Cyberlens

CyberLens is a lightweight SOC/OSINT enrichment browser extension designed for security analysts, IT administrators, and cyber researchers.

It helps users quickly investigate IP addresses, domains, URLs, and file hashes by opening reputable public threat intelligence and security lookup services directly from the browser.

CyberLens supports:
• IP address lookups
• Domain lookups
• URL lookups
• MD5, SHA1, and SHA256 hash lookups
• Defanged indicators such as example[.]com and hxxps://example[.]com/path

Key features:
• Direct lookups for VirusTotal, Cisco Talos, and IBM X-Force
• Right-click context menu for selected indicators, links, and page URLs
• Popup interface with dedicated categories for IP, URL, Domain, and Hash
• Open All function to launch all tools in the selected category
• Automatic artifact detection and normalization
• Support for common SOC/IR workflows
• No API keys required
• No external APIs used by the extension
• No data is sent to our own servers

CyberLens is built for fast browser-based security investigation. It does not replace a SIEM, EDR, or threat intelligence platform, but helps analysts pivot quickly from an indicator to multiple public OSINT sources.

Useful for:
• SOC analysts
• Incident response teams
• IT security teams
• Malware and phishing triage
• Domain, URL, IP, and hash enrichment
• Quick investigation of suspicious indicators

CyberLens processes selected or manually entered indicators locally in the browser and opens the selected external OSINT lookup pages only when the user initiates an action.