Mannan A.

While most developers scrape websites, I build systems that watch the dark web. For 12+ years I’ve been building software, and for the last several I’ve focused on one thing: helping security teams find threats before those threats find them. I’m the founder and lead engineer of Orion Intelligence, a unified OSINT and investigative intelligence platform I designed and built from the ground up. Today it: 🔹 Indexes 14.2 billion+ records from leak sites, Telegram channels, underground forums, stealer logs and exposed accounts 🔹 Tracks 240+ ransomware groups in real time: actor profiles, victim claims, leak-site changes and impact notes 🔹 Processes 1.4 TB+ of threat data at 99.98% uptime 🔹 Turns raw signals into action through case management, evidence timelines, remediation guidance and STIX 2.1 exports to SIEM and SOAR tools 🔹 Runs on 10+ modules I engineered: Tor/I2P crawlers, a collection framework, an AI investigation engine (LangGraph + local LLMs), an Android acquisition browser (Kotlin/GeckoView), malware-scanning microservices, sandboxed execution and a Tor2Web gateway So when you hire me, you’re not paying someone to learn on your project. You’re getting someone who has already solved the hard problems at scale: anti-bot evasion, Tor reliability, deduplicating billions of records, and fast search across messy multilingual data. WHAT I CAN BUILD FOR YOU ▸ Dark web, Tor and I2P crawlers. Stable, distributed scrapers using Python, Playwright, Celery and rotating Tor circuits. ▸ Threat intelligence platforms and dashboards. Search engines and analyst workspaces on Elasticsearch, MongoDB, FastAPI and Angular/React. ▸ Ransomware, leak and stealer-log monitoring. Alerts the moment your company, domain or clients appear somewhere they shouldn’t. ▸ Brand and executive exposure monitoring. Leaked credentials, impersonation and data-breach detection. ▸ AI-powered investigation tools. LLM agents, NLP entity extraction and automated threat summaries. ▸ Secure whistleblowing portals. I’m an active contributor to GlobaLeaks, the open-source platform used by journalists and NGOs worldwide. ▸ Telegram and social intelligence pipelines. Channel monitoring, translation and actor correlation. WHY CLIENTS TRUST ME ✔ Former Threat Hunter at TRG Research & Development ✔ Founders Program at LUMS ✔ GlobaLeaks core contributor (Italy) ✔ 12+ years across startups and enterprises, from first line of code to production at scale HOW I WORK You get clear milestones, regular updates, clean documented code and Docker-ready deployment. I don’t disappear mid-project, and I explain technical decisions in plain language. If you need to know what’s being said about your organization in places Google can’t reach, let’s talk. Send me a message with what you want to monitor or build, and I’ll reply with a practical plan, usually within the same day.