Global Threat Intercept · Real-time GEOINT

Every public signal. One map.

ShadowBroker fuses 60+ live intelligence feeds into a single dark-ops interface — aircraft, ships, satellites, seismic events, CCTV, GPS jamming, radio, and cyber threats. Open source. Self-hosted. No accounts. No product telemetry.

Buy $SB on pump.fun→ Star on GitHub★

AGPL-3.0 open source latest v0.9.84 $SB MC —

▸ Deploy in one command

Run this on your computer — ShadowBroker is self-hosted. Needs Git + Docker running (~4 GB RAM) · opens localhost:3000 — refresh after a minute if it isn't up yet.
Most layers need no keys. Ships need a free aisstream.io key and global flights a free OpenSky login — add them to .env. details ↓

ADS-B AIRCRAFT◆AIS VESSELS◆SPY SATELLITES◆GPS JAMMING◆SEISMIC◆NASA FIRMS WILDFIRES◆22,000+ CCTV◆KIWISDR SHORTWAVE◆MESHTASTIC◆APRS◆SAR GROUND-CHANGE◆TELEGRAM OSINT◆MALWARE C2◆CISA KEV◆SUBMARINE CABLES◆SUPPLY-CHAIN RISK◆

LIVE · GitHub + DexScreener

11,454

GitHub stars

1,824

forks

contributors

—

$SB market cap

—

$SB 24h volume

// why this exists

A staggering amount of the world's telemetry is already public — transponders, AIS beacons, orbital elements, seismic sensors, mesh radios, scanner feeds. It's scattered across dozens of tools. The knowledge is available to all but rarely aggregated in the open. Until now.

// 01 — collection layers

Air, sea, orbit, earth, signals, cyber. All on one screen.

ShadowBroker dashboard over the United States showing thousands of live aircraft, vessels and event markers — Real dashboard frame · FLIR mode · USA

8 domains · 40+ layers

This is the actual dashboard.

Every layer toggles independently and every marker is clickable. Explore the collection domains →

01 / 08AIR

Aircraft & VIP tracking

Air Force One and the presidential fleet are flagged from wheels-up. Billionaire and dictator jets, military tankers, ISR and fighters broadcasting ADS-B.

Global coverage with a free OpenSky login
GPS-jamming zones from NAC-P degradation
Trains across the US & Europe

02 / 08SEA

Naval & maritime

25,000+ AIS vessels free aisstream.io key

Fishing activity via Global Fishing Watch, billionaire superyachts — and aircraft-carrier position estimates from automated GDELT news scraping.

03 / 08ORBIT

Satellites & imagery

Satellites color-coded by mission — military recon, SIGINT, SAR, early warning, space stations — with SatNOGS and TinyGS ground stations.

Latest Sentinel-2 photo at 10 m for any point
SAR ground-change through cloud cover

04 / 08EARTH

Hazards & infrastructure

Earthquakes, volcanic eruptions, NASA FIRMS wildfires, severe weather and air quality — cross-referenced with infrastructure.

35,000+ power plants
2,000+ data centers

05 / 08EYES

Live CCTV mesh

22,000+ cameras · 10 countries

Live traffic cameras from 21 ingestors — US, UK, Canada, Australia, Austria, Spain, Singapore and more — streaming right on the map.

06 / 08SIGINT

Radio & mesh

Click a KiwiSDR node and tune live shortwave in the dashboard. One-click police scanners. Meshtastic and APRS nodes integrated into Mesh Chat.

Telegram OSINT channels, geoparsed & risk-scored

07 / 08CYBER

Cyber threat overlay

Shodan device search (your own key, proxied server-side), malware C2 hotspots from abuse.ch Feodo & URLhaus, CISA KEV, submarine cables and internet-outage regions.

08 / 08RECON

Recon toolkit & dossiers

IP geolocation, DNS, RDAP/WHOIS, cert transparency, BGP/ASN, OFAC sanctions, CVE, Tor/OTX — plus a country dossier for any point on Earth.

Entity graph: Wikidata + OFAC + live cross-links

// 02 — operator view

Five ways to see the world.

