Service: Flowsint - EyevinnOSC/community GitHub Wiki

Getting Started

Flowsint is an open source OSINT (Open Source Intelligence) investigation platform that uses a graph database (Neo4j) to map and visualize relationships between entities such as domains, IP addresses, email addresses, individuals, and organizations. Background enrichment jobs run via Celery, allowing you to chain automated data-collection workflows across multiple OSINT sources. All data is stored locally — nothing is sent to external services.

Available as a managed service in Eyevinn Open Source Cloud.

Prerequisites

  • An Eyevinn OSC account
  • A running PostgreSQL instance (birme-osc-postgresql)
  • A running Valkey instance (valkey-io-valkey) — used as the Celery task queue
  • A running Neo4j instance (neo4j-docker-neo4j)

Step 1: Create the database dependencies

PostgreSQL

Navigate to the PostgreSQL service and create an instance. Note the host, port, and password shown on the instance card.

Build the connection URL in the format: postgres://postgres:<password>@<host>:<port>/postgres

Store this URL as a Service Secret on the Flowsint service page (Service Secrets tab → New Secret). Name it dburl.

Valkey (Redis-compatible)

Navigate to the Valkey service and create an instance. Note the host and port. The Valkey URL format is: redis://<host>:<port>

Neo4j

Navigate to the Neo4j service and create an instance. Note the Bolt URI (bolt or neo4j protocol), username (default: neo4j), and password.

Store the Neo4j password as a Service Secret on the Flowsint service page. Name it neo4jpwd.

Step 2: Generate encryption keys

Flowsint requires two secret keys:

  • AuthSecret — a random string for JWT signing (e.g. generate with openssl rand -hex 32)
  • MasterVaultKeyV1 — a master encryption key for the secure credential vault (e.g. generate with openssl rand -hex 32)

Store both as Service Secrets on the Flowsint service page.

Step 3: Create a Flowsint instance

Navigate to the Flowsint service page and click Create flowsint.

Configure the instance using your secrets and dependency URLs:

Field Value
DatabaseUrl {{secrets.dburl}}
RedisUrl redis://<valkey-host>:<valkey-port>
AuthSecret {{secrets.authsecret}}
MasterVaultKeyV1 {{secrets.vaultkey}}
Neo4jUriBolt bolt://<neo4j-host>:<neo4j-port>
Neo4jUsername neo4j
Neo4jPassword {{secrets.neo4jpwd}}

Step 4: Create your account

Once the instance is running, open the Flowsint URL from the instance card. Navigate to /register to create your first user account. After registration, log in and start a new investigation from the dashboard.

Starting an Investigation

  1. Click New Investigation and give it a name
  2. Add seed entities (domain, IP, email, organization) to the investigation
  3. Run enrichers to automatically expand the graph — Flowsint queries OSINT sources and adds related entities and edges
  4. Use the graph view to explore relationships visually

CLI usage

osc create reconurge-flowsint myosint \
  -o DatabaseUrl="{{secrets.dburl}}" \
  -o RedisUrl="redis://<valkey-host>:<valkey-port>" \
  -o AuthSecret="{{secrets.authsecret}}" \
  -o MasterVaultKeyV1="{{secrets.vaultkey}}" \
  -o Neo4jUriBolt="bolt://<neo4j-host>:<neo4j-port>" \
  -o Neo4jUsername="neo4j" \
  -o Neo4jPassword="{{secrets.neo4jpwd}}"

Resources

⚠️ **GitHub.com Fallback** ⚠️