Agentic Orchestration
Designed to decompose investigative objectives, select specialised modules, coordinate tools and models, collect results and reconcile conflicting information.
ARGUS7by OSINTLAB360
ARGUS7 CORE v1.0 · PLATFORM IN DEVELOPMENT
Agentic Investigation Intelligence
From fragmented data to traceable intelligence. ARGUS7 coordinates specialised investigative modules, AI models, data sources and evidence workflows to transform complex information into structured, traceable intelligence.
Designed and developed in Italy. Built for Europe.
OSINT · DIGITAL FORENSICS · CYBER INTELLIGENCE · FRAUD · ENTITY RESOLUTION · GRAPH INTELLIGENCE · AI-ASSISTED INVESTIGATION
PUBLIC SOURCE DATAARGUS7 DEMONSTRATION ANALYSISSYNTHETIC DEMONSTRATION DATA
LIVE WEBGL / ARGUS7 CORE v1.0STAGE 01 · COMPACT ARCHITECTURE
SOURCE DATAPROCESSCORRELATIONEVIDENCEHUMAN REVIEW
Active phase: INGEST. Active animation stage: COMPACT ARCHITECTURE.
TRACEABLEEVIDENCE-DRIVENSOURCE-BACKEDAUDITABLEHUMAN-REVIEWED
01 / WHAT ARGUS7 SOLVES
The problem is not lack of data. It is fragmentation.
Modern investigations distribute information across websites, APIs, databases, documents, devices, threat-intelligence feeds and specialised tools. Collecting more information is not enough: analysts must determine what is relevant, how information is connected, what can be verified and which evidence supports each conclusion. ARGUS7 is being designed to coordinate this process through specialised modules, agentic orchestration, evidence provenance and human-controlled AI.
Evidence-Native Architecture
Sources, collected data, derived information, evidence, findings and reports remain conceptually separated and traceable. MEMORY ≠ EVIDENCE.
Specialised Modules
Different investigative domains use specialised modules, workflows, tools and policy-driven model routing.
Sovereign / Local-First AI
Sensitive workloads can remain under organisational control when required, with external sources accessed through governed connectors.
Human-Controlled Intelligence
AI assists collection, correlation, analysis and hypothesis generation; critical findings and decisions remain subject to human review.
02 / HOW ARGUS7 WORKS
Every step explains what enters, what changes and what supports the finding.
The visualization uses the twelve layers of the architecture baseline. No element represents random activity or fake telemetry.
01
Input LayerRicezione, classificazione e normalizzazione
PROTOTYPE↓02Orchestration LayerCervello centrale e controllo dell’esecuzione
IN DEVELOPMENT↓03Module Routing LayerInstradamento operativo
IN DEVELOPMENT↓04Module LayerAnalisi specialistica multi-modulo
IN DEVELOPMENT↓05Memory LayerMemoria a lungo termine separata per caso
TARGET ARCHITECTURE↓06RAG LayerRecupero contestuale governato
TARGET ARCHITECTURE↓07Graph Intelligence LayerReti, relazioni e pattern
PROTOTYPE↓08Local LLM LayerElaborazione AI locale e model routing
PROTOTYPE↓09Tool / API LayerStrumenti e integrazioni mediate
TARGET ARCHITECTURE↓10Evidence LayerIntegrità, lineage e catena di custodia
IN DEVELOPMENT↓11Report LayerCondivisione controllata
TARGET ARCHITECTURE↓12Governance & SecurityControllo trasversale dell’intera pipeline
ARCHITECTURAL SPECIFICATIONGOVERNANCE & SECURITY
Cross-cutting control: role, scope, privacy, audit, integrity and human approval.
OPEN ARCHITECTURE EXPLORER →03 / MODULES
Specialised intelligence. One coordinated architecture.
ARGUS7 is built around specialised investigative domains that cooperate through a common orchestration, evidence and governance architecture.
01IN DEVELOPMENT
MODULE / INVESTIGATIONSInvestigations
Orchestrare domanda, timeline, pivot, contraddizioni, ipotesi e finding in una ricostruzione investigativa verificabile.
- WORKBENCH
- CASE INVESTIGATION GRAPH + TIMELINE
- PAIR
- OBSERVATION ↔ VALIDATION
02RESEARCH
MODULE / VISIONVision
Esaminare media e documenti preservando originale, metadati, regioni, trasformazioni e provenienza.