DEFAULT, SATELLITE, FLIR thermal, NVG night vision, CRT terminal — switch modes with the STYLE button. Try them on the real demo footage:

shadowbroker://localhost:3000 REC

Demo footage was recorded in the app's FLIR mode. The filters above are a browser preview layered on that video; the app re-renders the live map itself.

// 03 — co-analyst

Plug in an AI agent. Let it find what you'd miss.

An HMAC-signed agentic command channel gives OpenClaw — or Claude, GPT, LangChain, any agent that speaks the protocol — the same view as the operator.

Read/write on all 40+ layers — pins, map control, alerts
Cross-layer search with search_telemetry & search_news
Full recon toolkit via osint_lookup — IP, DNS, WHOIS, sanctions, CVE
Entity-graph expansion, SAR ground-change and mesh networking

openclaw ▸ shadowbroker channelillustrative

// trust model

No accounts. No analytics. No product telemetry.

The dashboard's API calls go only to your self-hosted backend, and operator keys stay in your deployment. Sensitive recon and Shodan queries are proxied server-side behind SSRF guards and local-operator auth — never sent from the browser to third-party APIs.

As the README notes, live OSINT layers still fetch from the public data providers you enable (map tiles, imagery, camera streams).

// infonet testnet

A decentralized intelligence mesh, built into an OSINT tool.

Obfuscated messaging with gate personas, Dead Drop peer-to-peer exchange, and a built-in terminal CLI. Click NODE in the dashboard to join the swarm.

networksb-testnet-0
peersno manual list — fleet defaults find the seed
manifestsigned, pulled automatically
headless./meshnode.sh
soloMESH_INFONET_FLEET_JOIN=false

Experimental testnet — privacy is not guaranteed yet; the protocol is live and being hardened.

// click anything

Every contact comes with a file.

Select an aircraft, vessel, company or IP to expand its entity graph. Right-click anywhere on Earth for a country dossier — head of state, population, languages — and the latest 10 m Sentinel-2 photo of that exact spot.

Tracked-aircraft detail panel in the ShadowBroker dashboard with owner photo and aircraft image — Tracked-aircraft panel · real UI

// open source · AGPL-3.0

Audit every line.

Built with Next.js, MapLibre GL, FastAPI and Python. Fully open so anyone can verify what data is accessed and how.

Next.jsMapLibre GLFastAPIPythonDockerHelm

// 04 — deploy

Operational in one command.

Pick your OS, paste one line into a terminal. It clones the repo, pulls the pre-built signed images and opens the dashboard at localhost:3000. Needs Git and Docker running (Docker Desktop on macOS / Windows; the backend wants ~4 GB RAM). The first pull takes a few minutes — if the browser opens before the dashboard is up, refresh after a minute.

API keys — two free sign-ups unlock everything

Ships (AIS) — required for the vessel layer: free key at aisstream.io → AIS_API_KEY
Global flights — free OpenSky OAuth login → OPENSKY_CLIENT_ID / OPENSKY_CLIENT_SECRET
Optional — your own SHODAN_API_KEY for the device-search overlay

Put them in a .env file in the Shadowbroker folder, then run docker compose up -d again. Settings → API Keys in the dashboard shows what's configured. Most other layers work with no keys at all.

# Terminal (zsh) · needs Git + Docker Desktop
$ git clone https://github.com/bigbodycobain/Shadowbroker.git && cd Shadowbroker && docker compose pull && docker compose up -d && open http://localhost:3000

# bash / zsh · needs Git + Docker
$ git clone https://github.com/bigbodycobain/Shadowbroker.git && cd Shadowbroker && docker compose pull && docker compose up -d && xdg-open http://localhost:3000

# PowerShell · needs Git + Docker Desktop
PS> git clone https://github.com/bigbodycobain/Shadowbroker.git; if ($?) { cd Shadowbroker; docker compose pull; docker compose up -d; start http://localhost:3000 }

# Command Prompt · needs Git + Docker Desktop
> git clone https://github.com/bigbodycobain/Shadowbroker.git && cd Shadowbroker && docker compose pull && docker compose up -d && start http://localhost:3000

# bash / zsh (macOS, Linux, WSL or Git Bash) · needs Git + Docker
$ git clone https://gitlab.com/bigbodycobain/Shadowbroker.git && cd Shadowbroker && docker compose -f docker-compose.yml -f docker-compose.gitlab.yml pull && docker compose -f docker-compose.yml -f docker-compose.gitlab.yml up -d

Your OS is pre-selected. Update any time with docker compose pull && docker compose up -d inside the folder · Kubernetes users: a Helm chart ships in the repo.

