Privacy-first workflows
Sensible defaults that respect investigator autonomy.
← Back to Work
One operating system for the investigation workflow.
Investigation-focused Linux OS for OSINT, DFIR, secure research, intelligence gathering, and evidence-driven workflows. Two flagship interfaces: Investigation Terminal + Investigation Browser with integrated Tor. Apache 2.0. Built by P4inz. Currently in early implementation — no ISO yet.
Development notice. PURSUE OS is not ready for production use. The project is currently entering implementation and has no stable release or installation image.
The idea
One operating system for the investigation workflow.
Instead of assembling a large collection of unrelated tools, PURSUE aims to provide a coherent environment where investigators can research, collect, analyze, connect, preserve, and report information from one system.
Two flagship interfaces sit alongside the broader investigation platform:
- Investigation Terminal — a purpose-built command-line environment for investigators.
- Investigation Browser — secure, configurable browsing and research workflows with integrated Tor capabilities.
Core areas
What it's being designed to support.
OSINT + intelligence gatheringSecure investigation browsingIntegrated Tor workflowsInvestigation-focused terminalCase managementEvidence storage + provenanceInvestigation graphsTimelines + orgDFIR workflowsGEOINTInfrastructure intelligenceCTI workflowsMedia analysisReporting + exportModular investigation toolsPlugin extensibilityOptional local AI
AI policy
Assistant, not authority.
AI in PURSUE may help with: organizing information, summarizing investigator-selected material, explaining technical output, assisting terminal workflows, and helping navigate supported tasks.
AI must not silently manipulate evidence or replace the investigator's judgment. The source remains the source of truth. AI functionality is optional and configurable.
Privacy + security
Integrated Tor
First-class Tor capabilities across the browser and research tooling.
Evidence integrity
Provenance and traceability built into the case system.
Minimal telemetry
Strong defaults, user-controlled environment. Nothing hidden.
Development status
The foundation is ready. The build begins now.
PlanningComplete
Repository foundationComplete
Architecture foundationEstablished
ImplementationStarting
Stable releaseNot available
Apache 2.0. Third-party software distributed with future releases may use separate licenses. An independent project created and maintained by P4inz.
Not investigation advice. This page describes an in-progress operating system designed to support OSINT / DFIR / evidence-collection workflows. It is not a substitute for training or professional standards in those fields. Verify capabilities and legal fitness for your jurisdiction against the source repository before relying on any component for real casework.