Result
Result
Indicator is an independent publication dedicated to exposing digital deception and equipping professionals with the knowledge, tools, and skills to investigate it. We serve people on the front lines of OSINT and digital investigative work.
indicator.media →Buried Signals is an investigative technology studio in partnership with Indicator. Using AI to accelerate investigations, disclose methodologies, and build open tools for journalists and researchers.
buriedsignals.com →The tool database is compiled from 17 independent OSINT toolkits maintained by established practitioners and organisations. A weekly crawler checks all sources, adds new tools, and flags deprecated ones. Each tool is enriched with structured documentation.
Recommendations are generated by a language model that can only reference tools in our database — it cannot invent tools or fabricate URLs. The model is guided by few-shot examples drawn from a community survey of OSINT researchers.
Search uses vector embeddings to match queries by meaning rather than keywords. Frequently asked questions are served from a curated cache of editorially reviewed answers with verified tool references.
We run a weekly automated evaluation comparing recommendations against community-validated ground truth to detect quality regressions. The full tool database is published as an open dataset on HuggingFace.
Browse the datasetThe Data Navigator is a skill-tree architecture: each public data source — company registers, sanctions lists, procurement databases, legal-entity identifiers — is wrapped in a self-contained adapter with its own input schema, auth handling, and normalization logic.
A natural-language planner routes questions to the best source, executes queries through the adapter, and returns structured records with source URLs for verification. The skill tree is the single source of truth; every queryable source has an executable adapter validated at startup.
Sources are catalogued by jurisdiction and category, with transparent runtime badges — Open sources run with no key, Your Key sources use your own API credentials from the OS keychain, and Hosted sources run through our infrastructure. You always know exactly how each query executes.