Ridge is a native Windows desktop app for intelligence and cybersecurity investigations. Gather 1,700+ verified tools, run sock-puppet personas in isolated containers with zero host leak, map entities on dynamic link-analysis graphs, and calculate sun shadows to pinpoint photo dates and locations.
* Ridge runs natively on Windows 10 and 11. Persona browser sandboxing uses Docker Desktop with automated VPN and timezone verification.
Every module is designed to eliminate friction, attribution risk, and tool fragmentation during complex online inquiries.
Search an exhaustive directory indexed by intelligence category, source type, and methodology. Ridge automatically monitors live uptime status so you never waste time on dead links or unmaintained scripts.
Create and preserve synthetic investigation personas. Each persona runs in an isolated Docker container with strict network sandboxing, dedicated browser profiles, independent history, logins, notes, and evidence files.
Visually map targets, associates, phone numbers, corporate registries, social handles, and cryptocurrency transactions. Use automated force-directed layouts to uncover hidden clusters and operational patterns.
Determine when a photo was captured directly from its shadows. Enter the estimated location and camera orientation, measure shadow ratios, and Ridge calculates candidate timestamps plotted along astronomical sky charts.
Import multiple case photographs, draw numbered observation boxes across 16 contrast colors, and export high-resolution presentation sheets. Recover redacted text using the built-in Depix de-pixelation engine.
Run OpenStreetMap Overpass queries directly within your investigation flow. Filter critical infrastructure, telecom masts, power grids, or geographic landmarks and export telemetry into GeoJSON.
Generate synthetic identities, verify active VPN tunnels and localized timezones, and launch a strictly cordoned containerized browser.
Cross-examine leads across 1,700+ categorized OSINT tools, execute Overpass spatial queries, and extract metadata safely.
Drop targets, aliases, and financial transactions onto the visual link canvas. Trace relationships with automated graph layout algorithms.
Date photographs with the astronomical shadow solver, annotate imagery with numbered evidence markers, and export formatted PNG reports.
Investigate hostile actors and sensitive entities without putting your workstation or home network at risk.
Sock-puppet browser sessions run inside dedicated Docker containers. Container breakout safeguards guarantee zero access to host drives, local documents, or USB peripherals.
Ridge checks VPN state, DNS servers, and timezone parity before allowing any persona browser to establish an outbound socket, ensuring zero WebRTC or IP leaks.
Your investigation graphs, targets, notes, and case evidence remain strictly on your local encrypted storage. No telemetry, third-party analytics, or cloud relays.
Ridge is built for corporate intelligence units, cybersecurity researchers, law enforcement agencies, and investigative journalists.
Available directly on GitHub under the GNU General Public License v3.0 for independent researchers and open-source investigators.
Tailored deployment support, private tool catalog integration, persona automation, and institutional security onboarding.
Available on contact. We provide custom tool catalog extensions, team deployment packages, and dedicated support.
Need custom intelligence integration?
We work with specialized investigative departments and research teams to adapt Ridge for specific operations.
Get in touch with engineeringOnly for the sock-puppet personas module. The 1,700+ tool directory, investigation graph engine, solar shadow calculator, Depix de-pixelator, and image annotation tools run natively as standalone desktop features without Docker.
Ridge is written natively in Rust using egui and is optimized for 64-bit Windows 10 and Windows 11. It installs without requiring administrator rights and updates automatically.
Personas run inside containerized virtual environments. Ridge verifies that VPN connections are active and timezones match before launching a browser, and blocks containers from communicating with your host PC or local LAN.
Ridge is open source on GitHub. For organizations requiring tailored institutional deployments, security audits, training, or dedicated support packages, reach out via our contact page to discuss access.
Never. All case files, entity graphs, annotated evidence, and persona notes are stored entirely on your local machine. Nordath does not operate telemetry, tracking, or cloud storage for Ridge.
Combine 1,700+ verified tools, zero-leak sandboxed personas, and dynamic link-analysis graphs in one native desktop application.
