What it is
An operator workbench, not another metrics wall.
Ingest open and keyed geospatial feeds into PostGIS, work the map, open a case, share a snapshot. Built for small SA / OSINT desks and labs that want the stack on their own VPS.
The loop
Signal → picture → case → share.
CLI and HUD share the same API. Investigate a host, pin it on the map, keep the thread.
-
01
Watch the scene Layer kits, timeline, anomalies, live SSE updates on the HUD.
-
02
Investigate Domain / IP dossiers — DNS, RDAP, CT, mail auth, cert peek — as map enrichment.
-
03
Hold the thread Cases, alerts, watchboxes, shareable
?az=snapshots. -
04
Ask the Copilot Tool-using assistant over your own providers — optional lens, not the product.
Self-host
Your PostGIS. Your keys. Your map.
Docker Compose for the lab; deploy overlay binds API/web to loopback and puts TLS in front. MIT — fork it, run it, break it.
# thin CLI against your API pnpm azimuth modules pnpm azimuth investigate example.com → dossier · map pin · case · share link
Honest limits
A lab console, not a command system.
- Picture quality tracks upstream feeds, keys, and rate limits — not the UI alone.
- Not ATC, not certified C2. Open / hybrid OSINT for operators who know the difference.
- No social / phone doxxing scanners, no port-scan star bait. Passive enrichment stays.
- Public demo is a PoC — expect a password gate; treat it as a showcase, not an SLA.