God's Eye View turns your browser into a real-time spatial intelligence command center, rendering thousands of live aircraft, ships, satellites, earthquakes, traffic flows, and public cameras on a photorealistic 3D Earth powered by CesiumJS and Google Photorealistic 3D Tiles. Click any aircraft to see its transponder telemetry from OpenSky and adsb.lol, including route history, altitude, speed, and callsign; track live vessel positions worldwide through AIS beacon data from AISStream; or follow roughly 840 satellites color-coded by class using orbital elements from CelesTrak. A hands-free voice agent powered by the OpenAI Realtime API lets you ask the planet questions in natural language, and the globe annotates your answer directly in 3D space. Toggle FLIR mode for a thermal camera aesthetic, layer in NASA FIRMS wildfire data, switch between Google 3D, Bing aerial, and OpenStreetMap base layers, or tune into a geolocated world radio dial. Public CCTV cameras are projected into 3D city geometry with viewshed cones and direct-manipulation calibration. The cockpit mode provides a pilot-style briefing surface with mission-specific overlays. Entity inspection panels show detailed metadata for every tracked object, and shareable links let you send any scene configuration to a colleague. Ten of the thirteen live data layers work with zero API keys, while the required Google Maps key offers 1,000 free 3D tile sessions per month. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

IRONSIGHT fuses over 50 publicly available intelligence sources into a single real-time dashboard that requires zero API keys and zero configuration. The Live Intel Feed aggregates 20+ RSS news sources with keyword relevance filtering from outlets including Reuters, Al Jazeera, and Kyiv Post. The Telegram OSINT module scrapes 27 channels every 60 seconds with automatic translation from Hebrew, Arabic, and Farsi. The interactive Leaflet Theater Map plots military aircraft positions via ADS-B transponder data, naval vessel locations in the Persian Gulf and Eastern Mediterranean, strike markers extracted from news and Telegram, missile trajectory arcs with range rings, and country-border overlays with a distance measurement tool. A header toggle switches the entire dashboard between Iran/Israel and Russia/Ukraine theaters, re-pointing every panel, map layer, and data feed to the selected conflict. The Israel Alert module streams live Pikud HaOref missile alerts with audio notifications, while the Conflict Monitor categorizes events into strikes, defense, diplomatic, and nuclear. Financial panels track defense contractor stocks, S&P 500, VIX, gold, Bitcoin, Ethereum, energy commodities via Yahoo Finance, and Polymarket prediction odds on conflict outcomes. NASA FIRMS satellite thermal detection flags fire and explosion signatures. The Next.js 16 App Router handles server-side data fetching for RSS and API endpoints while client-side React state management drives real-time polling updates. On RepoCloud, deploy IRONSIGHT on a dedicated VPS with persistent storage, root SSH access, and full control over your intelligence monitoring environment, all under the MIT license.

World Monitor replaces twenty or more browser tabs by fusing geopolitical, military, financial, and infrastructure signals onto a single interactive canvas built with TypeScript, Vite, globe.gl with Three.js for the 3D globe, and deck.gl with MapLibre GL for the flat map. World Monitor ingests live data from 530 upstream sources including ACLED and UCDP for conflict events, OpenSky Network for military and civilian aircraft, AISStream for vessel positions, NASA FIRMS for satellite fire detection, USGS for earthquakes, and FRED, IMF, BIS, and Finnhub for macroeconomic and market data. The Country Instability Index v8 computes real-time stress scores across 31 Tier-1 nations, while the finance radar tracks 29 stock exchanges, commodities, and cryptocurrency with a 7-signal market composite. Six specialized dashboard variants — World, Tech, Finance, Commodity, Energy, and Happy — deploy from a single codebase. AI summarization runs locally through Ollama and LM Studio integration or optionally via Groq and OpenRouter cloud providers, with Transformers.js powering browser-side inference. The platform supports 26 languages with native-language feeds and RTL layout, and provides MCP server integration for AI agent connectivity. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

PRISM consolidates passive reconnaissance, credential leak detection, and network asset mapping into a unified operational dashboard to replace fragmented command-line security tools. Analysts can launch simultaneous multi-source investigations against domains, internet protocol addresses, email mailboxes, phone numbers, and online handles to uncover domain registrations, open network ports, cryptographic certificates, and historical web archives. The platform interrogates threat feeds and leak repositories to expose credential leaks, dark web mirrors, and email routing anomalies with automated SMTP mailbox verification. Cross-platform identity engines crawl thousands of social networks and public registries to correlate aliases, discover leaked commit identities, and trace digital footprints across the web. Discovered assets render into interactive entity relationship graphs alongside geographic internet protocol maps to help investigators visualize infrastructure clusters and ownership links. An automated operational security calculator evaluates exposure vulnerabilities across identity, web, and infrastructure vectors, producing an aggregated risk score with granular hardening recommendations. Scheduled watchlists continually monitor target infrastructure, dispatching webhook notifications to chat channels whenever new subdomains, ports, or credential leaks appear. Investigators can export comprehensive audit dossiers as self-contained HTML files, styled PDF documents, or structured spreadsheets. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

