OpenGraph Intel

Tool Description : A self-hosted OSINT and link analysis platform that enables investigators to collect, enrich, visualise, and analyse relationships between entities.

OpenGraph Intel

Quick Overview

URL

https://ogi.khas.app/

What it does

Provides visual link analysis, entity management, enrichment transforms, mapping, timelines, and AI-assisted investigation capabilities.

How to use it

Create an investigation, add entities to a graph, run enrichment transforms, and explore discovered relationships through visual analysis tools.

Cost

Free.

Account required

Yes if using Google. No for self-hosted deployment.

If self-hosting, cookies will depend on deployment configuration and authentication settings. Minimal Google Analytics cookies if using a browser.

Ownership

Created and maintained by Switzerland-based, Yusuf Khasbulatov, whose GitHub user name is Khashashin.

Use in Reporting

Useful for relationship mapping, investigative timelines, intelligence analysis, attribution assessments, and visual presentation of findings.

What does OpenGraph Intel do?

OpenGraph Intel helps users understand complex relationships between entities by placing them into an interactive investigative workspace, combining traditional OSINT transforms with AI-assisted investigation workflows.

Within the platform you can create and manage investigation cases, build visual relationship graphs, run enrichment transforms such as DNS, WHOIS, SSL certificate, and geolocation lookups, display information on maps and timelines, explore connections between entities, and much more.

The lowdown: Rather than juggling spreadsheets, browser tabs, and separate visualisation tools, you can centralise your findings in a graph environment making relationships easier to identify and explore.

How to Use:

1. Deploy OpenGraph Intel using the project's installation instructions locally, or login to the web app and create a new investigation workspace.

2. Add entities such as domains, IP addresses, email addresses, usernames, organisations, or locations into the graph and run enrichment transforms.

3. Explore discovered relationships using graph, map, and timeline views, then document findings for reporting and further analysis.

Cost

Free
Partially Free
Paid

Data Processing

Account Required:

Yes if using Google. No for self-hosted deployment.

Cookies:

If self-hosting, any cookies used will depend on deployment configuration and authentication settings. Minimal Google Analytics cookies if using a browser.

Use in Reporting

OpenGraph Intel can support:

Intelligence reporting.
Cyber investigations.
Attribution assessments.
Threat actor profiling.
Fraud investigations.
Due diligence enquiries.
Network infrastructure analysis.

It’s a relatively new open-source investigation platform with growing interest in the OSINT and cybersecurity communities.

Capabilities

Limitations

Visual graph-based link analysis between entities.

Relatively new project with a smaller user community than established platforms.

Runs enrichment transforms including DNS, WHOIS, SSL, & geolocation lookups.

Not as feature-rich/mature as commercial tools such as Maltego.

Supports graph, map, and timeline investigation views.

Self-hosting requires technical setup.

AI-assisted investigation workflows for graph expansion and analysis.

Data quality depends on integrated transforms and external sources.

Can be fully self-hosted with customisation options.

AI-generated findings require analyst validation and verification.

Summary

OpenGraph Intelligence is best used during the processing, analysis, and reporting stages of the OSINT workflow and is particularly well suited to investigators who value transparency, customisation, and control over their data.

Ownership

Created and maintained by Switzerland-based, Yusuf Khasbulatov, whose GitHub user name is Khashashin.

Ethical Considerations

Verify enrichment results before drawing conclusions.
Avoid creating misleading relationship maps based on weak correlations.
Ensure AI-assisted outputs are reviewed by a human analyst.
Use proportionate investigative techniques and collect only relevant information.
Protect sensitive investigation data within self-hosted environments.