Global Threat Intercept — Real-Time Geospatial Intelligence Platform
ShadowBroker is a real-time, multi-domain OSINT dashboard that aggregates live data from dozens of open-source intelligence feeds and renders them on a unified dark-ops map interface. It tracks aircraft, ships, satellites, earthquakes, conflict zones, CCTV networks, GPS jamming, and breaking geopolitical events — all updating in real time.
Built with Next.js, MapLibre GL, FastAPI, and Python, it's designed for analysts, researchers, and enthusiasts who want a single-pane-of-glass view of global activity.
- Track private jets of billionaires
- Monitor satellites passing overhead and see high-resolution satellite imagery
- Nose around local emergency scanners
- Watch naval traffic worldwide
- Detect GPS jamming zones
- Follow earthquakes and disasters in real time
Windows portable version. Download the .zip from releases. The .exe is in 'dist'.
- Commercial Flights — Real-time positions via OpenSky Network (~5,000+ aircraft)
- Private Aircraft — Light GA, turboprops, bizjets tracked separately
- Private Jets — High-net-worth individual aircraft with owner identification
- Military Flights — Tankers, ISR, fighters, transports via adsb.lol military endpoint
- Flight Trail Accumulation — Persistent breadcrumb trails for all tracked aircraft
- Holding Pattern Detection — Automatically flags aircraft circling (>300° total turn)
- Aircraft Classification — Shape-accurate SVG icons: airliners, turboprops, bizjets, helicopters
- Grounded Detection — Aircraft below 100ft AGL rendered with grey icons
- AIS Vessel Stream — 25,000+ vessels via aisstream.io WebSocket (real-time)
- Ship Classification — Cargo, tanker, passenger, yacht, military vessel types with color-coded icons
- Carrier Strike Group Tracker — All 11 active US Navy aircraft carriers with OSINT-estimated positions
- Automated GDELT news scraping for carrier movement intelligence
- 50+ geographic region-to-coordinate mappings
- Disk-cached positions, auto-updates at 00:00 & 12:00 UTC
- Cruise & Passenger Ships — Dedicated layer for cruise liners and ferries
- Clustered Display — Ships cluster at low zoom with count labels, decluster on zoom-in
- Orbital Tracking — Real-time satellite positions via CelesTrak TLE data + SGP4 propagation (2,000+ active satellites, no API key required)
- Mission-Type Classification — Color-coded by mission: military recon (red), SAR (cyan), SIGINT (white), navigation (blue), early warning (magenta), commercial imaging (green), space station (gold)
- Global Incidents — GDELT-powered conflict event aggregation (last 8 hours, ~1,000 events)
- Ukraine Frontline — Live warfront GeoJSON from DeepState Map
- SIGINT/RISINT News Feed — Real-time RSS aggregation from multiple intelligence-focused sources
- Region Dossier — Right-click anywhere on the map for:
- Country profile (population, capital, languages, currencies, area)
- Head of state & government type (Wikidata SPARQL)
- Local Wikipedia summary with thumbnail
- NASA GIBS (MODIS Terra) — Daily true-color satellite imagery overlay with 30-day time slider, play/pause animation, and opacity control (~250m/pixel)
- High-Res Satellite (Esri) — Sub-meter resolution imagery via Esri World Imagery — zoom into buildings and terrain detail (zoom 18+)
- Sentinel-2 Intel Card — Right-click anywhere on the map for a floating intel card showing the latest Sentinel-2 satellite photo with capture date, cloud cover %, and clickable full-resolution image (10m resolution, updated every ~5 days)
- SATELLITE Style Preset — Quick-toggle high-res imagery via the STYLE button (DEFAULT → SATELLITE → FLIR → NVG → CRT)
- KiwiSDR Receivers — 500+ public SDR receivers plotted worldwide with clustered amber markers
- Live Radio Tuner — Click any KiwiSDR node to open an embedded SDR tuner directly in the SIGINT panel
- Metadata Display — Node name, location, antenna type, frequency bands, active users
- CCTV Mesh — 2,000+ live traffic cameras from:
- 🇬🇧 Transport for London JamCams
- 🇺🇸 Austin, TX TxDOT
- 🇺🇸 NYC DOT
- 🇸🇬 Singapore LTA
- Custom URL ingestion
- Feed Rendering — Automatic detection & rendering of video, MJPEG, HLS, embed, satellite tile, and image feeds
