WHY SWAMPCAT EXISTS
Follow a question. Leave room for scrutiny.
Swampcat is an early infrastructure-investigation project from Icarus Online, an independent, founder-led studio for research, software and making.
A small project with a practical question.
Can public infrastructure evidence help a practitioner find a useful connection and explain why it matters? We’re building a workspace to test that question with real investigations.
A certificate can name another service. A public key can connect two certificates. DNS can show a provider dependency. Those observations are starting points for judgment.
Keep the record and the interpretation distinct.
Sources can be incomplete, historical or unavailable. Missing evidence does not prove an asset is absent. A certificate record does not establish current deployment.
Shared certificates, keys, addresses and providers can support a lead; they do not establish common ownership. Look for alternatives and counterevidence.
Made with agents. Accountable to people.
Agents help us build and test. People set the question, authorize the scope and judge the results. We distinguish a working prototype from evidence that it helps someone.
For this alpha, paid AI, active verification and monitoring are outside the trial. The work is bounded passive discovery, stored evidence and your own assessment.
Meet Icarus Online ↗Help us find what’s useful.
We’re looking for two security or OSINT practitioners who can bring an authorized domain and a question they already care about.