Skip to Content
Open source Investigation Platformv0.4.132

Every leakleaves a trail.

Classifyre scans the systems you already run and detects secrets, PII, and the signals you define — then works them like a detective, with an AI autopilot doing the legwork between scans.

Download the appTry the live demo
The Classifyre investigator — a detective cat on a green badge
Case open
Download · free · no signup

Install it on your machine

Everything — sources, findings, cases — stays on your machine.

Download Classifyre

macOS · Windows · Linux — free, no signup

All builds on GitHub →
Helm chart · scales to any size

Or run it on Kubernetes

The same core as a Helm chart, with ephemeral scan workers that scale to zero between runs and fan out as far as your estate goes. Your cluster, your data.

helm install classifyre \
  oci://registry-1.docker.io/classifyre/classifyre-core \
  --version 0.4.132
Helm chart docs

Findings are evidence.
Cases are the product.

Most scanners stop at a findings table and wish you luck. Classifyre keeps going — every finding is evidence in an investigation somebody can actually work.

How it works
The pipeline
AUTOPILOT WORKS THIS SIDESOURCESdatabases · files · saasASSETSitems + metadataDETECTORSbuilt-in + your ownFINDINGSranked by importanceINQUIRIESstanding questionsFINGERPRINTSone value, many systemsCASESevidence + hypotheses
A case, assembling itselfSwipe →
ANALYST LINKFINGERPRINT MATCH · SAME KEY, TWO SYSTEMSCASE #42 · OPENCredential exposureHYPOTHESIS 1Leak via CI logsHYPOTHESIS 2Stale S3 exportSECPIIIBNSECBY AUTOPILOT
Hypotheses pinned to severity-rated evidence, a fingerprint match, and autopilot contributions — all attributed.

  • Inquiries

    Standing questions that keep matching new evidence, scan after scan.

  • Fingerprints

    The same value surfacing in two systems, connected by identity.

  • Ranked evidence

    Importance from 0 to 1, with written reasons you can argue with.

    How ranking works →

  • Cases

    Evidence, competing hypotheses, an owner, and a full audit trail.

Scan the systems you already own

Operational databases, lakehouses, collaboration tools, analytics assets, and public content, all feeding one evidence stream.

Sources Documentation
Custom Connector
Sandbox
WordPress
Slack
S3-Compatible Storage
Azure Blob Storage
Google Cloud Storage
PostgreSQL
MySQL
Microsoft SQL Server
Oracle
Apache Hive
Databricks
Snowflake
MongoDB
Neo4j
Power BI
Tableau
Confluence
Jira
Jira Service Management
SQLite
Notion
Email
YouTube
Reddit
Delta Lake
Apache Iceberg
Apache Kafka
Elasticsearch
OpenSearch
Meilisearch
Mounted Folder
Microsoft 365
Google Workspace
Dropbox
Hugging Face
Git Repository
Custom Connector
Sandbox
WordPress
Slack
S3-Compatible Storage
Azure Blob Storage
Google Cloud Storage
PostgreSQL
MySQL
Microsoft SQL Server
Oracle
Apache Hive
Databricks
Snowflake
MongoDB
Neo4j
Power BI
Tableau
Confluence
Jira
Jira Service Management
SQLite
Notion
Email
YouTube
Reddit
Delta Lake
Apache Iceberg
Apache Kafka
Elasticsearch
OpenSearch
Meilisearch
Mounted Folder
Microsoft 365
Google Workspace
Dropbox
Hugging Face
Git Repository
Source Catalog
Pick connector by category
38 Matches

Databases

Operational and document stores for row and collection scans.

