OSINT toolkits · Rank #7
Prism-platform
Grade B: derived only from the two verdicts below. How grades work
Self-hosted OSINT platform. Point it at a domain, IP, email, phone or username and 26 modules run in parallel: WHOIS, DNS, threat intel, breaches, username search. One dashboard, an exposure score, an entity graph, HTML and PDF reports.
Why this verdict
How we check →- 280 commits by 47 contributors in the last 90 days (123 in the last 30). receipt ↗
- Latest release v2.12.1, 5 days ago. receipt ↗
- Tailwind CSS 3 declared; latest is 4 (1 major behind). receipt ↗
- On current major: Next.js, Pydantic, React. receipt ↗
- Not counted in verdict: TypeScript 5 → 7, FastAPI 0 → 0. receipt ↗
Snapshot: commit 92af757 on main, checked 2026-10-12 07:54 UTC. Receipts link to files at this exact commit.
Dependency freshness
| Package | Declared | Latest | Status |
|---|---|---|---|
| TypeScript typescript | 5.0.0 | 7.0.2 | Behind, not counted |
| FastAPI fastapi | 0.142.2 | 0.143.0 | Behind, not counted |
| Tailwind CSS tailwindcss | 3.4.0 | 4.3.3 | 1 major behind |
| Next.js next | 16.3.8 | 16.4.0 | Current |
| Pydantic pydantic | 2.13.5 | 2.14.1 | Current |
| React react | 19.3.0 | 19.3.0 | Current |
Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.
What's in the stack
- API layer
- Pydantic, Uvicorn
- Testing
- pytest
Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.
What the README says you get
- AIAI summary and chat
AI summary: written summary of the findings, plus a chat you can ask follow-up questions in
- AnalyticsOPSEC exposure score
OPSEC Score: aggregated 0-100 exposure risk score across data exposure, identity, infrastructure and web security
- APIStandalone CLI
Standalone CLI: run scans headlessly via `python cli.py scan example.com --json`
- APIWebhook callbacks
Webhook callbacks: get notified on scan completion with HMAC-signed payloads (SSRF-protected), Slack/Discord formatters
- AuthHardened API key auth
Hardened auth: header-only API keys (`X-API-Key` / `Bearer`), no query-string secrets, strict CORS, per-principal scan isolation
- DeployOne-command Docker deploy
One-command deploy: `docker run ghcr.io/novacode37/prism-platform` with nothing to build (amd64 and arm64)
- i18nMulti-language UI
Multi-language UI: English, Russian, German, French, Spanish, Italian, Polish, Portuguese, and Chinese out of the box (i18n + auto-detect)
- Other26 OSINT modules
26 modules: WHOIS, DNS, crt.sh, Wayback Machine, Shodan, VirusTotal, AbuseIPDB, Censys, dark-web mirrors, email reputation, SMTP verify, breach lookup, Blackbird (50+ sites), Maigret (3000+ sites), Te
- OtherMulti-format reports
HTML, PDF, CSV & Markdown reports: export full scan results as HTML, PDF, CSV, or Markdown (locale-aware EN/RU/DE)
- OtherScan history and comparison
Scan history & comparison: browse past scans, load results, compare two scans side-by-side
- OtherZero mandatory API keys
Zero mandatory API keys: 16 out of 26 modules work without any keys at all
- UIReal-time dashboard
Real-time dashboard: WebSocket-driven scan progress with per-module progress, an entity graph and a GeoIP map
Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 12, 2026. Every item is checked against an exact README quote; 2 unverifiable items were discarded. A README claim is the maker's description, not something we tested.
Watch Prism-platform
Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.
History
Oct 1, 2026 → Oct 12, 2026. One square per check, colored by maintenance status. Hover for details.
Show as a table
| Date | Maintenance | Dependencies | Commits (90d) |
|---|---|---|---|
| Oct 12, 2026 | Active | 1 major behind | 280 |
| Oct 1, 2026 | Active | 1 major behind | 291 |
Sources
Every claim on this page comes from these public records, checked . Open them to verify.
- Commit history ↗ default branch (main) at the checked commit: pulse, contributors, last commit
- Releases ↗ latest release
- frontend/package.json ↗ declared dependency versions and stack (at commit 92af757)
- requirements-web.txt ↗ declared dependency versions and stack (at commit 92af757)
- requirements.txt ↗ declared dependency versions and stack (at commit 92af757)
- README ↗ quoted features at the checked commit
- npm registry ↗ latest versions (each linked in the table above)
- PyPI ↗ latest versions of Python packages (each linked in the table above)