WinterMute Local-first OSINT workbench with native Tor and AI analysis

Name: WinterMute Local-first OSINT workbench with native Tor and AI analysis
Availability: InStock
Author: VanceVP

by VanceVP·Feb 25, 2026·3 points·0 comments

Visit Project View on HN

AI Analysis

●●●BangerWizardryNiche GemZero to One

Desktop OSINT workbench bundles Tor, Telegram, AI vision into one hardened app with tamper-evident custody.

Strengths

•Genuine architectural insight: unified workbench eliminates tool-switching friction (Tor Browser + Telegram + notes + screenshots = 7+ tools today).
•SHA-256 custody chain + STIX 2.1/MITRE ATT&CK export means evidence holds up in court—non-trivial forensics requirement.
•AI copilot contextually understands OSINT data (IoC extraction, threat actor profiling) vs. generic ChatGPT, solving real investigator blindness.

Weaknesses

•macOS-only launch limits addressability (Windows/Linux investigators locked out).
•No evidence of adoption or case studies—early product, market validation unclear.

Post Description

Desktop app for OSINT and darknet investigations. Everything runs locally on your machine, no evidence is sent to the cloud. Built-in Tor browser lets you access .onion sites directly from the workbench without juggling separate tools. An AI copilot can analyze screenshots and web pages as you work. Every piece of evidence gets SHA-256 hashed with a tamper-evident custody chain so your collection holds up. IOC tracking across cases with automatic cross-case correlation to link shared infrastructure between investigations. STIX 2.1 export and MITRE ATT&CK mapping for structured reporting, currently only available on macOS.