Infrastructure intelligence,
open by default.

Declarative YAML patching for MaxMind DB files — dry-run diffs and reproducible MMDB overlays you can version and review.

Security intelligence pipeline aggregating hostile IP infrastructure, abuse feeds, anonymizers and attack telemetry into fast runtime lookup databases.

Consensus GeoIP compiler — seeds prefixes from DB-IP Lite, merges location candidates from GeoLite2, IP2Location and more, into a single local IPv4 database.

Developer toolkit for inspecting, validating, diffing and explaining custom MaxMind DB files — understand exactly what's inside any .mmdb.

Production-safe updater for MaxMind DB files — verification, smoke tests, atomic swaps, rollback and Prometheus metrics for reliable GeoIP deployments.

Prefix-preserving IP sanitizer for logs — pseudonymize or anonymize IPv4/IPv6 while keeping subnet-level analytics and SIEM exports useful.

CI-native linter and normalizer for IP blocklists, allow-lists, CIDR feeds, ipset/nftables inputs and network policy datasets — catch bad ranges before they ship.

Open IP enrichment layer adding CIDR, ASN, cloud, CDN, crawler, Tor and VPN-adjacent context — with source provenance and confidence scoring.

Schema-driven CSV ↔ MMDB bridge for custom IP intelligence datasets — turn tabular data into MaxMind DB files and back, on a defined schema.

Daily route-security snapshot analyzer for BGP RIB dumps and RPKI VRP JSON — track ROA coverage, invalids and origin changes over time.

Browser-only Tor relay intelligence: collects public relay data hourly, stores compact snapshots in-repo and renders a dashboard — no database, no backend.

Interactive crawler IP intelligence dashboard covering search, AI and user-triggered fetchers — verify Googlebot, GPTBot and friends against published ranges.

Discovers RFC 8805 geofeeds from public RIR data, downloads and validates every row, adds provenance, checks BGP visibility in bulk, and publishes a clean dataset.

Public ASN infrastructure signal aggregation for VPN overlap, Tor visibility, public-feed exposure and defensive network analytics.