Changelog

2026-09-15

A full rewrite. One extension supports personal and company use, with sources as data rather than hard-coded links.

Explore and Saved. Explore is the extension's working surface. Add a value, paste text, scan the page in front of you, or take a source lead; Coeus groups current entities for the browser window. Filter, select, trace, save, copy, or open sources from one place. Saved holds only the entities you explicitly choose to keep. The older Lookup, Extract, Verdicts, and Scan addresses redirect into Explore so saved links keep working.

Source packs. The public OSINT sources ship as a built-in pack of 48 entries. Your own sources live locally, and you can subscribe to any number of HTTPS-hosted packs. Coeus refreshes a subscription on a schedule with If-None-Match; a failed refresh keeps the previous copy and reports the error. Mark a source localOnly and it never leaves the browser that added it. The pack format.

Verdicts with your own API keys. Sources include VirusTotal, AbuseIPDB, urlscan.io, Shodan, AlienVault OTX, GreyNoise, IPinfo, abuse.ch, NVD, and crt.sh. Their results and leads flow into Explore, while keys remain in that browser's local storage, never synced or exported. API keys.

Page scanning. Coeus can highlight entities on the page you are reading and add them to Explore. You can scan on demand or enable automatic scanning for origins you allowlist. There is no static content script in the manifest. Page scan.

More entity types. IPv6, CIDR, ASN, MAC, Bitcoin addresses, Windows process names, file paths, registry keys, usernames, phone numbers, people, companies, images, coordinates, and vehicles join IPv4, domains, URLs, email, hashes, and CVEs. Defanged forms (hxxp, [.], [@], (at), \.) are recognized and refanged before typing.

Saved entities and capture. Save an entity and it survives the browser session and is backed up to an optional signed-in account, with reported findings that each name their sources and labelled links to other entities. Trace reads supported source pages and keeps what each rule reports. Rules are data in the built-in pack, updated from the library without an extension update. Only an explicit Save backs up the bounded entity record; raw responses and image thumbnails stay local.

The account. Signing in to a Free account syncs your sources, subscriptions, settings and explicit Saves, and gives the extension the library of packs. Explore holds current work; Saved holds items you explicitly save. A paid case/report plan was proposed at the time and later cancelled.

Also: the context menu, omnibox, tab grouping, sync between signed-in browsers, and a single dark theme remain part of the release.

Onboarding. A five-step visual tour demonstrates pinning the extension, finding entities, tracing, reviewing Findings, saving to Saved, following connections and starting a real trace. When optional Analytics is enabled, Coeus records the named step milestones, completion or skip, and coarse time ranges described in the privacy policy; typed values and individual practice clicks are excluded.

Upgrading from 1.x#

Nothing is required of you, and no new permission is requested. On update Coeus removes the four 1.x storage keys it no longer reads (type, indicator, tools, clientId), records what it migrated from, and shows the what's-new panel once.

Your old tool list is not lost. Settings → Data → Import JSON accepts the 1.x tools shape — it strips the ✅ and 🔐 prefixes from names and turns 🔐 into "auth": true — as well as a type map, a bare array of sources, and a modern pack. The import report lists everything it had to drop before you commit the result.

The last of the 1.x line.

• The right-click Query menu on selected text, with a submenu per entity type.
• The omnibox keyword c: type an entity in the address bar and look it up from anywhere.
• Tab groups: results from one lookup opened together and grouped, rather than scattered across the tab strip.
• A hard-coded list of OSINT sources, edited in the source tree.