Swarm
A reconnaissance platform that connects discovery, enrichment, and continuous monitoring in one workflow.
The idea
Reconnaissance involves many moving parts: finding domains, identifying live services, discovering endpoints, and noticing when something changes. Swarm brings those stages into an end-to-end reconnaissance platform.
What it brings together
- Passive and active subdomain discovery.
- HTTP probing and endpoint discovery.
- Certificate Transparency monitoring.
- Cloud reconnaissance.
- Continuous monitoring of HTTP services.
The platform integrates research sources and workflows including Wayback/CDX, VirusTotal, URLScan, search engines, and Apify.
Why connect the workflow?
Discovery is more useful when its results can feed the next stage. An inventory provides context for enrichment, and ongoing monitoring helps surface changes worth investigating.
Swarm is a place to bring that context together for security research.
Project notes
This page is an overview of the project. Architecture notes, implementation decisions, and individual workflow deep dives can be published here as the documentation grows.
No public download or repository is currently linked on this site.