- WORKBENCH
- MEDIA FORENSIC WORKBENCH
- PAIR
- MEDIA ↔ FORENSIC ANALYSIS
03PROTOTYPE
MODULE / FRAUDFraud
Correlare identità, email, domini, account, transazioni ed eventi per spiegare un percorso di frode.
- WORKBENCH
- FRAUD RELATIONSHIP WORKBENCH
- PAIR
- ADVERSARY ACTIVITY ↔ DEFENSIVE RESPONSE
04IN DEVELOPMENT
MODULE / INTELIntel
Costruire un intelligence picture che separi attore, campagna, infrastruttura, IOC, TTP, target e fonte.
- WORKBENCH
- INTELLIGENCE PICTURE
- PAIR
- ADVERSARY ACTIVITY ↔ DEFENSIVE RESPONSE
05PROTOTYPE
MODULE / CYBERCyber
Collegare dominio, IP, ASN, host, servizio, software, vulnerabilità, artefatto e IOC senza confondere esposizione e compromissione.
- WORKBENCH
- CYBER INFRASTRUCTURE & ATTACK PATH
- PAIR
- ADVERSARY ACTIVITY ↔ DEFENSIVE RESPONSE
06PROTOTYPE
MODULE / FORENSICSForensics
Preservare master evidence, working copy, hash, artefatti, timeline, parent/child e chain of custody.
- WORKBENCH
- DIGITAL EVIDENCE WORKBENCH
- PAIR
- EVIDENCE ↔ INTERPRETATION
07PROTOTYPE
MODULE / GRAPHGraph
Rendere interrogabili entità e relazioni mostrando tipo di arco, evidenza, confidenza, stato e tempo.
- WORKBENCH
- ENTITY GRAPH 3D
- PAIR
- RELATIONSHIP ↔ EVIDENCE
08TARGET ARCHITECTURE
MODULE / PROFILERProfiler
Consolidare identificatori, alias, relazioni, timeline, infrastruttura, coverage e contraddizioni di un’entità.
- WORKBENCH
- ENTITY PROFILE
- PAIR
- KNOWN FACT ↔ ASSESSMENT
09PROTOTYPE
MODULE / RESEARCHResearch
Costruire cronologie e citation network distinguendo fonti primarie, secondarie, conflitti e corroborazioni.
- WORKBENCH
- RESEARCH & SOURCE ANALYSIS
- PAIR
- SOURCE ↔ CORROBORATION
10TARGET ARCHITECTURE
MODULE / STRATEGYStrategy
Trasformare finding, rischio, impatto, confidenza e vincoli in azioni prioritarie, alternative e rischio residuo.
- WORKBENCH
- DECISION SUPPORT
- PAIR
- RISK ↔ CONTROL
04 / SOLUTION CONFIGURATIONS
Modular by design
ARGUS7 is being designed as a modular platform rather than a monolithic application. The same core architecture can support specialised configurations for different investigative environments.
ARGUS7 Investigations
Designed for OSINT analysts, corporate investigators and professional investigation teams.
CAN COMBINEInvestigations + Research + Profiler + Graph IntelligenceARGUS7 Cyber Intelligence
Designed for threat intelligence, SOC, CSIRT, cybersecurity and incident-response environments.
CAN COMBINECyber + Intel + Research + Graph + EvidenceARGUS7 Digital Forensics
Designed for DFIR specialists, forensic analysts and technical investigation teams.
CAN COMBINEForensics + Investigations + Vision + EvidenceARGUS7 Fraud Intelligence
Designed for fraud investigation, financial intelligence, fintech and compliance environments.
CAN COMBINEFraud + Investigations + Graph + Profiler + StrategyARGUS7 Legal & Litigation Support
Designed to support technical investigations, evidence organisation, document analysis and litigation-support workflows. It does not provide legal advice.
CAN COMBINEForensics + Investigations + Research + Evidence + ReportingARGUS7 Enterprise
Target full-platform deployment with model routing, auditing, access control and integrations.
CAN COMBINEModules + Orchestration + Evidence + Graph + RAG + GovernanceFinal commercial packaging and licensing are still under development.
05 / WHO ARGUS7 IS FOR
Designed for professional investigative environments.
