VoidAccess Maps Dark Web OSINT Into Graphs
VoidAccess is an MIT-licensed, self-hosted platform that automates dark-web investigations across 13 stages, from LLM query refinement and Tor collection to entity extraction, relationship mapping, and structured exports. It targets authorized security researchers who want an open alternative to commercial threat-intelligence platforms. ([GitHub](https://github.com/KatrielMoses/voidaccess), [PyPI](https://pypi.org/project/voidaccess/))
VoidAccess’s strongest idea is treating collection, enrichment, and graph construction as one reproducible workflow rather than a pile of disconnected OSINT scripts. Its breadth is impressive, but operational complexity and third-party API dependence remain meaningful tradeoffs.
- –Combines Tor search, paste sites, code repositories, RSS feeds, and threat-intelligence sources in a single pipeline.
- –Extracts IOCs, wallets, PGP keys, threat actors, vulnerabilities, and infrastructure relationships.
- –Exports intelligence to STIX, MISP, Sigma, CSV, and other formats for downstream security workflows.
- –Supports local CLI use with SQLite as well as Docker-based multi-user deployments with PostgreSQL and a web interface.
- –Results vary with available API keys, LLM providers, Tor access, and source coverage, so teams should validate output before operational use.
DISCOVERED
1h ago
2026-10-20
PUBLISHED
2h ago
2026-10-20
RELEVANCE
AUTHOR
coding-maniac