# Ubikron

> Ubikron is OSINT investigation software that runs in Chrome, backed by a server. It captures every web page an investigator visits (text, screenshot, timestamp), extracts entities, and gives the investigator a graph, one-click enrichments and a report to connect what they found. The investigator does the finding; Ubikron makes sure nothing is lost and every step can be shown.

Made by Vortimo (Pty) Ltd, Pretoria. Three people, no outside investors. Founded by Roelof Temmingh, who previously founded Maltego.

## What it does

- Capture: every page visited is recorded as text and a screenshot, with the time. Pages the user marks as important are also saved in full as MHTML or PDF. SHA-256 hashes are taken of PDF and MHTML downloads and of every clipping, not of every page. Full-page archiving is on request, not automatic.
- Visual history: the research trail as a grid of screenshots, in order.
- Search: full-text search over every page, screenshot (OCR) and clipping in a project.
- Entity extraction: email addresses, phone numbers, domains, IP addresses, cryptocurrency addresses, people and organizations. Entities are strongly typed.
- Clippings and report: clip parts of pages, annotate them, drag them into a free-form report. Every clipping keeps its source.
- Graph: built by hand, from enrichment results, or by AI. Typed nodes (person, email, phone, domain, company, address) plus user-defined custom entity types.
- Enrichments: about 20 at launch, including Epieos, WhoisXMLAPI, Dehashed, OSINT Industries, VirusTotal, URLScan and OpenCorporates. Select an entity, press +, the result lands on the graph and stays in the case.
- Resuming: a case can be picked up months later with pages, saves, notes, graph and report intact.
- Site-agnostic: Ubikron does not scrape specific platforms, so it keeps working when sites change their layout.
- Opsec: one-click recording toggle, always-visible widget, default blocklist (Gmail, Google Docs and similar), custom do-not-record lists, deletion of accidental captures.

## AI (optional)

Ubikron is fully usable without AI, and AI is off unless the user turns it on. When used:
- AI descriptions of clippings.
- Questions about the investigation, answered from the project's own pages, notes and graph.
- Browsing inside Claude for Chrome: every page the AI visits is captured in Ubikron and every enrichment it runs is logged, so its work can be audited.
- An MCP server for Ubikron and Mimic that exposes all of Ubikron's functionality, so an agent (Claude Code, Codex, Gemini and others) can drive it the way a person does: create and switch projects, browse and read pages, full-text search captured history and screenshot OCR, tag entities, create and edit the graph (add, link, retype, recolor, delete, batch updates), list and run Mimic enrichments and read their results, and read the user's report and write its own in a separate section. Everything an agent does is recorded like human activity. Graph nodes an AI creates stay grey, and its links dotted, until the investigator approves them by setting a color: AI additions are visibly unapproved by design.
- AI-written reports live in a separate section; the investigator chooses what goes into their own report.

MCP client config: https://ubikron.com/ubikron-mcp.json
Investigator skill for agents: https://ubikron.com/ubikron-skill.md

## Pricing

- Client license: $350 per year, or $100 per quarter, per client. Bought at https://ubikron.com/pricing or from inside the extension, with the email registered in the extension. There is no license key: the license is tied to that email address, which is also the login. No free tier. Test licenses on request.
- Private servers (self-hosted): Free (1 user, 2 projects, for evaluation), Independent $9,000 per year (5 users, 30 projects), Professional $54,000 per year (unlimited users and projects). Fixed price, no metering. PDF quotes at https://ubikron.com/pricing
- Discounts for education, trainers and non-profits: on request.

## Private servers

- Docker Compose stack of 10 containers: ubikron, mimic, elasticsearch, logstash, postgresql, seaweedfs (file storage), rabbitmq, webserver, js-tools and wud (update checks).
- Install options: local (same machine as the extension), dedicated server (installer provisions a DNS4SSL.net name and real TLS certificate), or manual with your own DNS and PKI.
- Admin interface: users and roles, license keys, update management (checks Docker Hub hourly), performance metrics. No phone-home, no subscription checks.
- Mimic ships with every paid server. It is the integration layer that brings any API into Ubikron as an enrichment: public OSINT providers, or internal data sources on the organization's own network. A new API can be connected in about 20 minutes. Real provider keys stay in Mimic; team members get their own scoped keys with call limits, so keys are only distributed inside the team. Comparable to Maltego's Transform Distribution Server (TDS), built for Ubikron.
- When the extension is connected to a private server, its interface turns green.
- Install guide: https://ubikron.com/servers/install

## Data and trust

- The public server is hosted in the United States on Akamai. The three staff can technically access data on it and state that they don't look. For sensitive work they recommend a private server, where only the customer has access.
- ubikron.com sets no cookies. Analytics are anonymous page counts via Plausible.

## Who it's for

Law enforcement, private intelligence firms, investigative journalists, threat intelligence analysts. Also due diligence, fraud and security researchers. Not intended for people who want a tool to find things automatically, people who need it free, or teams mapping graphs with tens of thousands of nodes (Maltego fits that better).

## History

- 2017: talk on a browser that navigates data rather than websites.
- 2019 to 2021: Vortimo, a deep but heavy investigation platform.
- 2022 to 2023: Skylight / OSINT-Tool, a lightweight extension.
- August 2023 to now: Ubikron. Ubikron Pro (graph, enrichments, Mimic, MCP) launches November 2026.
Full story: https://vortimo.com

## Links

- Website: https://ubikron.com
- How it works: https://ubikron.com/product
- AI: https://ubikron.com/ai
- Private servers: https://ubikron.com/servers
- Pricing: https://ubikron.com/pricing
- Tutorials: https://ubikron.com/learn
- Is it for you?: https://ubikron.com/not-for-you
- Chrome Web Store: https://chromewebstore.google.com/detail/ubikron/edfkaefjonbohokoldemepfolefiplgd
- YouTube: https://www.youtube.com/@ubikron
- LinkedIn: https://www.linkedin.com/company/ubikron/
- Contact: https://ubikron.com/contact