Proprietary Product · N0CTURNE

N0CTURNE

Latest version: V1.0 Preview

Internet asset and entity intelligence workspace

Bring domain, IP, certificate, organization and vulnerability information into one research workflow. Start with a known target, explore its asset profile, compare sources and follow related records.

Open App Personal Account Enterprise Account Back to products

Connect scattered information and keep every search in context

Spend less time switching websites, organizing fields and repeating checks. Focus on confirming assets, interpreting relationships and assessing risk.

independent source modules: 28
knowledge and intelligence tools: 14
types of data rankings: 4

Sources are selected by target type and query path. Available results depend on source coverage, cached data and operating conditions.

Core Capabilities

Connect assets and intelligence around a target

Read registration, DNS, certificates, network services, entity background and security indicators in the same context.

Asset profiles across sources

Gather domain and IP information by target type. Browse registration, DNS, websites, network services and technology details, moving from summaries to individual fields.

Certificate and domain links

Review certificate fingerprints, issuers, validity periods and domain records. Follow certificate and subdomain relationships, or look up related objects already in the local dataset.

Entity intelligence

Combine company search, registration records and legal entity identifiers to map organizations, related companies and possible websites, verify digital footprints and distinguish similarly named entities.

Vulnerability and risk indicators

Use CVE and component leads to read vulnerability descriptions, scores, product context and references. Combine these with service observations to guide further validation.

Knowledge and intelligence tools

Look up weaknesses, scoring vectors, attack techniques, defensive measures and detection rules. Use additional tools for domains, IPs, threat intelligence and passive DNS.

Four types of data rankings

Explore website rankings, top-level domains, favicon clusters and network ASNs to find records worth investigating. Interpret each view within its source and dataset coverage.

Workflow

From a single query to a clear research path

Connect search, profile reading, related records and verification to build a practical foundation for analysis.

01
Start with a known target
Enter a domain, IP, vulnerability ID, certificate fingerprint or company name to use the appropriate search path.
02
Gather relevant sources
Select sources for the target type, reuse existing profiles and cached records, and update the information needed for this query.
03
Read a unified profile
Explore summaries, fact groups, tables and network services. Open field details and compare information across sources.
04
Follow related records
Continue through certificate, domain and entity relationships. Use internal records to confirm ownership and actual impact.

Use Cases

Put intelligence to work

For enterprise security teams, security service providers, analysts and integration partners.

Asset inventory checks

Start from known domains and IPs, add external observations and identify differences and related candidates for asset owners to review.

Entity digital footprints

Read company names, legal entity identifiers and website leads together to support group mapping, partner records and project scoping.

Incident background research

Enrich known incident leads with DNS, certificate, service and threat information. Distinguish direct records, relationship hypotheses and open questions.

Vulnerability triage

Compare vulnerability information with asset importance, actual versions, exposure and patch status to prioritize further validation.

Integration

Extend your existing analysis workflows

Reuse query capabilities through HTTP, standalone CLIs and a Go API facade, with integration scoped to your project.

HTTP interfaces

Access queries, progress and asset profiles to bring target information into existing security platforms and asset analysis workflows.

Standalone CLIs

Call source modules independently and process JSONL results for scripts, controlled batch operations and custom collection workflows.

Go API facade

Use a programmatic starting point for Go integrations, with the required inputs, field contracts and error handling defined for your project.

Use only within a lawful, authorized scope. Related records and risk labels support analysis; verify ownership and vulnerability applicability against sources, observation times and the actual environment.