PROMETHEUS
THE ALL-SEEING EYE
FEATURES MODULES DOWNLOAD GITHUB THE SUITE
OSINT • THREAT INTEL • RECON

Search any IP, domain, file hash, or URL across 7+ threat intelligence APIs simultaneously. VirusTotal. AbuseIPDB. Shodan. One search. Total visibility.

SEARCH HISTORY
8.8.8.8
evil.example.com
a1b2c3d4e5f6...
192.168.1.1
MODULES
7 Active
RESULTS — 8.8.8.8
VIRUSTOTAL CLEAN
0 / 94 engines flagged
Last analyzed: 2h ago
ABUSEIPDB 2% CONF.
Confidence: 2% • 14 reports
ISP: Google LLC
SHODAN INFO
Ports: 53, 443 • US
Org: Google • dns.google
ALIENVAULT OTX 23 PULSES
Found in 23 threat pulses
Categories: dns, infrastructure
All modules operational
7/7 MODULES ACTIVE • SCAN COMPLETE • 1.2s

The Eye Sees All

Six core capabilities. Every indicator of compromise, every threat signal, every piece of intelligence gathered, correlated, and displayed in real time.

UNIFIED SEARCH
Paste any IP address, domain name, file hash, or URL. Prometheus identifies the indicator type and routes it to every compatible module automatically.
7+ INTEL SOURCES
VirusTotal, AbuseIPDB, Shodan, MalwareBazaar, ThreatFox, AlienVault OTX, and more. Each source provides a unique lens on the threat landscape.
REAL-TIME PARALLEL SCANNING
All modules fire simultaneously. No sequential waiting. Results stream in as each API responds, giving you intelligence in seconds, not minutes.
ZERO CORS ISSUES
All API calls are routed through Electron's main process, bypassing browser CORS restrictions entirely. No proxy servers. No workarounds. Just direct access.
THREAT SCORING
Visual threat level badges aggregate data from all sources. Clean, suspicious, malicious — see the verdict at a glance with color-coded confidence scores.
LOCAL & PRIVATE
All data stays on your machine. No cloud. No telemetry. No tracking. Your API keys are stored locally, and your search history never leaves your device.

Intelligence Sources

Each module connects to a free threat intelligence API. Together they provide comprehensive coverage across every indicator type.

VT
VirusTotal
90+ antivirus engines. File hash lookups, IP/domain reputation, URL scanning. The industry standard for malware detection.
IP Domain Hash URL
AB
AbuseIPDB
Community-driven IP abuse reports. Confidence scoring, ISP data, geographic location. Tracks malicious IPs across the internet.
IP Abuse Reports
SH
Shodan
Internet-wide port scanning and service detection. Open ports, banners, SSL certs, vulnerabilities. See what's exposed.
IP Ports Banners
MB
MalwareBazaar
Malware sample database by abuse.ch. Hash lookups, malware family identification, YARA rule matching, sample metadata.
Hash Malware
TF
ThreatFox
IOC sharing platform by abuse.ch. Tracks malware C2 infrastructure, botnet controllers, and threat actor campaigns in real time.
IP Domain IOC
OTX
AlienVault OTX
Open Threat Exchange. Community-sourced threat pulses, IP reputation, domain analysis, WHOIS data, and passive DNS records.
IP Domain Hash Pulses

Get PROMETHEUS

Free. Open source. See everything.

v1.0.0 • Windows 10/11 (x64)
System Requirements
Windows 10+ (64-bit) • 4GB RAM • Internet connection • API keys (free tier)
View on GitHub