Our take
Activerecent releases- Activity
- 53
- Community
- 34
- Issues
- 21
- Pull requests
- 61
+8 stars in the last 30 days
Mitaka is a focused convenience tool with active releases and commits, but its development is heavily concentrated in one contributor and no issues were closed in the measured recent period.
Good fit if
- You want browser-based pivots from selected indicators to a broad set of OSINT services.
- Your workflow benefits from automatic indicator recognition and refanging.
- You are comfortable configuring optional service API keys and using a MIT-licensed extension.
Look elsewhere if
- You need a centralized investigation platform rather than links and scans through external services.
- Your team requires development ownership to be distributed, since most project contributions come from one person.
- Your workflow cannot grant the browser permissions Mitaka needs, including Firefox access to data on websites.
All health signals
| Last commit | 2026-08-29 (1 month ago) |
|---|---|
| Commits, last 90 days | 5 |
| Releases, last 12 months | 9 (latest v2.10.1, 2026-08-27) |
| Contributors | 17 (top contributor: 91% of commits) |
| Issues closed, last 90 days | 0 |
| Project age | 8 years |
Checked on 2026-10-07 with the GitHub API.
Project history
Daily GitHub snapshots since Oct 7, 2026. History covers stars and forks; health signals are not tracked historically.
Stars
1,890Forks
194Change since Nov 13, 2026: 0 stars·+1 forks
Overview
Mitaka helps security researchers and analysts investigate indicators of compromise without manually copying each value into separate services. Select text in a page, and the extension can recognize supported indicator types, undo common defanging patterns, and offer relevant searches or scans.
It is available for Chrome and Firefox and connects users to external OSINT and threat-intelligence services. It is a browser-side investigation aid, not a replacement for a dedicated threat-intelligence platform or a comprehensive analysis workflow.
Key Features
- Detects indicators including domains, email addresses, IPs, URLs, hashes, CVEs, ASNs, and cryptocurrency addresses.
- Refangs common forms such as
example[.]comandhxxp://before searching. - Provides searches across more than 65 listed services, with supported indicator types varying by service.
- Offers URL scanning through services including urlscan.io, Hybrid Analysis, and VirusTotal.
- Lets users enable or disable search engines in the options page.
- Supports optional API keys for certain scans, stored locally per device.
- Provides Chrome and Firefox browser extensions.
Use Cases
- A security analyst reviewing a suspicious email can select an address, domain, or IP and check it against relevant reputation services.
- An incident responder can refang indicators copied from reports or threat feeds, then quickly look up hashes, URLs, and CVEs.
- A threat researcher browsing a security article can pivot from a selected indicator to multiple intelligence sources without switching workflows manually.
- A security operations team can enable only the lookup services it prefers for routine triage in the browser.
What you need
Detected in the repository
- Node.js (from package.json)
- A test suite and automated checks on GitHub Actions
License in plain words
MITpermissive
- Commercial use: yes
- Modify and redistribute: yes
- You must keep: the copyright and license notice
- Share your changes: no
A summary, not legal advice: the LICENSE file is what applies.
Getting Started
Install Mitaka from the Chrome Web Store or Firefox Add-ons. See the README for usage, permissions, and configuration details.
Alternatives
- malwoverview: Malwoverview investigates indicators through CLI, REPL, or TUI workflows, while Mitaka provides browser-based selection and lookup.
| Project | Language | License | Stars | Status |
|---|---|---|---|---|
| mitaka | TypeScript | MIT | 1.9k | Active |
| malwoverview | Python | GPL-3.0 | 4.1k | Active |
Considerations
Mitaka is actively maintained, with recent commits and releases, but contribution activity is highly concentrated in one person. The measured recent issue data shows no issues closed during that period, so teams should evaluate the project's responsiveness for their support needs.
Some scans require API keys for Hybrid Analysis, urlscan.io, or VirusTotal. The README says these keys are stored locally and must be configured separately on each device. Firefox requires permission to access data for all websites. The project states that it does not collect user information; review its source and privacy policy as part of your own extension review.
Found this useful?
Share it with someone who would like mitaka.