- Clustered Map Display — Green dots cluster with count labels, decluster on zoom
- GPS Jamming Detection — Real-time analysis of aircraft NAC-P (Navigation Accuracy Category) values
- Grid-based aggregation identifies interference zones
- Red overlay squares with "GPS JAM XX%" severity labels
- Radio Intercept Panel — Scanner-style UI for monitoring communications
- Earthquakes (24h) — USGS real-time earthquake feed with magnitude-scaled markers
- Day/Night Cycle — Solar terminator overlay showing global daylight/darkness
- Global Markets Ticker — Live financial market indices (minimizable)
- Measurement Tool — Point-to-point distance & bearing measurement on the map
- LOCATE Bar — Search by coordinates (31.8, 34.8) or place name (Tehran, Strait of Hormuz) to fly directly to any location — geocoded via OpenStreetMap Nominatim
┌────────────────────────────────────────────────────────┐
│ FRONTEND (Next.js) │
│ │
│ ┌─────────────┐ ┌──────────┐ ┌───────────────┐ │
│ │ MapLibre GL │ │ NewsFeed │ │ Control Panels│ │
│ │ 2D WebGL │ │ SIGINT │ │ Layers/Filters│ │
│ │ Map Render │ │ Intel │ │ Markets/Radio │ │
│ └──────┬──────┘ └────┬─────┘ └───────┬───────┘ │
│ └────────────────┼──────────────────┘ │
│ │ REST API (60s / 120s) │
├──────────────────────────┼─────────────────────────────┤
│ BACKEND (FastAPI) │
│ │ │
│ ┌───────────────────────┼──────────────────────────┐ │
│ │ Data Fetcher (Scheduler) │ │
│ │ │ │
│ │ ┌──────────┬──────────┬──────────┬───────────┐ │ │
│ │ │ OpenSky │ adsb.lol │CelesTrak │ USGS │ │ │
│ │ │ Flights │ Military │ Sats │ Quakes │ │ │
│ │ ├──────────┼──────────┼──────────┼───────────┤ │ │
│ │ │ AIS WS │ Carrier │ GDELT │ CCTV │ │ │
│ │ │ Ships │ Tracker │ Conflict │ Cameras │ │ │
│ │ ├──────────┼──────────┼──────────┼───────────┤ │ │
│ │ │ DeepState│ RSS │ Region │ GPS │ │ │
│ │ │ Frontline│ Intel │ Dossier │ Jamming │ │ │
│ │ └──────────┴──────────┴──────────┴───────────┘ │ │
│ └──────────────────────────────────────────────────┘ │
└────────────────────────────────────────────────────────┘
| Source | Data | Update Frequency | API Key Required |
|---|---|---|---|
| OpenSky Network | Commercial & private flights | ~60s | Optional (anonymous limited) |
| adsb.lol | Military aircraft | ~60s | No |
| aisstream.io | AIS vessel positions | Real-time WebSocket | Yes |
| CelesTrak | Satellite orbital positions (TLE + SGP4) | ~60s | No |
| USGS Earthquake | Global seismic events | ~60s | No |
| GDELT Project | Global conflict events | ~6h | No |
| DeepState Map | Ukraine frontline | ~30min | No |
| Transport for London | London CCTV JamCams | ~5min | No |
| TxDOT | Austin TX traffic cameras | ~5min | No |
| NYC DOT | NYC traffic cameras | ~5min | No |
| Singapore LTA | Singapore traffic cameras | ~5min | Yes |
| RestCountries | Country profile data | On-demand (cached 24h) | No |
| Wikidata SPARQL | Head of state data | On-demand (cached 24h) | No |
| Wikipedia API | Location summaries & aircraft images | On-demand (cached) | No |
| NASA GIBS | MODIS Terra daily satellite imagery | Daily (24-48h delay) | No |
| Esri World Imagery | High-res satellite basemap | Static (periodically updated) | No |
| MS Planetary Computer | Sentinel-2 L2A scenes (right-click) | On-demand | No |
| KiwiSDR | Public SDR receiver locations | ~30min | No |
| OSM Nominatim | Place name geocoding (LOCATE bar) | On-demand | No |
| CARTO Basemaps | Dark map tiles | Continuous | No |
All layers are independently toggleable from the left panel:
| Layer | Default | Description |
|---|---|---|
| Commercial Flights | ✅ ON | Airlines, cargo, GA aircraft |
| Private Flights | ✅ ON | Non-commercial private aircraft |
| Private Jets | ✅ ON | High-value bizjets with owner data |
| Military Flights | ✅ ON | Military & government aircraft |
| Tracked Aircraft | ✅ ON | Special interest watch list |
| Satellites | ✅ ON | Orbital assets by mission type |
| Carriers / Mil / Cargo | ✅ ON | Navy carriers, cargo ships, tankers |
| Civilian Vessels | ❌ OFF | Yachts, fishing, recreational |
| Cruise / Passenger | ✅ ON | Cruise ships and ferries |
| Earthquakes (24h) | ✅ ON | USGS seismic events |
| CCTV Mesh | ❌ OFF | Surveillance camera network |
| Ukraine Frontline | ✅ ON | Live warfront positions |
| Global Incidents | ✅ ON | GDELT conflict events |
