selfhost.directory

The index of self-hostable projects — ranked, categorized and served with live updates.
Own your data and stop giving it to big tech.

voidaccess logo

Self-host voidaccess

v2.1.0

Dark-web OSINT platform for automated threat intelligence

ReleaseOpen SourceMIT
Updated10 hours ago
LanguagePython
Setup difficultyAdvanced
Stars
947
Ports
3001 (Web UI (Next.js frontend)), 8000 (REST API (FastAPI backend)), 9050 (Tor SOCKS5 proxy)
Requires
Meilisearch, PostgreSQL, Tor
Install with Docker Compose
Live investigation view collecting and filtering dark-web results, then opening as a searchable graphInvestigation results: relationship graph of actors, malware, CVEs and onion links with sidebar listing extracted valuesNine export formats: STIX 2.1, MISP, Sigma, YARA, Snort, Suricata, CSV, JSON, MarkdownHosted version at voidaccess.pro showing skip the setup messageOpen source at the core, MIT licensedHow it works: Ask, collect, filter, extract, deliver pipeline

What is voidaccess?

VoidAccess is a self-hosted dark-web OSINT platform for security researchers and threat-intel teams. It automates intelligence gathering from question to visual graph, querying multiple Tor search engines, code repositories, and security feeds simultaneously. It identifies threat actors, malware families, CVEs, crypto wallets, credentials, messaging handles, and infrastructure indicators, connecting them into a searchable relationship graph. Results export in nine formats for sharing and detection including STIX and MISP for sharing, Sigma and YARA for detection rules, Snort and Suricata for network rules, plus CSV, JSON, and Markdown. Runs as a CLI or containerized deployment with PostgreSQL, Tor, FastAPI, and Next.js. MIT licensed.

Should you self-host voidaccess?

voidaccess scores 57/100 on selfhost.directory (how scoring works) and ranks #28 of 78 in Security. It has 947 GitHub stars.

It shipped 18 stable releases in the past year. The latest, v2.1.0, came out on 18 October 2026. New versions land roughly every 1 days.

Setup is advanced: plan for several services and some ongoing maintenance. It is MIT-licensed and written mostly in Python.

Its closest alternative on selfhost.directory is pentagi (83/100, 32 610 stars). It scores higher overall, so compare the two before you pick. See voidaccess vs pentagi side by side.

Features

  • Clearnet-only mode
  • CLI Interface
  • Content safety filters
  • Dark-web search
  • Entity extraction
  • LLM provider flexibility
  • Multi-format Export
  • Multi-user support
  • Relationship graph
  • REST API
  • Threat intelligence collection
  • Web UI

voidaccess README

How to install voidaccess

Install voidaccess with Docker Compose

Environment variables
DATABASE_URL, JWT_SECRET, LLM provider keys (OPENROUTER_API_KEY, OPENAI_API_KEY, ANTHROPIC_API_KEY, GOOGLE_API_KEY, GROQ_API_KEY, OLLAMA_BASE_URL), enrichment keys (OTX_API_KEY, VT_API_KEY, ABUSECH_API_KEY, BLOCKCYPHER_TOKEN, ETHERSCAN_API_KEY, etc.)

git clone https://github.com/KatrielMoses/VoidAccess.git cd VoidAccess bash setup.sh

Or manual:

git clone https://github.com/KatrielMoses/VoidAccess.git cd VoidAccess cp .env.example .env docker compose up --build -d

Four-service stack: PostgreSQL, Tor, FastAPI, Next.js. Setup wizard generates secrets and configures LLM provider.

voidaccess releases & version history

FAQ

Can I self-host instead?

Yes. Install with 'pip install voidaccess', MIT license, free forever.

Who is it not for?

Not for stalking, doxxing, harassment, or anyone looking for illegal content or services. Accounts that try are closed.

What happens to my queries?

Investigations are kept while your account is open and deleted when you delete it. Queries and collected text go to AI providers to refine search and write summaries, never with account details. Findings go into an anonymous, dated archive without your identity or query text.

Will it show me illegal content?

Safety filters block prohibited queries, links, and page content before anything reaches you. Results never link to dark-web pages; found addresses are shown as copyable text, not links.

Is this legal?

VoidAccess searches publicly reachable sources: Tor search engines, code hosts, and public threat feeds. It doesn't log into closed forums or buy data. Use is limited to security research and authorized investigation by the Acceptable Use Policy.

Rate this project

Click to rate — no account needed.

0 comments

Posting as guest
Loading comments…