An investigation rarely lives in one tool. Notes sit in one place, screenshots in another, search results in browser tabs that close, and the reasoning that connects them stays in someone's head. When the work has to be explained to a client, a court or a colleague who joins late, half of it has to be rebuilt.
Durandir Harness keeps that work together. A case holds the people, organisations, accounts, domains and documents you are looking at, the sources each fact came from, and the steps taken to get there. It is one of the tools we build, and it works alongside the others: what Durandir Agent, Intelligence, Counterintelligence and Cybersecurity find lands in the same case.
It is a desktop application. You install it, open a case, and work.
Evidence you can trace back
Each finding in Harness carries where it came from: the page, the query, the file, the time it was captured. Nothing enters a case as a bare claim. When a source changes or disappears, the captured copy stays in the case, so a conclusion can still be checked months later.
Findings are linked into a graph. A person connects to an email address, the address to a domain registration, the registration to a company. You can follow those links in either direction and see which ones rest on a single source and which are confirmed by several.
Reports are built from that graph. A statement in a report points to the evidence behind it, and the reader can follow it to the original capture.
Local by design
Case data stays on the device where Harness runs. The evidence vault, the graph and the working files are stored locally. Durandir does not receive your investigations and has no way to read them.
The only data that reaches Durandir is what a licence needs to be issued and validated. Licensing records are kept apart from anything a case contains and are not used to reconstruct what you investigate.
Network access is under your control. Harness can route its requests through Tor or a proxy you choose.
Who uses it
Harness is built for investigators, analysts, due diligence teams, security researchers and journalists: people whose findings have to stand up when somebody else examines them.
It is intended for lawful professional use. Before you investigate a person, an account or a system, you need a legal basis and any consent or authorisation the law requires. Our Responsible Use Policy sets out where that line is.