Lead intelligence · External attack surface · Self-hosted

Scryer — intelligence on your localhost.

Scryer turns public data — BZP/BIP procurement and registry records, passive DNS — into ranked leads with personalization ammunition and ready mail briefs. Self-hosted, deterministic core, sha256-signed manifests, audit-ready.

Talus looks inside the host. Scryer looks at your outside exposure.

SCRYER_DB=leads.db scryer-core score seed/leads-demo.json

SCRYER_DB=leads.db scryer-core briefs seed/leads-demo.json briefs/

Source & docs ↗ Request demo / licensing

Capabilities — code over claims.

BZP / BIP ingestion

Procurement & public-registry records parsed into a typed ontology: entities, domains, tenders, hooks.

deterministic core

KSC / NIS2 scoring

Transparent, audit-ready scoring: sector weight, self-registration hooks, active tenders, verified email. HOT/WARM/COLD tiers.

HOT ≥15 pts

Passive DNS audit

MX + SPF + DMARC + A per lead domain — via own minimal DNS client. No scanning of third parties, ever, without authorization.

dnsmini

Campaign export

CSV ready for Brevo import, one markdown brief per lead, JSON snapshot with sha256 manifest — audit-ready output.

sha256 manifest

Link analysis

Relationship graph (org↔domain↔person) with components, bridges (single points of failure), shortest paths — plus shared-infrastructure hubs: two orgs on the same MX/NS/IP get connected automatically (passive DNS inference, no LLM).

graphx · bridges · timeline

Live console

Query API + graph view (bridge highlighting) + attack-surface view + event timeline on the local ontology. Binds to 127.0.0.1 by default.

axum · SQLite

Security-first

Bearer auth on the API, no telemetry, gated mail sending, deterministic and reproducible output.

localhost by default

Pipeline

LOAD → VALIDATE → DEDUPE → SCORE → ENRICH (passive DNS) → RANK → CSV + BRIEFS + SNAPSHOT

Deterministic core: same input → same output, sha256 manifest over the snapshot. One Rust binary, no cloud, no telemetry — data never leaves the operator's machine.

Scoring tiers

HOT

≥ 15 pts — first wave: personal, domain-specific briefs with DNS findings

WARM

10–14 pts — second wave: sector-tailored value proposition

COLD

< 10 pts — nurture: newsletter, case studies, keep-warm

Signal	Points	Source	Amunition
Sector: health / water / energy (KSC USK)	9–10	BIP sector parse	USK obligation angle
Hook: KSC self-registration ≤7 days	+5	KSC registry	compliance deadline
Hook: active tender (BZP)	+4	BZP	live procurement
Verified email / MX / SPF / DMARC findings	+3–6	passive DNS audit	spoofing exposure angle

Scoring is transparent by design — every point has a named source. Auditors and customers can verify the ranking, not trust it.

Licensing & access

Scryer is proprietary, intelligence-grade tooling for public entities (CSIRT / IK), critical-infrastructure operators and enterprise. The core is not open source.

[email protected] Security & disclosure