WHAT IT IS
Investigation tools usually trade power for order: they either pile up results with no evidential value, or run in the cloud, where the case leaves the expert’s hands. Horkeion runs on your own computer and is designed backwards from the expert report: if a piece of data cannot be cited with its source, date, time and hash, it does not enter the case file that way.
01
You state what needs to be proven and Horkeion proposes the plan of modules that answers it.
02
No result appears without its level: confirmed, probable or doubtful, with explicit criteria.
03
Every piece of data is preserved the moment it is obtained. There is no “save evidence” button to forget.
04
Reproducible methodology, numbered annexes and electronic signature, ready to submit.
HOW IT WORKS
The home screen lists assignments the way an expert brief is written. Horkeion turns each one into a plan of modules that the expert reviews before running it.
01
Identify the person behind an account or alias02
Verify whether a profile impersonates a person or brand03
Rebuild a person’s public digital footprint04
Establish the origin, authorship and manipulation of an image or video05
Document and preserve published content before it disappearsMODULES
OSINT for what is searched in open sources; Forensic for what is acquired, analysed and proven. Both share the same case file, the same chain of custody and the same expert report.
OSINT
Horkeion integrates recognised open engines, pinned by version and hash, and adds what they lack: false-positive calibration, evidential preservation of every response, and a single count for sources that draw on the same origin.
What an email address reveals, with a prior warning when a query may reach its owner.
Where a username exists, and how certain that is.
What a number reveals without accessing anything private.
Preserving what is visible, not bulk downloading, under three legal regimes: open content, the expert’s own session and supplied material.
Origin, authorship and manipulation of a medium.
Authenticity of what a party submits as evidence.
FORENSIC
For devices, messaging and material supplied by the parties. The original is the evidence and is never touched: Horkeion works on a verified copy and records every step.
Guided acquisition in five steps, with the hash computed at the moment of copying.
Conversations rebuilt and checked against their source.
Email accounts with a legal basis, never by forcing access.
Only with a court order added to the case file, and within its exact scope.
Checking the phone of someone who suspects they are being watched.
Where an image or video was taken, and how certain that is.
CASE FILE, CUSTODY AND REPORT
The foundation is not a project phase or an add-on: it is there from the first piece of data in every case file.
Graph, timeline and findings inbox are three synchronised views of the same case file.
Every finding, with its level and its reason.
Hash-chained, impossible to edit or switch off.
The evidence lives on your computer, encrypted, and does not leave it.
Structured after the Spanish UNE standards for expert reports, with fixed clauses.
Sensitive findings are handled separately, as the GDPR requires.
OPEN VERIFIER
Every case file ships with a manifest holding the hash of every item and the chain of custody. The integrity verifier is free software (Apache-2.0), costs nothing and needs no Horkeion licence: anyone can check a case file, including the opposing party.
It runs on the verifier’s own computer, without connecting to any service of ours. Its code and specification will be public.
ROADMAP
Horkeion grows in phases. Each capability arrives with its legal footing and as an open, validated engine, never as an anything-goes feature the opposing party could use to challenge the report.
Beyond the individual.
Computers and servers, integrating reference forensic engines.
Artificial intelligence that never leaves your computer.
PRINCIPLES
Every limit is also an argument in court.
No fake accounts, no bypassing CAPTCHAs or paywalls, no third-party credentials.
Without a court order added to the case file, it breaks no device lock or encryption.
The application reports nothing to anyone, and the licence is activated offline.
No evidence goes to a third-party service unless you enable it, and that is recorded.
The software proposes and organises; the expert writes the report’s conclusions.
Cloud accounts only with the owner’s consent or a court order, through official channels.
It never estimates anyone’s age, gender or origin. Face search ships disabled and requires authorisation case by case.
Detecting it is for law enforcement; Horkeion does not classify it.
ORIGIN
100%
Barcelona · Catalonia, Spain
Horkeion is designed and developed entirely in Barcelona by Alpes Apps Development. In a forensic tool, knowing who writes the code and being able to audit it is part of the evidence.
For transparency, the third-party open engines it integrates are listed with their origin, version and licence in the software bill of materials (SBOM) that ships with every release.
Methodology aligned with ISO/IEC 27037, UNE 71506, UNE 197010 and the Berkeley Protocol. The conformity matrix and validation report will be published with every release.
PLATFORMS
DESKTOP
Windows and Linux
Signed installer for each platform. A macOS version will follow.
OFFLINE
It only goes online when you ask
To run a search or request a timestamp. Supplied material is analysed offline.
BUILT FOR SPAIN
Designed for Spanish proceedings
Interface, report and legal framework of Spanish civil and criminal procedure, the GDPR and eIDAS.
CONTACT
Are you a forensic expert, a licensed investigator, or do you work at a law firm or a public body? Write to us to learn about Horkeion, suggest a use case or receive news.
