SEE THE
UNSEEN.
PROVE WHAT
YOU KNOW.
A source-attributed cyber research command center. Twenty-one reference tools, one governed workspace, and zero harvested credential databases.
Independent XUNIA interface. No affiliation with referenced services. Public sources, locally supplied evidence, and authorized targets only.
NEW / OPEN-SOURCE REPOSITORY INTELLIGENCE
15 Source Atlas.
Fifteen video-ranked research categories, sixteen independently located upstream repositories, open-source substitutes and evidence-gated source attribution. Read-only catalog: no third-party code is downloaded or executed.
01 / SERVICE INTELLIGENCE
The toolkit.
Search and filter all 21 references. Status labels distinguish working features from third-party references.
02 / RESEARCH OPERATIONS
Live workbench.
Choose any catalog card to switch the active research engine.
DISCOVERY
Ahmia
Query attributed public research sources.
Federated public search
Queries launch in official servicesOnly official public search endpoints are wired. Results open in a new tab; XUNIA does not index or proxy .onion content.
Private evidence index
Browser storage / authorized data onlySearch your own incident summaries, consented public messages, and source notes. Nothing here is sent to the named reference services.
The XUNIA index is not a copy of a leaked database, Telegram bot, or proprietary monitoring provider.
Authorized Telegram Desktop export analyzer
Analyze only your own or consented Telegram Desktop JSON export. Data stays in browser memory, is never saved to the vault, and is cleared on refresh.
No archive loaded.
Pwned Passwords / privacy-preserving check
Free public HIBP range APICheck a disposable or test password against known exposed password hashes. Your browser computes SHA-1 and sends only five hash characters. Never enter an active account password into an unfamiliar webpage.
Account/email breach lookups are available at the original HIBP service ↗; paid APIs are not embedded or bypassed.
Known exploited vulnerabilities
Live CISA mirror · CC0 dataNot loaded. Select “Load live CISA feed” to request public data.
Source: cisagov/kev-data ↗ (official mirror); failed fetches remain visibly failed, never replaced by made-up results.
Verified research directory
Attribution and official links onlyLinks are reviewed public-source references. No hidden wiki mirrors or unverified .onion links are hosted.
Your verified HTTPS bookmarks
Save your own attributed public research links in this browser. This is not an onion proxy or an anonymous search index.
Authorized site audit crawler
Python · local executionRun on your own or explicitly permitted domains. The crawler follows robots.txt, stays on a named host, limits pages and response size, and exports source-linked JSONL records.
python3 scripts/xunia_authorized_crawl.py --base-url https://example.org --allow-host example.org --max-pages 10 --authorizedTor privacy boundary
External, official software onlyA normal HTTPS site cannot safely provide a real Tor circuit or run an anonymous .onion browser. Use the official Tor Browser and independently assess the sites you visit.
TOR2web-style gateways are intentionally not provided: browser proxying is not equivalent to Tor anonymity.
Local privacy capability diagnostics
This diagnostic describes what your current browser can and cannot guarantee. It performs no network reconnaissance.
OpenPGP message station
Runs in this browserGenerate an ECC key pair, encrypt/decrypt messages, and sign/verify cleartext with pinned OpenPGP.js. Keys and passphrases are not uploaded or saved by XUNIA.
For high-risk key material, use an audited, installed OpenPGP client. This hosted page loads an open-source third-party cryptographic library.
03 / GLASS ONION PROVENANCE
Evidence vault.
Capture source and context for each authorized observation. Stored only in this browser.