Kipi is a self-hosted OSINT platform that ingests documents and screenshots to build a typed entity graph, then runs automated WHOIS, DNS, certificate and web pivots. It applies real-time graph analytics (centrality, communities, pathfinding) and generates a sourced, graded brief while letting analysts confirm every finding. The only external dependency is an Anthropic API key; all data and processing run locally.

• Kipi turns dumped documents/screenshots into a typed entity graph and runs an autonomous investigation (WHOIS, DNS, certs, web pivots) with only an Anthropic API key required, everything else self-hosted and mostly keyless.
• Its 75-second demo traces two seed domains into a Russian-language crypto casino affiliate fraud network with 20,000+ affiliates stealing 60-80% of deposits, run through a Reykjavík shell company set up right after Brian Krebs exposed its predecessor.
• Every extracted fact is sourced and graded on an evidence scale (A = DNS record down to analyst leads), with analysts able to confirm, correct or reject each node/edge.
• Licensed under Elastic License 2.0: free to self-host or use for paid investigations, but can't be repackaged or resold as a service.