01 · Product name
Flowsint
Graph investigations you run on your own machine.
Published by reconurge.
In short
Flowsint is the graph investigation platform published in reconurge/flowsint. On 19 Oct 2026 the SPDX field was Apache-2.0. The latest GitHub release was v1.2.13, published 2026-10-03. The README's example pin is FLOWSINT_VERSION=1.2.10, an older example than that release. www.flowsint.io announced a v2 and gave no date. The README says the first login is a new account at localhost:5173/register, and that there are no default credentials. The Buy Me a Coffee and Ko-fi badges are donations, not a printed price.
Product pricing strategy
02
Free
Nothing opened on 19 Oct 2026 printed a dollar, euro, or pound price for Flowsint. The SPDX field is Apache-2.0, which describes the published repository. It does not describe a hosted subscription, because this listing did not find a checkout. The README badges point at Buy Me a Coffee and Ko-fi. A donation page is not a plan. The Ko-fi URL returned HTTP 403 to a scripted request from this network, so this listing cites the README rather than that badge URL. www.flowsint.io offered Docs, Demo, and Features, and it announced a v2 with no date. It did not show a rate card. If a later hosted v2 prints a price, cite that page on its own. Do not copy a Maltego quote onto this repository.
Utility and features
03
The repository reconurge/flowsint describes Flowsint as a platform for visual, flexible, and extensible graph-based investigations. The install path in the README is Docker. Linux and macOS use Make, with the command make prod. Windows uses Docker Desktop and docker compose -f docker-compose.prod.yml up -d, which the README says pulls pre-built images. After that, the README sends you to http://localhost:5173/register to create an account. It says there are no credentials or account by default. This listing did not start those containers. Docker was not available on the review machine, so there is no graph from a local workspace to quote.
- Release v1.2.13. The latest GitHub release on 19 Oct 2026 was v1.2.13, published 2026-10-03. The README pin example is 1.2.10.
- The site says v2 is coming. www.flowsint.io loaded as a marketing page. Its banner announced a v2 and gave no date. That is not the release tag.
- You create the first account. The README sends the first login to localhost:5173/register and says there are no default credentials.
The public site www.flowsint.io loaded on 19 Oct 2026 as a marketing page. Its banner announced a v2 and gave no date. That sentence is not the GitHub release. The release tagged v1.2.13 was published 2026-10-03. The README's own example of a pin is FLOWSINT_VERSION=1.2.10. Quote the string from the page you mean. The SPDX field is Apache-2.0. The README also links ETHICS.md and prints Buy Me a Coffee and Ko-fi badges. Those badges ask for a donation. They do not print a seat price, a credit pack, or a plan name. A graph you build later is still a lead until each node is opened in its source.
- 1
Read the release tag and the README pin as two sentences, then decide which image you intend to run.
- 2
Install Docker, follow the README for your operating system, and create the account the register page asks for.
- 3
Keep each graph node as a lead until the source it cites is opened.
Caveats
04
Three version sentences were true on the same day, and they are not the same sentence. The GitHub release is v1.2.13, published 2026-10-03. The README example is FLOWSINT_VERSION=1.2.10. The public site announced a v2 and gave no date. Do not collapse those into one number, and do not call the marketing banner the release.
This listing did not run the stack. There is no investigation graph, no node count, and no default password to publish. The README says you create the first account yourself. Before a copy is exposed past localhost, the README tells you to change AUTH_SECRET, MASTER_VAULT_KEY_V1, and NEO4J_PASSWORD, and to add the hostname to the allowlist in nginx.conf. Those are the README's deployment notes. They are not a finding from a graph. Apache-2.0 is the SPDX field. ETHICS.md is the project's own use note. Read it before you point the tool at a person.
Potential use cases
06
- A team wants a graph they host themselves. Read reconurge/flowsint before you quote a version. On 19 Oct 2026 the GitHub release was v1.2.13, published 2026-10-03, the README's pin example was FLOWSINT_VERSION=1.2.10, and www.flowsint.io announced a v2 and gave no date. Write the string from the page you mean. The SPDX field was Apache-2.0.
- The install is about to be briefed as already running. The README's path is Docker, then a new account at localhost:5173/register, and it says there are no default credentials. This listing did not start the containers. Do not describe a graph, a node count, or a login that was not opened. Donation badges are not a seat price.
- Someone wants the public site to stand in for the product. www.flowsint.io on 19 Oct 2026 was a marketing page with a v2 banner. That banner is not the release tag and not a workspace. Keep ETHICS.md in the note if the question is whether the project publishes a use boundary. A later hosted v2 needs its own page.
Hard cases
The case where the first result is easy to over-read.
Three versions, one sentence
v1.2.13, the README example 1.2.10, and the site's v2 banner were all visible on 19 Oct 2026. A memo that says Flowsint 1.2 or Flowsint v2 has picked one and hidden the others. Quote the release, the pin, and the banner as three sentences. Apache-2.0 does not choose among them.
Practitioners using it
Posts on X from people describing a concrete use. The quote is the post. Likes and reposts are the counts saved with it, not a live total. A label marks a creator, a maintainer, a vendor, a partner, a data partner, or an investor.
Open Source Intelligence (OSINT): Using Flowsint for Graph-Based Investigations Guide by @_aircorridor : Install Create account and first investigation Running Transforms to Discover Relationships Chaining Transforms for Deeper Investigation https://t.co/DIVt0Bfx4J pic.twitter.com/S7PHWeb9l0
Open Source Intelligence (OSINT): Using Flowsint for Graph-Based Investigations Flowsint reveals hidden connections between domains, IPs, emails, and criminals. https://t.co/GKWdIzqQjW @three_cube pic.twitter.com/61KkmBzb6E
OSINT gets messy fast. 🔎 I explored Flowsint, an open-source tool that turns scattered findings into a visual investigation. 🎥 Watch: https://t.co/SboSL916mF #OSINT #Cybersecurity #wilecurity #flowsint #cybersecurity pic.twitter.com/mpW9pI2IFL
Questions
Is Flowsint free?
The SPDX field on 19 Oct 2026 was Apache-2.0. No page opened that day printed a seat price. The README's Buy Me a Coffee and Ko-fi badges are donation links, not a plan.
Which version is current?
The GitHub release was v1.2.13, published 2026-10-03. The README's example pin is 1.2.10. www.flowsint.io announced a v2 and gave no date. Quote the page you mean.
Citations
07
Titled sources. These public pages are what the quotes on this listing come from.
Product
Flowsint repository
https://github.com/reconurge/flowsintDocumentation
Flowsint release v1.2.13
https://github.com/reconurge/flowsint/releases/tag/v1.2.13Pricing
Flowsint site
https://flowsint.io/