Skip to content

WhatsKept

Forensics & Incident Response

Agent‑queryable WhatsApp history from an iOS backup, produced as a local SQLite + FTS5 workspace by a single self‑contained Go binary.

Go Latest v1.10.0 · 14h ago Security brief →

Features

  • Drives and refreshes iOS backups over USB via idevicebackup2
  • Decrypts WhatsApp ChatStorage.sqlite from encrypted iPhone backups using the backup password
  • Processes media locally – OCR, image classification (Apple Vision), voice‑note transcription (whisper.cpp with Metal) and PDF text extraction (PDFKit)
  • Optionally sends images to OpenRouter for cloud description (opt‑in, off by default)

Recent releases

View all 27 releases →
No immediate action
v1.10.0 New feature

macOS arm64 installer

No immediate action
v1.9.0 New feature

Gatekeeper‑free macOS installer

No immediate action
v1.8.1 New feature

macOS arm64 support

No immediate action
v1.8.0 New feature

Gatekeeper‑free macOS arm64 install

No immediate action
v1.7.2 New feature

Gatekeeper quarantine removal

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
3
Forks
0
Languages
Go HTML Swift

Install & Platforms

Install via
binary go
Platforms
macos

Beta — feedback welcome: [email protected]