OSINT / Threat Intelligence

Omni-trace Footprint Analyzer (Case Study)

An automated intelligence tool designed to bridge external Open Source Intelligence (OSINT) APIs with local databases.

Project Overview

OmniTrace is a production-ready cybersecurity platform that detects sensitive data exposure and evaluates risk. It simulates how enterprise security systems scan data for leaks, analyze breach exposure, score risk levels, and store data securely. The system automates detection of Personally Identifiable Information (PII) leaks and provides comprehensive threat analysis capabilities.

Problem Statement & Solution

Sensitive user data like Aadhaar, PAN, emails, and phone numbers are often stored insecurely, leaked unknowingly, or exposed in breaches. OmniTrace solves this by automating PII detection and risk analysis across multiple data sources. The system can scan uploaded files, text input, and external APIs to identify and classify sensitive data exposure.

Core Features

• 🔎 Email Breach Detection: LeakCheck API integration for real-time email breach detection
• 🧾 PII Scanner: Supports both text input and file uploads for comprehensive scanning
• 📊 Real-time Analytics Dashboard: Visualize threat data and exposure trends
• ⚠️ Risk Scoring Engine: Automatically rates severity from low to critical
• 🔐 PII Masking: Masks sensitive data before database storage
• 🗂️ Record Management System: Track and manage detected exposure records

PII Detection Engine

The system identifies and classifies six types of sensitive information with risk scoring:

• Aadhaar: Risk Level 10 (Highly sensitive - unique identity)
• PAN: Risk Level 10 (Financial identity - critical)
• Email: Risk Level 7 (Prone to breaches)
• Phone: Risk Level 6 (Moderately sensitive)
• IP Address: Risk Level 4 (Low sensitivity)
• URL: Risk Level 2 (Informational)

System Architecture

OmniTrace implements a modular, layered architecture following Spring Boot best practices. User input flows through a Scanner Service with regex-based pattern matching, passes through a Risk Scorer for severity assessment, applies a Data Masking Layer for security, stores records in MySQL, and presents insights via a real-time analytics dashboard. The architecture supports stateless backend operations and scalable deployment via Docker and Railway.

Technology Stack & Deployment

Backend: Java 21 with Spring Boot 3.2 framework for high-performance API development

Database: MySQL 8.0 for secure, normalized data storage

Frontend: Thymeleaf templating with JavaScript for responsive UI

Deployment: Docker containerization with Railway cloud hosting for production availability

Live Application: omni-trace-production-c4ab.up.railway.app