- OSINT and intelligence analysts
- Cybersecurity and threat-intelligence teams
- Digital-forensics and DFIR professionals
- Fraud and financial-investigation teams
- Corporate investigators
- Litigation-support and technical-consulting teams
- Security and compliance organisations
- Enterprises requiring controlled investigative AI environments
Deployment & Data Control
ARGUS7 is being architected for environments where privacy, confidentiality, auditability and control over sensitive data are critical. The target architecture supports local, private and hybrid strategies, using local AI models for sensitive workloads and governed connectors for external sources, APIs and intelligence services.
06 / ITALIAN-DEVELOPED · EUROPEAN BY DESIGN
Built in Italy. Designed for Europe.
ARGUS7 is an Italian-developed technology project with a European product direction, built around data control, operational sovereignty, auditability, evidence provenance, human oversight, modular deployment and transparent use of artificial intelligence.
The goal is not technological isolation. The goal is technological control.07 / CASE LAB
A small set of cases, analyzed across multiple modules.
The Case Lab uses public primary sources and benchmark datasets. Facts, ARGUS7 analysis and synthetic data remain visually distinct.
CASE 01INTERACTIVE DEMONSTRATION
REAL PUBLIC CYBERSECURITY CASE
MOVEit Transfer / CL0P
CASE-CY-2023-001- 2 SOURCE OBJECTS
- 5 EVIDENCE OBJECTS
- 5 ENTITIES
- 4 RELATIONSHIPS
CASE 02INTERACTIVE DEMONSTRATION
REAL PUBLIC THREAT INTELLIGENCE CASE
Volt Typhoon
CASE-TI-2024-002- 2 SOURCE OBJECTS
- 5 EVIDENCE OBJECTS
- 6 ENTITIES
- 5 RELATIONSHIPS
CASE 03INTERACTIVE DEMONSTRATION
REAL SOFTWARE SUPPLY-CHAIN CASE
XZ Utils / CVE-2024-3094
CASE-SC-2024-003- 2 SOURCE OBJECTS
- 5 EVIDENCE OBJECTS
- 5 ENTITIES
- 4 RELATIONSHIPS
CASE 04FORENSIC BENCHMARK
FORENSIC BENCHMARK / DOCUMENTED SIMULATED EVIDENCE
NIST Forensic Lab
CASE-DF-2026-004- 2 SOURCE OBJECTS
- 4 EVIDENCE OBJECTS
- 5 ENTITIES
- 4 RELATIONSHIPS
CASE 05INTERACTIVE DEMONSTRATION
SYNTHETIC INVESTIGATION BASED ON REAL FBI-DOCUMENTED PATTERNS
FBI IC3 BEC Lab
CASE-FR-2026-005- 2 SOURCE OBJECTS
- 5 EVIDENCE OBJECTS
- 6 ENTITIES
- 4 RELATIONSHIPS
08 / EVIDENCE & PROVENANCE
A finding is only as strong as its provenance.
Every data point must answer a simple question: where did it come from, how was it transformed and who validated it?
01SOURCE→
02COLLECTION→
03NORMALIZATION→
04ANALYSIS→
05DERIVED DATA→
06EVIDENCE→
07FINDING→
08REPORT
MEMORY ≠ EVIDENCE
RAG-retrieved content must be verified, attributed and registered before it becomes evidence.
FINDING → EVIDENCE
Every conclusion keeps direct links to supporting objects and contradictory evidence.
EVIDENCE → SOURCE
Every evidence object shows publisher, title, date, observed data, collection, transformation and status.
A / ARGUS7 WEBSITE
A verifiable public presentation.
Architecture, principles, sources, actual development status and documented cases.
B / INTERACTIVE DEMONSTRATION
A simulated investigative workspace.
Visualizes target capabilities without falsely claiming they are implemented.
ARGUS7 DEVELOPMENT STATUS
Transparency before commercial claims.
Architecture, prototypes, development, planning and research are declared separately. No fabricated completion percentage.
NEXT DEVELOPMENT PHASE
Help build the next phase of ARGUS7
ARGUS7 has reached a stage where engineering capacity, infrastructure, real-world validation and strategic capital can accelerate its development. We are interested in conversations with design partners, professional investigators, cybersecurity organisations, forensic specialists, research and technology partners, and strategic investors.
SPECIALIZEDTRACEABLESOVEREIGNHUMAN-CONTROLLED