SpiderFoot is an open-source OSINT automation platform, replacing hours of manual reconnaissance with automated intelligence gathering across more than 200 data collection modules. The platform accepts ten distinct target types including IP addresses, domains, hostnames, network subnets, ASNs, email addresses, phone numbers, usernames, person names, and Bitcoin addresses, then feeds them through a publisher-subscriber event bus where each module's findings trigger downstream analysis automatically. SpiderFoot queries Shodan, VirusTotal, HaveIBeenPwned, AlienVault OTX, Censys, crt.sh, WHOIS databases, social media platforms, breach databases, and dozens more sources, with most modules requiring no API keys and many offering free tiers for those that do. The YAML-configurable correlation engine applies 37 pre-defined rules to identify relationships between discovered data points, flagging patterns like shared infrastructure, credential exposure, and domain reputation anomalies. Results export in CSV, JSON, and GEXF graph formats for integration with external analysis tools. TOR integration enables dark web searching, and SpiderFoot can invoke external tools including DNSTwist, Whatweb, Nmap, and CMSeeK for deeper technical assessment. The embedded web server delivers an intuitive dashboard for scan management, data visualization, and result exploration alongside a full command-line interface for scripted automation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Flowsint turns scattered OSINT leads, like a domain, a username, an email, or a crypto wallet, into one interactive graph that you expand with a right click. Drop an entity on the canvas, run an enricher, and the results appear as new nodes with their relationships already drawn in. Over 30 built-in enrichers cover subdomain discovery, WHOIS and historical records, DNS and ASN lookups, IP geolocation, username searches with Maigret and Sherlock, breach checks for emails and phone numbers, Gravatar profiles, website crawling for contacts and tracking codes, and Ethereum wallet transactions and NFT transfers. Chain enrichers into flows so each output feeds the next step, then replay the same flow on any entity of that type. Missing a source? Write an enricher template in YAML, or describe the API in plain language and let the built-in AI draft it, with API keys kept in an encrypted vault instead of config files. Custom entity types, aliases, tags, JSON import and export, and basic role-based access control make it workable for small teams, and an n8n connector pipes findings into alerts and reports. Double-click the canvas to add items fast, or alt-drag between nodes to link them. Every graph stays on your own server, and no default accounts exist. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 400 GitHub stars and growing, Pythia transforms a local LLM into a self-calibrating geopolitical oracle that watches the entire planet and predicts what happens next — no API keys, no cloud, no cost. The Osiris-based Three.js globe frontend streams 30+ concurrent live feeds including GDELT geopolitics, armed conflict events, USGS earthquakes, NWS storm polygons, EONET disasters, FIRMS wildfires, Polymarket crowd odds, cryptocurrency and commodity prices, UNHCR displacement data, WHO disease outbreaks, and WFP food insecurity indicators. The FastAPI backend fuses these heterogeneous sources into a unified world brief, pipes it through Ollama, and generates located predictions across 24-hour, weekly, monthly, and yearly horizons — each carrying a probability, reasoning, and geocoordinates that fly the globe to the event. A council of four specialist swarm agents — Strategist, Economist, Naturalist, and Skeptic — re-scores every forecast, surfacing consensus, dissent, and splits through Brier-weighted voting where historically accurate personas earn louder votes. The engine maintains a persistent ledger graded by an LLM judge against archived world state, producing running Brier scores and calibration charts. Signal rules fire browser notifications and webhooks when conditions match, a morning brief digest summarizes overnight changes, and the agent API at port 8088 delivers the complete world view in a single JSON call compressed to approximately 50 tokens for AI agent consumption. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Social Analyzer scans over 1,000 social media platforms in parallel to discover and correlate user profiles from a single username query, making it the most comprehensive OSINT reconnaissance tool of its kind. Three detection modes cover different accuracy and speed tradeoffs: fast HTTP library checks for rapid sweeps, Selenium WebDriver validation for JavaScript-heavy sites, and a special mode for stubborn edge cases. String analysis generates username permutations and combinations to catch related accounts with slight naming variations. Three interfaces serve different workflows: a Node.js web application on port 9005 with a browser-based GUI, a CLI for scripted batch operations, and Python plus Node.js APIs for embedding into automated investigation pipelines. The QeeqBox OSINT library extracts profile metadata, screenshots, titles, descriptions, and activity patterns, all visualized through Ixora-based force-directed graphs that map relationships between discovered accounts. Tesseract OCR analyzes profile images for additional detection vectors. Search results narrow by country codes, website categories, Alexa ranking thresholds, and confidence levels. Optional Google API and DuckDuckGo API integration adds search engine correlation alongside direct platform queries. Docker deployment bundles Node.js, Firefox ESR, Tesseract, and all dependencies into one container. Trusted by law enforcement and security researchers for digital forensics and identity verification. 23,000+ GitHub stars. AGPL-3.0 licensed.