9 Sources
Elasticsearch
Discover Elasticsearch indices and sample documents for detection.
Meilisearch
Discover Meilisearch indexes and sample documents for detection.
Microsoft SQL Server
Scan Microsoft SQL Server tables and views.
MongoDB
Scan MongoDB collections for Atlas or on-prem deployments.
MySQL
Scan MySQL tables with detector-ready row sampling.
OpenSearch
Discover OpenSearch indices and sample documents for detection.
Oracle
Scan Oracle service objects with optional view lineage.
PostgreSQL
Scan PostgreSQL tables with detector-ready row sampling.
SQLite
Scan tables in a local SQLite database file with no server required.

Graph Databases

Graph-native stores with node and relationship traversal.

1 Sources
Neo4j
Scan Neo4j node labels and relationship structure for graph data.

Warehouse & Lakehouse

Analytical compute platforms and catalog-first ingestion.

11 Sources
Apache Hive
Scan Hive tables and views across selected databases.
Apache Iceberg
Scan Apache Iceberg tables in S3-compatible storage — schema, snapshots, and row sampling, no Spark required.
Azure Blob Storage
Scan blobs from Azure Storage containers with key, SAS, or managed identity auth.
Databricks
Scan Unity Catalog assets, notebooks, and pipelines.
Delta Lake
Scan Delta Lake tables in S3-compatible storage — schema, versions, and row sampling, no Spark required.
Google Cloud Storage
Scan objects from Google Cloud Storage buckets with ADC or service account credentials.
Hugging Face
Stream files from a Hugging Face dataset, model, or space repository without cloning it.
Mounted Folder
Scan a folder of documents, spreadsheets and images — on this computer, or mounted into the cluster.
S3-Compatible Storage
Scan objects from AWS S3, MinIO, Cloudflare R2, Backblaze B2, and other S3-compatible endpoints.
Sandbox
Upload files directly and scan them through the standard source lifecycle.
Snowflake
Scan Snowflake tables and views with flexible authentication.

Code Repositories

Version-controlled source, configuration, and documentation.

1 Sources
Git Repository
Scan the source, configuration, and documents on one branch of any Git repository — GitHub, GitLab, Bitbucket, Azure DevOps, or self-hosted.

Streaming

Event streams and message brokers sampled for content.

1 Sources
Apache Kafka
Discover Kafka topics and sample messages for detection.

Web & UGC

Public-facing websites and user-generated content.

1 Sources
WordPress
Connect to WordPress to scan posts and pages.

Social Media

Social and video platforms with public posts and transcripts.

2 Sources
Reddit
Scan subreddits — posts, threaded comments, attached media, and linked video transcripts. Always read-only.
YouTube
Scan YouTube channels and videos, fetching metadata and transcripts for detection.

Collaboration

Team communication and workspace activity streams.

9 Sources
Confluence
Scan Confluence spaces, pages, comments, and attachments.
Dropbox
Scan documents, spreadsheets, images, and Paper docs stored in a Dropbox account.
Email
Scan IMAP mailboxes (Gmail, Outlook/M365, and more) for messages and attachments.
Google Workspace
Scan Google Drive files, Docs, Sheets, and Slides across My Drive and shared drives.
Jira
Scan Jira issues, comments, links, and attachments.
Jira Service Management
Scan Jira Service Management requests, comments, and attachments.
Microsoft 365
Scan SharePoint sites, OneDrive files, and Teams files via Microsoft Graph API.
Notion
Scan Notion pages, data sources, comments, and file attachments.
Slack
Connect to Slack to scan channel messages.

Analytics & BI

Dashboards, reports, and business intelligence assets.

2 Sources
Power BI
Scan Power BI workspaces, datasets, reports, and dashboards.
Tableau
Scan Tableau workbooks and datasources.

Other

Sources discovered in schema that have not been categorized yet.

1 Sources
Custom Connector
Write the connector yourself in a Python notebook, for a system nothing else covers.

Open your first case tonight.

Download it, point it at a system you already run, and see what the investigator finds. Everything you build carries over when you go remote with Helm.

Download Classifyre

macOS · Windows · Linux — free, no signup

Try the live demo