Open-source intelligence monitoring that runs on your hardware. Hatchet Trace watches the public web, marketplaces, and private channels, scoring, correlating, and alerting the moment a subject, plate, or threat surfaces.
Purpose-tuned keyword models, scoring weights, and source sets for the work investigators actually do. Switchable per case, extensible to your own.
Surfaces violent rhetoric, targeted threats, and extremist coordination across forums, imageboards, and channels, with geographic and institutional weighting.
Tracks cloned VINs, title washing, and stolen-vehicle listings across marketplaces and seller channels, flagging your watchlist on any reappearance.
Monitors names, handles, numbers, and identifiers tied to active cases, correlating mentions across platforms into a single timeline.
Detects distribution language, coded terminology, and sourcing patterns in open and semi-private marketplaces.
Define your own keywords, sources, and scoring. Save searches, schedule them, and let the pipeline run while you work the case.
A continuous loop, not a search box. Every cycle pulls fresh signal, scores it against your models, links it across sources, and pushes what matters to your team.
Pulls from RSS, social, forums, imageboards, channels, and marketplaces on a fixed cadence, degrading gracefully when a source is down.
▸Weighted keyword models grade each item by threat action, geography, institution, and watchlist match: HIGH / MEDIUM / LOW.
▸De-duplicates, links items sharing subjects or geography across sources, and escalates multi-source clusters automatically.
▸Dispatches HIGH/MEDIUM hits to Telegram, Slack, Discord, email, or pager, with a court-ready report on demand.
Keyless public sources run out of the box. Authorized-only collection (Tor / dark web) ships disabled by default. You enable it under your own legal authority.
Designed for agencies that can't send case data to a vendor cloud. It deploys on your infrastructure and reasons with a local model.
Self-hosted via Docker. SQLite or your own database. No telemetry, no vendor cloud. Collection and storage stay inside your network.
Built-in analyst assistant runs on local Ollama models. Sensitive case content is summarized without ever leaving the host.
Authorized collection routes through Tor with circuit rotation, exit-node controls, and a firewall kill-switch to prevent leaks.
SHA-256 hashing, EXIF/GPS capture, role-based access, MFA, and a tamper-evident audit log, with court-ready report generation.
Hatchet Trace deploys on your infrastructure, under your authority. Request a walkthrough and a deployment package for your team.