOW

hydox.app → sign in → /app.html

Same-origin API calls keep auth cookies scoped to the product domain while the bridge remains the canonical API authority.

Team workspace ready.

Sign in with your Hypatia account and open the live OSINT console.

Team Sign In →