Main.exe, no account needed.On GitHub, Chipwithinflash/watson-AI-osint-all-in-one was published — a free OSINT utility for Windows. The logic is simple: you enter a nickname, email, phone number, or website address, the program figures out what you've entered, and checks 3100+ public sources — social networks, forums, gaming and developer platforms. The output isn't a wall of links but a short summary you can export to PDF with one click.
Inside there are four screens. Search — that very single field. History — all past queries so you don't lose a lead. Cases — a map of what was found on one person: click a dot and see what it is, why it matters, and where the evidence came from. Sources — a list of open tools running under the hood. It installs without admin rights: download the zip from the release page or from watsonfind.icu, unpack the folder, run Main.exe. The repo has 5 commits and electron, src, public, docs folders — the build, apparently, is on Electron.
The author pitches it as a digital footprint check: vet a seller before paying, a "recruiter" from an email, a new acquaintance, or yourself. The README states outright: doing this by hand takes a weekend and a dozen browser tabs; Watson does it in 30 seconds. And for $0 — no trial, no "pro" tier, no card.
Checks like this usually live in the terminal: you install Python, gather API keys, and read raw JSON. Our assessment — Watson's main feature isn't the sources, it's that the barrier to entry has been zeroed out. A person who has never opened a console gets a button and a PDF. That's exactly why the project surfaced: it targets not the tools but the habit of thinking "this is beyond me."
What does this change in practice? Vetting a counterparty stops being a paranoid ritual. In our experience, 90% of people don't google a seller's nickname before sending money — they just can't be bothered. When it takes 30 seconds and one click, laziness stops being an excuse. But the exact same argument works in reverse: a scammer can check you just as quickly and just as cheaply.
Who wins — journalists, HR, marketplace buyers, security teams at small companies. Who loses — paid background-check services, if they charge money for the same thing. That's our hypothesis, not a fact from the README: the author doesn't disclose pricing or market size. And yes, what bothers me personally isn't the functionality but the lack of a clear answer on where the queries are processed.
The main thing: are queries processed locally or sent to a server? What are the 3100 sources — open pages, APIs, or possibly leaked databases? The README doesn't say. Then there's a direct contradiction: one place says the app is code-signed and Windows opens it without a warning, another explains that SmartScreen will appear because there's no certificate. Testing Main.exe in a sandbox or on a separate machine is reasonable; taking it at its word is not. Five commits also hint that the project is very young.
Prediction: Within a quarter, an independent analysis of the Main.exe build will appear — or the author will publish the source list and data-handling scheme themselves. I'm betting on the former.
Disclaimer: one source — the project's own README; no independent verification, nothing officially confirmed.
Source: github.com · post in Telegram