What is done in the dark will be brought to light
Project Revelare is an early-access investigation toolkit. Pull indicators (IPs, emails, URLs, domains, hashes, wallets, phone numbers, CVEs) out of documents and logs, organise them into cases, and see how cases connect.
Try it now
Drop a file (up to 2 MB) or use a sample. Everything runs in your browser; nothing is uploaded or stored.
Drop a file here or
Text, log, email or HTML. Max 2 MB. No upload, no storage.
Extracted indicators (0)
| Type | Value | Count |
|---|
Your documents stay on your device
Files are read and analysed in your browser. We store identifiers: file name, size, SHA-256 hash and the indicators found. Never the document. Short context snippets are kept only if you opt in per upload.
How data handling worksCases and reports
Group analysed sources into cases, review indicators by type, and export a printable report or CSV.
Link analysis Beta Pro
Find indicators shared across sources and cases, such as the same wallet, IP or email showing up in two investigations.
Log analysis Beta Pro
Summarise web and auth logs locally: top IPs, status codes, paths and time range. Save the IPs to a case.
API Intelligence Beta Pro
RDAP registration and DNS lookups for IPs and domains, straight from public registries.
Gumshoe
A noir terminal adventure (plus cyberpunk and fantasy cases). Free, and saves when you're signed in.
Play GumshoeHonest status
Revelare is early and partial. Extraction is pattern-based (regular expressions with basic validation) and will produce false positives. Every tool carries a maturity label (Stable, Beta, Demo or Planned); App automation, deployment and shared spaces are Planned and listed on the roadmap. The Pro badge marks paid-tier features (Alpha Access, $5/month). The platform is not CJIS compliant and its output is not court-ready.