| GPS Jamming | ✅ ON | NAC-P degradation zones |
| MODIS Terra (Daily) | ❌ OFF | NASA GIBS daily satellite imagery |
| High-Res Satellite | ❌ OFF | Esri sub-meter satellite imagery |
| KiwiSDR Receivers | ❌ OFF | Public SDR radio receivers |
| Day / Night Cycle | ✅ ON | Solar terminator overlay |
The platform is optimized for handling massive real-time datasets:
- Gzip Compression — API payloads compressed ~92% (11.6 MB → 915 KB)
- ETag Caching —
304 Not Modifiedresponses skip redundant JSON parsing - Viewport Culling — Only features within the visible map bounds (+20% buffer) are rendered
- Clustered Rendering — Ships, CCTV, and earthquakes use MapLibre clustering to reduce feature count
- Debounced Viewport Updates — 300ms debounce prevents GeoJSON rebuild thrash during pan/zoom
- Position Interpolation — Smooth 10s tick animation between data refreshes
- React.memo — Heavy components wrapped to prevent unnecessary re-renders
- Coordinate Precision — Lat/lng rounded to 5 decimals (~1m) to reduce JSON size
live-risk-dashboard/
├── backend/
│ ├── main.py # FastAPI app, middleware, API routes
│ ├── carrier_cache.json # Persisted carrier OSINT positions
│ ├── cctv.db # SQLite CCTV camera database
│ └── services/
│ ├── data_fetcher.py # Core scheduler — fetches all data sources
│ ├── ais_stream.py # AIS WebSocket client (25K+ vessels)
│ ├── carrier_tracker.py # OSINT carrier position tracker
│ ├── cctv_pipeline.py # Multi-source CCTV camera ingestion
│ ├── geopolitics.py # GDELT + Ukraine frontline fetcher
│ ├── region_dossier.py # Right-click country/city intelligence
│ ├── radio_intercept.py # Scanner radio feed integration
│ ├── kiwisdr_fetcher.py # KiwiSDR receiver scraper
│ ├── sentinel_search.py # Sentinel-2 STAC imagery search
│ ├── network_utils.py # HTTP client with curl fallback
│ └── api_settings.py # API key management
│
├── frontend/
│ ├── src/
│ │ ├── app/
│ │ │ └── page.tsx # Main dashboard — state, polling, layout
│ │ └── components/
│ │ ├── MaplibreViewer.tsx # Core map — 2,000+ lines, all GeoJSON layers
│ │ ├── NewsFeed.tsx # SIGINT feed + entity detail panels
│ │ ├── WorldviewLeftPanel.tsx # Data layer toggles
│ │ ├── WorldviewRightPanel.tsx # Search + filter sidebar
│ │ ├── FilterPanel.tsx # Basic layer filters
│ │ ├── AdvancedFilterModal.tsx # Airport/country/owner filtering
│ │ ├── MapLegend.tsx # Dynamic legend with all icons
│ │ ├── MarketsPanel.tsx # Global financial markets ticker
│ │ ├── RadioInterceptPanel.tsx # Scanner-style radio panel
│ │ ├── FindLocateBar.tsx # Search/locate bar
│ │ ├── ChangelogModal.tsx # Version changelog popup
│ │ ├── SettingsPanel.tsx # App settings
│ │ ├── ScaleBar.tsx # Map scale indicator
│ │ ├── WikiImage.tsx # Wikipedia image fetcher
│ │ └── ErrorBoundary.tsx # Crash recovery wrapper
│ └── package.json
# Required
AIS_API_KEY=your_aisstream_key # Maritime vessel tracking (aisstream.io)
# Optional (enhances data quality)
OPENSKY_CLIENT_ID=your_opensky_client_id # OAuth2 — higher rate limits for flight data
OPENSKY_CLIENT_SECRET=your_opensky_secret # OAuth2 — paired with Client ID above
LTA_ACCOUNT_KEY=your_lta_key # Singapore CCTV cameras| Variable | Where to set | Purpose |
|---|---|---|
NEXT_PUBLIC_API_URL |
.env next to docker-compose.yml, or shell env |
Override backend URL when deploying publicly or behind a reverse proxy. Leave unset for auto-detection. |
How auto-detection works: When NEXT_PUBLIC_API_URL is not set, the frontend
reads window.location.hostname in the browser and calls {protocol}//{hostname}:8000.
This means the dashboard works on localhost, LAN IPs, and public domains without
any configuration — as long as the backend is reachable on port 8000 of the same host.
This is an educational and research tool built entirely on publicly available, open-source intelligence (OSINT) data. No classified, restricted, or non-public data sources are used. Carrier positions are estimates based on public reporting. The military-themed UI is purely aesthetic.
Do not use this tool for any operational, military, or intelligence purpose.
This project is for educational and personal research purposes. See individual API provider terms of service for data usage restrictions.
Built with ☕ and too many API calls