KhonsuGraphKHONSUGRAPH
Follow the connections. Uncover the evidence.
An open-source, local-first graph investigation workbench for security, infrastructure, and beyond.
Free & open source · macOS + Windows
A STORY OF EXPLORATION
The history of exploring the unknown is also a history of following traces.
01THE ANCIENT WILDERNESS
In a wilderness without maps, hunters read footprints in the soil, broken branches, and traces left by animals.
One footprint tells little. Connected to the next, those traces reveal a path — where an animal has been, and where it might go.
Connect the tracks.
A direction begins to emerge.
02ANCIENT EGYPT
In ancient Egyptian mythology, Khonsu is the god of the moon, travel, and protection. His name means “traveler,” evoking the moon’s journey across the night sky.
When the sun sets, moonlight shows travelers a way through the darkness.
Darkness does not mean there is no path.
Only that the path is yet to be found.
03THE AGE OF EXPLORATION
Seeking spices and sea routes to the East, navigators sailed into unknown waters.
They read the positions of stars alongside winds, currents, and voyage records to find their bearings on the open ocean.
A lone star is a point of light.
Connected, stars become a chart to navigate by.
04TODAY
Today, threat hunters follow traces through the digital world. Its darkness hides in vast amounts of data.
Security analysts reconstruct attacks from logs. SREs trace service dependencies to locate root causes and understand their impact. Auditors follow transactions and entity relationships to uncover anomalies and risk.
Seemingly unrelated events, assets, and identities
reveal their story through their connections.
From tracks in the wilderness to charts of the night sky and networks of digital relationships,
we have always been doing the same thing:
An open-source, local-first graph investigation workbench for security, infrastructure, and beyond. Make complex relationships visible, and hidden problems traceable.
A hunter isn’t only a threat hunter. It’s anyone who finds problems by following clues and connections.
Trace attack paths and threats.
Trace root causes and dependencies.
Trace anomalous transactions and hidden links.
Explore patterns in complex networks.
KhonsuGraph — Built for Hunters. 为猎手而造。
FROM DATA TO UNDERSTANDING
Bring your data in, ask a precise question, and follow the connections that explain the answer.
Import nodes and relationships from CSV, sync AWS resources, or write a plugin for your own system.
Data sourcesInspect the schema, write a query, and see the results as a table or a graph you can explore.
Query your graphTurn queries into a plain-text .dash file with graph panels, charts, tables, and shared filters.
Build a dashboardYOUR AGENT QUERIES. YOU SEE THE BIG PICTURE.
Let an agent inspect the schema, query the graph, and write a dashboard. You review the result in the desktop app, comment on a plot, and watch the file update.
# 01 — Inspect $ khonsu schema --db graphs/demo # 02 — Query $ khonsu query --db graphs/demo \ --cypher "MATCH (a)-[r:CALLS]->(b) RETURN a, r, b LIMIT 20" # 03 — Validate & review $ khonsu check overview.dash --db graphs/demo $ khonsu open overview.dash
FOLLOW A BETTER QUESTION
Start with the example dashboards in the repository, then bring your own graph.
01 / INFRASTRUCTURE
Trace a path from an internet CIDR to security groups, instances, and the roles they assume.
Open example ↗02 / OPERATIONS
Explore service calls and understand the blast radius of a failing dependency.
Open example ↗03 / INVESTIGATION
Look at relationships between entities, or explore ratings in a trust network.
Open example ↗KhonsuGraph is a free, open-source desktop workbench for local HawDB graphs. It combines Cypher and PostgreSQL-dialect SQL queries, a graph canvas, data-source plugins, and plain-text dashboards.
Graph storage and queries stay on your computer. Source plugins can contact the systems you configure, such as AWS. If you use an external AI agent, its own data and privacy settings apply.
The project has release packaging for Apple silicon macOS and 64-bit Windows. Check GitHub Releases for available packages. Windows packages are unsigned; the latest engine upgrade was validated on macOS.
No. KhonsuGraph is an independent project built on HawDB. It is free and open source under the Apache-2.0 license.
KhonsuGraph uses HawDB’s supported Cypher syntax, which differs from other graph databases. See the query guide for supported patterns and current limitations.
KHONSUGRAPH
Open a graph. Ask your first question.