Turn raw threat data
into decisions.
AnseIn is an all-in-one CTI/OSINT platform. Hybrid extraction, multi-provider enrichment, cognitive AI analysis, an interactive knowledge graph, and a grounded RAG copilot — in one pane of glass.
Features
Everything an analyst needs. Nothing they don't.
Hybrid Extraction
11 regex patterns + LLM fallback across 13 entity types. IPs, domains, hashes, CVEs, wallets — all extracted in one click.
Knowledge Graph
Interactive D3 force-directed graph with Louvain community detection and 4D temporal playback.
Cognitive Analysis
LLM narratives, actor hypotheses, severity scoring 0–100, Admiralty reliability codes, 3 attack hypotheses per run.
RAG Copilot
Chat grounded strictly in your investigation data. Citations, voice input, markdown rendering.
STIX 2.1 Export
Deterministic UUIDv5 bundles, JSON, and print-ready PDF executive summaries with TLP classification.
Multi-Tenant SaaS
BYOK with AES-256-GCM encryption, RBAC, hash-chained audit logs, SIEM webhook ingestion.
Pipeline
One click. Five stages. Full observability.
Text, files, webhooks. PII auto-redacted.
Regex + LLM hybrid. 13 entity types.
VirusTotal, AbuseIPDB, Shodan.
LLM narrative + severity + hypotheses.
Audit trail, SOAR playbooks, exports.
Why AnseIn
Stop juggling four tools.
Traditional threat analysis forces analysts to copy-paste between OpenCTI, VirusTotal, ChatGPT, and STIX libraries. There's no audit trail, severity scoring is inconsistent, and nothing is grounded in your own investigation data.
AnseIn collapses the whole workflow into one observable, idempotent, gracefully-degrading pipeline — with a tamper-evident audit log and a copilot that can't hallucinate.
- — Manual copy-paste across 4+ tools
- — No audit trail of analyst decisions
- — Inconsistent severity scoring
- — Manual STIX bundle construction
- + One-click 5-stage pipeline
- + Hash-chained audit trail
- + LLM severity + Admiralty codes
- + RAG copilot grounded in your data
- + STIX 2.1, JSON, PDF exports built-in
Built on
Next.js 16 · TypeScript · Prisma · Tailwind CSS 4
Threat intelligence, decoded.
Start your first investigation in under a minute. The first account becomes admin.