Frequently asked questions
Everything you need to know about TWILOX — how the orchestrator works, which OSINT engines it runs, pricing, dark-web coverage, and data handling.
What is TWILOX?
TWILOX is an AI-powered OSINT (Open Source Intelligence) platform that takes a single signal — an email, phone number, username, identity, image, or social handle — and orchestrates a fleet of public-source intelligence workers (Sherlock, Maigret, Holehe, PhoneInfoga, ExifTool, SpiderFoot, TorBot, FaceCheck.ID, PimEyes, and more) to produce a cinematic, evidence-traceable dossier in under a minute.
Is TWILOX legal to use?
Yes. TWILOX operates exclusively on public sources: open breach corpora, indexed social platforms, archived web pages, dark-web indexes (Ahmia, Torch, Haystack), and publicly queryable registries. It never bypasses authentication, scrapes behind paywalls, or uses purchased private datasets. Use is logged; misuse (harassment, stalking, unauthorized surveillance) terminates the account.
What does a single dossier cost?
A single dossier is a one-time charge of $4.99 USD. It includes full channel findings, an AI-generated executive summary, a cross-channel identity graph, dark-web monitoring, reverse-image and face-recognition search, PDF export, and a 90-day archive.
How is TWILOX different from Sherlock, Maigret, or SpiderFoot?
TWILOX orchestrates those tools (and more) under a single cinematic interface, then applies an AI correlation layer that resolves aliases across channels, scores confidence per finding, and writes an executive narrative. The individual command-line tools are powerful but produce raw JSON; TWILOX produces an investigator-grade report.
Which OSINT tools and engines does TWILOX use?
Sherlock and Maigret for username search across 400+ platforms; Holehe for email-to-platform mapping; PhoneInfoga and country-aware reverse-phone directories (16 countries) for phone intelligence; ExifTool for image metadata; SpiderFoot for domain, IP, and company graph; TorBot routed through a local Tor SOCKS proxy for .onion crawling (Ahmia, Torch, Haystack); FaceCheck.ID and PimEyes for face recognition; Google Images, Bing Visual Search, and Surfface for reverse-image lookup.
Does TWILOX search the dark web?
Yes. A Tor-enabled TorBot container crawls dark-web indexes (Ahmia.fi, Torch, Haystack) for the target string, then fetches each .onion result through the Tor SOCKS proxy and extracts title, description, emails, and phone numbers. Dark-web monitoring is included in every dossier at no extra cost.
Does TWILOX include reverse-image and face-recognition search?
Yes. Every dossier with an image input runs the photo against Google Lens, Bing Visual Search, Surfface, FaceCheck.ID, and PimEyes in parallel, returning the matched URLs and confidence scores.
How long does an investigation take?
Most dossiers complete in under 60 seconds. The exact time depends on which channels are active and how many third-party APIs respond, but the orchestrator fans out all workers in parallel and stops streaming results as soon as each one finishes.
Can I export the dossier as a PDF?
Yes. Every paid dossier offers a one-click PDF export and is archived to your account for 90 days. Operative-tier subscribers get unlimited archive retention.
Where is data stored?
Scan metadata is stored in Supabase (Postgres). The cross-channel identity graph lives in Neo4j AuraDB. Both are encrypted at rest, and all queries are hashed before transit. TWILOX honors GDPR subject deletion requests within 72 hours.
Still have questions? Run a free preview or read the methodology.