Service: Flowsint - EyevinnOSC/community GitHub Wiki
Flowsint is an open source OSINT (Open Source Intelligence) investigation platform that uses a graph database (Neo4j) to map and visualize relationships between entities such as domains, IP addresses, email addresses, individuals, and organizations. Background enrichment jobs run via Celery, allowing you to chain automated data-collection workflows across multiple OSINT sources. All data is stored locally — nothing is sent to external services.
Available as a managed service in Eyevinn Open Source Cloud.
- An Eyevinn OSC account
- A running PostgreSQL instance (
birme-osc-postgresql) - A running Valkey instance (
valkey-io-valkey) — used as the Celery task queue - A running Neo4j instance (
neo4j-docker-neo4j)
Navigate to the PostgreSQL service and create an instance. Note the host, port, and password shown on the instance card.
Build the connection URL in the format: postgres://postgres:<password>@<host>:<port>/postgres
Store this URL as a Service Secret on the Flowsint service page (Service Secrets tab → New Secret). Name it dburl.
Navigate to the Valkey service and create an instance. Note the host and port. The Valkey URL format is: redis://<host>:<port>
Navigate to the Neo4j service and create an instance. Note the Bolt URI (bolt or neo4j protocol), username (default: neo4j), and password.
Store the Neo4j password as a Service Secret on the Flowsint service page. Name it neo4jpwd.
Flowsint requires two secret keys:
-
AuthSecret — a random string for JWT signing (e.g. generate with
openssl rand -hex 32) -
MasterVaultKeyV1 — a master encryption key for the secure credential vault (e.g. generate with
openssl rand -hex 32)
Store both as Service Secrets on the Flowsint service page.
Navigate to the Flowsint service page and click Create flowsint.
Configure the instance using your secrets and dependency URLs:
| Field | Value |
|---|---|
| DatabaseUrl | {{secrets.dburl}} |
| RedisUrl | redis://<valkey-host>:<valkey-port> |
| AuthSecret | {{secrets.authsecret}} |
| MasterVaultKeyV1 | {{secrets.vaultkey}} |
| Neo4jUriBolt | bolt://<neo4j-host>:<neo4j-port> |
| Neo4jUsername | neo4j |
| Neo4jPassword | {{secrets.neo4jpwd}} |
Once the instance is running, open the Flowsint URL from the instance card. Navigate to /register to create your first user account. After registration, log in and start a new investigation from the dashboard.
- Click New Investigation and give it a name
- Add seed entities (domain, IP, email, organization) to the investigation
- Run enrichers to automatically expand the graph — Flowsint queries OSINT sources and adds related entities and edges
- Use the graph view to explore relationships visually
osc create reconurge-flowsint myosint \
-o DatabaseUrl="{{secrets.dburl}}" \
-o RedisUrl="redis://<valkey-host>:<valkey-port>" \
-o AuthSecret="{{secrets.authsecret}}" \
-o MasterVaultKeyV1="{{secrets.vaultkey}}" \
-o Neo4jUriBolt="bolt://<neo4j-host>:<neo4j-port>" \
-o Neo4jUsername="neo4j" \
-o Neo4jPassword="{{secrets.neo4jpwd}}"