Binalyze Outpost! - Browser-native CTI, Investigation, Detection & Response

Scan pages for IOCs (IPs, domains, hashes, URLs), enrich with 20+ CTI sources. Shield blocks ClickFix. Binalyze AIR integration.

Scan web pages for IOCs (IPs, domains, hashes, URLs) and enrich them with 20+ cyber threat intelligence sources. Shield blocks ClickFix (pastejacking) clipboard attacks. Export IOCs to Binalyze AIR for enterprise forensic workflows. Binalyze Outpost turns any web page into an instant cyber threat intelligence workspace. Scan the current page for Indicators of Compromise (IOCs), highlight them in-place, quickly review what matters, and enrich observables with trusted external intel — without leaving your investigation flow. Key features * IOC discovery on any page: Detect IPv4/IPv6, domains, URLs, and file hashes (MD5/SHA1/SHA256). * Investigation Sidepanel: A native browser sidepanel shows totals, lets you search/filter, group by type, and select observables. * Pin & Inspect: Hover or pin observables to keep key items visible while you investigate the page. * One-click rescan + Auto-Scan: Manually rescan anytime, or enable Auto-Scan and control exactly where it runs with include/exclude URL patterns. * Per-page control: Right-click a page to enable/disable Outpost for the current site (updates your include/exclude patterns automatically). * 20+ threat intelligence integrations: Connect providers like VirusTotal, Shodan, Cloudflare Radar, AbuseIPDB, NVD/NIST, and more — add your API keys and choose which observable types they apply to. * Export & share results: Export provider results as PNG, copy raw JSON, or convert to Markdown. * Shield — ClickFix protection: Automatically blocks pastejacking attacks by intercepting hidden clipboard writes behind fake CAPTCHA, "verify you are human", and document-viewer lures — before a malicious command reaches your terminal. On by default; no account required. * Binalyze AIR integration: Connect your AIR Console with an API token and run forensic workflows from the browser sidepanel — export IOCs to cases, browse remote file systems, inspect processes, collect and download files, and run InterACT commands on connected endpoints. * Keyboard shortcut: Double-tap O (or Ctrl+Shift+O) to instantly toggle the investigation panel. * Multi-language support: Full UI in English, Turkish, German, Spanish, and French. * Incident Variables: Create variables for incident reporting, then set them directly from highlighted text via the context menu.