De-anonymize Actors
Link burner emails, VOIP phone numbers, and obscure handles to real-world identities through historical data breaches and cross-platform correlation.
Every clue becomes a connection.
Start with a single email, phone, domain, or IP. Workbench searches 420+ databases and runs 80+ transforms to build a visual map of your target in seconds. Get the power of legacy forensic tools with zero setup—and no API keys required.
80+
Native Transforms
1-Click
Visual Graphs
Zero
Setup Time
TARGET PERSON
EMAIL
SOCIAL PROFILE
DOMAIN
PHONE
5 nodes / 4 links / 2 sources
Select. Transform. Pivot. Repeat.
Fraud Intelligence◆
Cyber Threat Intel◆
Corporate Security◆
Private Investigators◆
Trust & Safety◆
Law Enforcement◆
Due Diligence◆
Fraud Intelligence◆
Cyber Threat Intel◆
Corporate Security◆
Private Investigators◆
Trust & Safety◆
Law Enforcement◆
Due Diligence◆
Fraud Intelligence◆
Cyber Threat Intel◆
Corporate Security◆
Private Investigators◆
Trust & Safety◆
Law Enforcement◆
Due Diligence◆
Core Capabilities
Actionable intelligence for any investigation.
Map Infrastructure
Pivot from a single suspicious domain to uncover hosting providers, connected IPs, WHOIS history, and hidden subdomains used by threat actors.
Analyze at Scale
Don't drown in data. Use the built-in AI Investigator to summarize complex webs of evidence into clear, actionable reports for your stakeholders.
How it works
Start with what you know.
No complex query languages or confusing setups. Select the data type you have, paste it onto the canvas, and watch the connections build themselves.
Sample Starting Points
Click to try
1
Paste a single data point.
Start your case with the one piece of evidence you know for sure—an email, username, or IP address.
2
Enrich with one click.
Right-click any node. Workbench instantly checks 420+ databases to show you exactly which transforms can uncover new intelligence.
3
Watch the network build itself.
Found a breached password? Connected social profiles? The graph draws the links automatically, turning raw JSON into a visual map.
Native Integration Layer
Powering intelligence with 420+ Trusted Sources
From social media APIs to dark web leaks and public records, Workbench orchestrates the world's APIs natively so you don't have to manage keys.
Social Media
Public Records
Dark Web
IP / Infrastructure
Domain Registries
Breach Data
Instagram
Instagram
Instagram
Instagram
Instagram
Instagram
Investigation superpowers
Stop juggling spreadsheets and API keys.
Workbench doesn't just return a search result. It remembers what you found, where it came from, and how it connects to the bigger picture.
01 / Infinite pivots
Zero dead ends.
Move seamlessly from a username to a social profile, from a profile to a website, and from a website to server infrastructure. Keep expanding without losing context.
Email → Accounts
Domain → IPs
Image → Sources
80+
Transforms, included natively.
No expensive plugin marketplace. All premium APIs (OSINT, Breaches, Social Metadata) are wired directly into your subscription. Zero configuration required.
Ask the AI Investigator
Question the evidence in plain language. Ask "How is John tied to this IP address?" and the AI Analyst answers using only data present on your graph, with exact citations.
Raw evidence access
Don't trust black boxes. Inspect the raw JSON payload and exact API provider data behind every single connection on your graph for airtight reporting.
Live Monitoring
Attach a monitor to supported entities and get alerted automatically about meaningful changes, like an email appearing in a new dark web breach.
The Obvious Choice
Enterprise power.
Without the enterprise price.
Why modern teams are ditching clunky, legacy desktop software.
Feature
W
Workbench
Legacy Tools (Maltego, etc.)
Setup & Installation
Time to first graph.
Instant
Zero-install Cloud App
Hours / Days
Desktop Java apps, local configs
Data Transforms
Access to OSINT APIs.
80+ Included Native
No API keys required
Paid Plugins
Each data source sold separately
AI Integration
Automated reasoning.
Built-in AI Analyst
Chat with your graph data
None
Manual node review only
Annual Cost
Total cost of ownership.
$299 - $1188/yr
Includes all API costs
$8,000 - $30,000+
Software License + API Keys
Launch your first investigation in 60 seconds.
Join 70,000+ investigators, security teams and fraud analysts mapping threats in real-time. Stop searching flat data. Start connecting the dots.
No credit card required to start