Introduction

Corvid is a self-hostable, single-user OSINT/security-analyst web app. It replaces a wall of browser tabs — VirusTotal, Shodan, username-search sites, phishing-domain lookups — with a single keyboard-first search bar: paste an IP, domain, hash, email, or username and it’s routed to the right tool automatically.

It runs as one Docker Compose stack on your own infrastructure, so investigation data and API keys never pass through a third-party SaaS. It’s a workbench, not a case-management system — fast, on-demand lookups rather than long-term data warehousing.

Caution

Corvid is an early prototype and not production-hardened. See the disclaimer in the README before exposing it beyond a trusted, isolated environment.

What’s next

• Installation — get Corvid running with Docker Compose.
• Configuration — environment variables and settings.
• Architecture — how the backend and frontend are structured.
• Features — a tour of every module.