Every DJI and Litchi flight you have ever logged becomes a searchable dashboard on your own server with Open DroneLog, a free, open-source alternative to DroneLogbook, Airdata UAV, and Flight Reader. Drop in DJI .txt logs, Litchi CSV files, or Airdata CSV exports and units are detected automatically, while deduplication on drone serial, battery serial, and start time lets you re-import a folder without duplicate flights. Each flight opens as a 3D terrain map with satellite, topographic, and OpenStreetMap layers, then replays from 0.5x to 16x speed with live telemetry and an RC joystick overlay. Synchronized charts plot height, speed, battery cell voltages, attitude, RC signal, GPS, and distance to home, with drag-to-zoom. Filters narrow flights by date, drone, battery, controller, duration, altitude, distance, tag, or map area, and automatic tags such as Night Flight and Low Battery arrive with offline reverse-geocoded locations. The overview dashboard adds an activity heatmap, per-drone and per-battery charts, and a cluster map. Battery health bars track cycle counts and capacity history, and maintenance thresholds show as color-coded progress bars. Export flights as CSV, JSON, GPX, or KML, build printable HTML flight reports that save as PDF, or generate a FlyCard image for social media. A sync folder imports new logs automatically, pilot profiles can sit behind passwords, and full-database backup and restore moves data between desktop and Docker. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Commercial flight logbooks frequently lock historical travel records behind annual subscriptions or shut down unexpectedly, whereas AirTrail preserves your complete aviation history on an interactive world map under your own control. Enter a flight number to look up routes automatically or log departures manually with seat numbers, cabin classes, aircraft registrations, timestamps, notes, and custom metadata fields. Switching from another tracker takes seconds: the built-in importer ingests CSV, ICS, and JSON exports from MyFlightradar24, Flighty, App in the Air, OpenFlights, TripIt, JetLog, byAir, and JetLovers. The vector map renders geodesic flight paths, recorded GPS tracks, and airport runway details across customizable basemaps. Detailed statistics dashboards break down total distance flown, time in the air, top airlines, aircraft models, and visited countries. Families and travel groups can share a single instance with role-based permissions, OAuth single sign-on, and read-only public links, while developers automate entries through the versioned REST API or Model Context Protocol server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Transforming scattered spatial files into an interactive data catalog, GeoLens empowers engineering and GIS teams to organize geospatial assets, execute semantic searches, and build interactive 3D maps on self-hosted infrastructure. Users can ingest shapefiles, GeoJSON boundaries, database tables, and Cloud-Optimized GeoTIFF rasters into a centralized inventory with automatic source freshness auditing. Natural language queries evaluate dataset relevance across spatial boundaries and thematic tags, allowing analysts to uncover hydrology networks or zoning footprints without knowing exact layer names. The browser-based composition canvas lets cartographers extrude three-dimensional building footprints, overlay elevation terrain contours, color features by attribute values, and reorder layer hierarchies with drag-and-drop ease. Finished map projects publish immediately as secure shareable web links or responsive embeds for external dashboards. Desktop GIS operators can connect directly from QGIS or ArcGIS through native OGC API Features and STAC endpoints to query live vector tiles and run spatial filters. Teams can export filtered geometries into GeoPackage, FlatGeobuf, GeoParquet, or PMTiles archives to support downstream analysis workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Whether it is a delivery van, a trailer in a storage yard, or a dog on a hike, Traccar is the GPS tracking server that puts it on one live map you host and control. Every position and event lands in your own SQL database. Over 200 protocols covering 2000+ tracker models decode out of the box, so a Teltonika fleet unit and a budget dongle share one device list. Pick a device to see speed, address, ignition, and total distance. Routes replay on a timeline slider, and a ruler tool measures distances. Geofences can be polygons, polylines, or circles, linked to devices or groups, colored as you like, and limited by calendar schedules. Alerts for overspeed, fuel drops, offline devices, alarms, and maintenance arrive by web, email, push, SMS, Telegram, or WhatsApp. Reports cover trips, stops, summaries, charts, events, and positions, with Excel export and scheduled email delivery. Commands go out over the tracker's own connection or by SMS, queued for offline devices. Computed attributes derive ignition or fuel values from raw inputs using expressions. Resellers get admin, manager, user, and read-only roles with device limits, plus white-label branding. Traccar Client lets a smartphone report as a tracker, and Traccar Manager monitors devices from mobile. Teams who want AI assistants to query their devices can add the MCP endpoint, which is optional. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Homeowners and facility operators deploy Viseron to turn standard RTSP and ONVIF security cameras into a self-hosted network video recorder with local AI object detection, face recognition, and license plate reading. Instead of uploading private camera feeds to subscription cloud services, you monitor low-latency WebRTC live streams, scrub through an interactive event timeline, and review 24/7 continuous recordings directly from a responsive web dashboard. You can draw custom detection zones and privacy masks in the visual camera tuning editor to filter out street traffic, while lookback buffering captures footage several seconds before motion or an object triggers an event. Pluggable computer vision pipelines connect your cameras to YOLOv7 Darknet, Google Coral EdgeTPU, CompreFace, dlib, and CodeProject.AI to classify people, vehicles, known faces, and license plates in real time. Tiered storage policies automatically migrate older video segments from fast NVMe drives to high-capacity archival disks based on age and quota rules. Bidirectional MQTT integration and Home Assistant auto-discovery let you toggle cameras on demand, ingest external motion sensors, and dispatch instant snapshot alerts to Telegram or Discord. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

AiSOC delivers an open-source AI Security Operations Center that unifies event ingestion, graph correlation, autonomous triage, and purple-team adversary emulation into a single self-hosted console. Security analysts triage alerts across an interactive Investigation Rail that visualizes six-event attack timelines, pivot-path entity graphs, and recommended containment steps. The underlying LangGraph agentic engine reasons over ingested telemetry, querying MITRE ATT&CK frameworks, CISA Known Exploited Vulnerabilities catalogs, and Shodan intelligence while recording every prompt, tool execution, and evidentiary citation in an immutable Investigation Ledger. Incident responders execute automated containment playbooks, including host network isolation, credential revocation in identity providers, and firewall blocklist updates with human-in-the-loop sign-offs. Threat hunters input plain-English hypotheses into the natural-language hunt workbench to generate and execute ES|QL, SPL, and KQL queries against historical telemetry stores. Platform operators connect over seventy vendor connectors spanning CrowdStrike, SentinelOne, Microsoft Defender, AWS Security Hub, Okta, and Cloudflare to normalize streaming events into Open Cybersecurity Schema Framework standards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Protecting over 10,000 organizations worldwide with 16,000+ GitHub stars, Wazuh delivers enterprise-grade security operations through a fully open-source platform with zero feature gating. The unified XDR and SIEM solution deploys lightweight agents across Linux, Windows, macOS, Solaris, AIX, and HP-UX endpoints that stream security telemetry to a centralized cluster built on OpenSearch for indexing and the Wazuh Dashboard for visualization and management. Core capabilities include real-time file integrity monitoring with inotify-based detection and who-data attribution, automated vulnerability assessment that correlates software inventories against continuously updated CVE databases, Security Configuration Assessment against CIS benchmarks, rootkit detection, and log data analysis with a rules engine supporting over 3,000 built-in detection rules mapped to MITRE ATT&CK tactics and techniques. Wazuh monitors cloud infrastructure at the API level with native modules for AWS, Azure, and Google Cloud, detects container anomalies through Docker engine integration, and ingests third-party telemetry via syslog and REST APIs from sources like VirusTotal, TheHive, YARA, Suricata, and PagerDuty. Pre-built compliance dashboards and reports cover PCI DSS, HIPAA, NIST 800-53, GDPR, and TSC frameworks. Active response capabilities automatically trigger countermeasures including firewall rule updates, account lockouts, and endpoint isolation when threats are detected. The platform scales horizontally with multi-node clustering for high availability. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.