The Shadow Broker — a faceless hooded figure in shadow, rim-lit in blue and red

// 05 — the broker

Every network
has a broker.

Alias: BigBodyCobain
Comms: @BigBodyCobain
Last seen: Hagalaz
Role: Architect · maintainer · node zero
Known assets: 11.5K stars · 1.82K forks · 33 contributors
Identity
Status: ACTIVE — shipping

“Hook an AI agent up to have it parse through data and find previously unseen correlations.”— ShadowBroker repository description

Follow the Broker on X↗ Open file on GitHub↗

// 06 — the token

$SB
The community token of the open intel stack.

$SB is the ShadowBroker community token on Solana, launched on pump.fun. Verify it yourself: the GitHub repository's homepage field points to this exact contract address.

ShadowBroker SB

Solana · pump.fun

live

$— — 24h

Market cap—

24h volume—

24h buys / sells—

1h change—

Mint authority checking…
Freeze authority checking…
Market checking…

Buy on pump.fun→ DexScreener↗ Solscan↗ X Community↗

Market data: DexScreener public API, refreshed every 30 s. Not financial advice.

01
Get a Solana wallet
Phantom, Solflare or Backpack. Write down your recovery phrase offline.
02
Fund it with SOL
Buy SOL on an exchange and send it to your wallet address.
03
Open $SB on pump.fun
Connect your wallet on the official coin page linked above.
04
Verify, then swap
Compare the whole contract address with the one on this page before you trade: 8Uk9f5WfJndkC9VkFRLDwEpHgD2KD8BcFbqh5zuBpump. Copycats can fake a matching ending.

⚠ Memecoins can drop to zero in minutes. $SB carries no rights to the software, revenue or its developers. Never invest more than you can afford to lose.

// 07 — faq

Questions, answered.

Is ShadowBroker free?

Yes. ShadowBroker is open-source software under the AGPL-3.0 licence. You run it yourself with Docker, so there is no subscription and nothing to pay for the software. A few optional data sources (such as Shodan) need your own key from that provider.

Do I need an account?

No. ShadowBroker has no accounts, no product telemetry and no analytics. The dashboard talks only to the backend you host yourself. Live layers do make outbound requests to the public data providers you turn on.

What data does it show?

60+ live public feeds across 40+ map layers: aircraft (ADS-B), ships (AIS), satellites, earthquakes, volcanoes and wildfires (NASA FIRMS), GPS jamming, CCTV cameras, KiwiSDR radio, Meshtastic and APRS mesh radio, trains, power plants and data centres, Telegram OSINT channels, and cyber threat feeds such as CISA KEV.

How do I install it?

You need Git and Docker running (Docker Desktop on macOS and Windows; the backend wants about 4 GB of RAM). Paste the one-line command for your OS from the deploy section: it clones the repo, pulls the pre-built images and opens the dashboard at localhost:3000.

Which API keys do I need?

Most layers work with no keys at all. Two free sign-ups unlock the rest: an aisstream.io key for ships (AIS_API_KEY) and an OpenSky login for global flights (OPENSKY_CLIENT_ID and OPENSKY_CLIENT_SECRET). Shodan is optional and uses your own key.

Is this a surveillance tool?

It does not create new surveillance capabilities. ShadowBroker brings together datasets that are already public, such as aircraft and ship transponder broadcasts, satellite orbits and earthquake sensors, and shows them on one map. The code is fully open source, so anyone can audit what data it accesses and how.

Can I connect an AI agent?

Yes. ShadowBroker has an HMAC-signed agent command channel that works with OpenClaw and any agent that speaks the protocol, including Claude- and GPT-based agents. The agent can search telemetry and news across all layers, run recon lookups, place pins and control the map.

What is $SB?

$SB is the ShadowBroker community token on Solana, launched on pump.fun. The software itself is free and does not require the token.

See what the world looks like when every signal is on the same map.

$SB market cap—

GitHub stars11.5K

Quakes on the map · 24h—

Mint / freezerevoked

Buy $SB→ Star on GitHub★