Marwan Naili

I build things that work. OSINT platforms, security tools, AI systems, and APIs — usually deployed on free-tier infrastructure because that's what I have access to. Based in Algeria, working with clients globally.

Projects

Argus OSINT Python · React · live

An OSINT investigation platform with 81 plugins (DNS, Shodan, Truecaller, breach data, sanctions, blockchain, image search). Multi-target investigations that cross-reference phone, email, domain, and image data automatically. Entity engine, correlation engine, AI analysis, crypto payments. Think Maltego but free and self-hostable.

FastAPIReactSQLAlchemySupabase81 plugins
Face Intel Python · ONNX · live

Reverse image and face search platform. 16 providers running in parallel — visual matching, face recognition with ArcFace embeddings, ELA forensics, OCR, NSFW detection, AI-image detection. Uses sqlite-vec for vector search. The open-source PimEyes alternative.

FastAPIInsightFacesqlite-vecSerpAPIOpenCV
Phone Intel Python · live

Phone number intelligence API aggregating 19 data sources in parallel. Authenticated Truecaller integration (caller ID, spam scores, badges, social profiles), Sync.ME, carrier lookup, breach data, OSINT mentions. Consensus voting engine picks the best caller name across sources.

FastAPITruecaller APIDeno Deploy19 sources
Agent Architect System TypeScript · Python

Multi-agent AI orchestration platform. Persistent subagent management, real-time SSE log streaming, API key rotation between Groq and NVIDIA, SQLite state persistence, Telegram admin panel for remote control.

FlaskGroq APISSETelegram Bot
DeadSwitch Python · Cryptography

A dead man's switch with zero-knowledge design. AES-256-GCM encryption, Argon2id key derivation, Shamir's Secret Sharing for fault-tolerant key splitting. Built for situations where data needs to be released automatically if something happens to the owner.

AES-256-GCMArgon2idShamir's Secret Sharing
Bounty Radar Python · GitHub Actions

Automated bounty hunter that scans GitHub for open-source bounties every 6 hours. Filters out scams and over-competitive ones, scores by payout vs effort, posts ranked matches to a private Telegram channel with draft cover letters.

PythonGitHub ActionsTelegram Bot
MedScan Kotlin · Android

AI-powered medical self-diagnosis Android app. Multilingual, offline-first, privacy-focused. Symptom analysis powered by LLMs with a clean Kotlin UI.

KotlinAndroidAI
Autonomous Pentest Framework Python · Docker

AI-driven penetration testing platform. Flask backend orchestrates LLM-powered recon and analysis using rotating free Gemini API keys. Dedicated toolbox container, SQLite target tracking, automated report generation.

FlaskGemini APIDocker

Stack

PythonFastAPIReact / TypeScriptKotlinSQLAlchemyPostgreSQLSQLiteDockerSupabaseOpenCVONNX RuntimeInsightFace / ArcFacesqlite-vecCytoscape.jsGitHub ActionsGemini / OpenAI APINOWPaymentsBlockchain / Etherscan

Contact

Open to freelance work, collaborations, and interesting problems.