Flowsint: Graph-Based OSINT Tool for Visualizing Relationships Between Entities

by Nam Phong · November 15, 2025

Flowsint is a graph-based investigation tool focused on reconnaissance and OSINT (Open Source Intelligence). It allows you to explore relationships between entities through a visual graph interface and automated transforms.

Available Transforms

Domain Transforms

Reverse DNS Resolution – Find domains pointing to an IP
DNS Resolution – Resolve domain to IP addresses
Subdomain Discovery – Enumerate subdomains
WHOIS Lookup – Get domain registration information
Domain to Website – Convert domain to website entity
Domain to Root Domain – Extract root domain
Domain to ASN – Find ASN associated with domain
Domain History – Retrieve historical domain data

IP Transforms

IP Information – Get geolocation and network details
IP to ASN – Find ASN for IP address

ASN Transforms

ASN to CIDRs – Get IP ranges for an ASN

CIDR Transforms

CIDR to IPs – Enumerate IPs in a range

Social Media Transforms

Maigret – Username search across social platforms

Organization Transforms

Organization to ASN – Find ASNs owned by organization
Organization Information – Get company details
Organization to Domains – Find domains owned by organization

Cryptocurrency Transforms

Wallet to Transactions – Get transaction history
Wallet to NFTs – Find NFTs owned by wallet

Website Transforms

Website Crawler – Crawl and map website structure
Website to Links – Extract all links
Website to Domain – Extract domain from URL
Website to Webtrackers – Identify tracking scripts
Website to Text – Extract text content

Email Transforms

Email to Gravatar – Find Gravatar profile
Email to Breaches – Check data breach databases
Email to Domains – Find associated domains

Phone Transforms

Phone to Breaches – Check phone number in breaches

Individual Transforms

Individual to Organization – Find organizational affiliations
Individual to Domains – Find domains associated with person

Integration Transforms

N8n Connector – Connect to N8n workflows

Module details

flowsint-core

Core utilities and base classes used by all other modules:

Database connections (PostgreSQL, Neo4j)
Authentication and authorization
Logging and event handling
Configuration management
Base classes for transforms and tools
Utility functions

flowsint-types

Pydantic models for all data types:

Domain, IP, ASN, CIDR
Individual, Organization, Email, Phone
Website, Social profiles, Credentials
Crypto wallets, Transactions, NFTs
And many more…

flowsint-transforms

Transform modules that process data:

Domain transforms (subdomains, WHOIS, resolution)
IP transforms (geolocation, ASN lookup)
Social media transforms (Maigret, Sherlock)
Email transforms (breaches, Gravatar)
Crypto transforms (transactions, NFTs)
And many more…

flowsint-api

FastAPI server providing:

REST API endpoints
Authentication and user management
Graph database integration
Real-time event streaming

flowsint-app

Frontend application.

Modern and UI friendly interface
Built for performance (no lag even on thousands of nodes)

Install & Use

Support Our Threat Intelligence

If you find our technology report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee PayPal