# Burner Graphing Agent

*/Opportunities/Burner_Graphing_Agent*

## Opportunity Overview

**Wedge**: The initial beachhead is cryptocurrency fraud investigators analyzing massive volumes of unstructured Telegram chat logs and wallet addresses. This niche faces extreme data fragmentation and tight asset-recovery deadlines, requiring instant graph generation to trace flows. Expansion moves from crypto investigations into general corporate due diligence, and finally to mid-market legal discovery teams processing unstructured corporate communications.
**Timing**: Large language models with massive context windows now ingest entire document dumps in a single pass, while native JSON formatting forces reliable entity and relationship extraction without custom NLP pipelines.
**Why This I C P**: Boutique investigation teams operate on fixed-fee project timelines and cannot bill clients for database configuration, making them highly receptive to instant, out-of-the-box analytical capabilities.
**Size Of Prize**: There are approximately 40,000 investigative, due-diligence, and boutique threat intelligence firms globally. At an average annual software spend of $12,000 for ad-hoc analytical tools per agency, the total addressable prize is roughly $480M annually.
**Gap Narrative**: Boutique OSINT and due-diligence firms receive large unstructured data dumps but cannot justify the setup time or cost of enterprise graph databases for single-use investigations. They require a tool that instantly parses a folder of documents into a temporary, queryable entity-relationship graph that maps connections and is discarded when the project ends.
**Defensibility**: The underlying entity extraction is fundamentally a commodity with low barriers to entry. Over time, the platform builds marginal defensibility through workflow lock-in and a proprietary library of domain-specific extraction heuristics, but it lacks a compounding data moat since the graphs are ephemeral by design.
**Why This Thesis**: An autonomous agent matches this workflow because entity extraction and relationship mapping are labor-intensive data-prep tasks; the agent replaces the human data-entry layer, delivering the final visual network as a complete service.

## Opportunity Linked Thesis

**Thesis**: [Agent](/Theses/Agent)

## Opportunity Linked I C P

**Icp**: [Threat Intelligence Firm](/CompanyTypes/Threat_Intelligence_Firm)

## Opportunity Market Sizing

_Illustrative — target and order-of-magnitude estimate figures, not an achieved track record (this Thing is concept-stage)._

**S A M**: ~$150M-250M (US and European private threat intelligence vendors and top-tier enterprise SOCs)
**S O M**: ~$15M-25M
**T A M**: ~15k global threat intelligence and cyber investigation teams × ~$40k-60k/yr average investigative tooling spend ≈ ~$600M-900M
**Growth Rate**: ~15-20%/yr, driven by the increasing use of ephemeral infrastructure and rotating proxies by advanced persistent threats
**Paid Comparable Spend**: ~$10k-25k/yr per analyst on legacy link-analysis software plus hundreds of specialized manual labor hours for data correlation

## Opportunity Incumbents

- [Microsoft Excel](/Products/Microsoft_Excel) — Spreadsheet
- [Google Sheets](/Products/Google_Sheets) — Spreadsheet
- [Python Matplotlib Library](/Products/Python_Matplotlib_Library) — Open-Source
- [ChatGPT Data Analysis](/Products/ChatGPT_Data_Analysis) — Tool
- [Tableau Desktop](/Products/Tableau_Desktop) — Tool
- [Upwork Data Analysts](/Products/Upwork_Data_Analysts) — Service
- [In-House Python Scripts](/Products/In-House_Python_Scripts) — DIY

## Opportunity Win Conditions

**Kill Thresholds**:
- Time-to-first-graph > 30 minutes during onboarding
- D30 user retention < 40%
- Manual override rate > 15% for automated node links
- CAC payback period > 9 months for mid-market SOC teams
- Zero paid enterprise conversions at $40k/yr within 90 days
**Leading Metrics**:
- Time-to-first-graph from raw log upload
- Number of ephemeral IPs mapped per analyst weekly
- Percentage of automated correlations requiring manual analyst override
- Weekly active queries per investigator seat
**What Proves Right**: Threat intelligence analysts connect the Burner Graphing Agent to their raw proxy logs and generate node-link threat maps within ten minutes. Enterprise teams pay $40k annually to automate daily ingestion of ephemeral IP rotations. Day 30 retention exceeds 60% as investigators replace manual Python script maintenance with this tool.
**What Proves Wrong**: Investigators refuse to connect proprietary threat feeds due to data privacy restrictions, limiting the agent to low-value public OSINT data. Analysts revert to custom Python scripts because the agent fails to render complex node clusters legibly. Compliance blockers extend trial periods past 90 days with zero paid conversion.

## Opportunity Build Profile

**Hardest Part**: Maintaining deterministic entity resolution across disjointed unstructured text sources without hallucinating connections or dropping valid nodes. The system must accurately extract and map relationships without human intervention in the initial pass.
**Min Viable Scope**: A single-page application that ingests plain text or PDFs and outputs an interactive directed graph. Deliberately exclude user accounts, collaborative editing, database integrations, and graph state persistence.
**Cold Start Problem**: The system lacks exposure to the obscure unstructured data formats users need to visualize. Break this by seeding the extraction engine with synthetic datasets mimicking common investigative sources like raw chat exports and server logs.
**Time To First Value**: Under 5 minutes to render the first interactive graph from an uploaded raw text dump
**Data Moat Available**: false
**Technical Difficulty**: High

## Neighborhood

### Where the gap lives

- [anti-trafficking and exploitation task forces teams](/CompanyTypes/anti-trafficking_and_exploitation_task_forces_teams) — latent gap · CompanyTypes

### Incumbent in

- [Microsoft Excel](/Software/Microsoft_Excel) — incumbent in · Software
- [Upwork Data Analysts](/Products/Upwork_Data_Analysts) — incumbent in · Products
- [Google Sheets](/Software/Google_Sheets) — incumbent in · Software
- [ChatGPT Data Analysis](/Products/ChatGPT_Data_Analysis) — incumbent in · Products
- [In-House Python Scripts](/Products/In-House_Python_Scripts) — incumbent in · Products
- [Python Matplotlib Library](/Products/Python_Matplotlib_Library) — incumbent in · Products
- [Tableau Desktop](/Products/Tableau_Desktop) — incumbent in · Products

### Applies thesis

- [Threat Intelligence Firm](/CompanyTypes/Threat_Intelligence_Firm) — applies thesis · CompanyTypes

### Embodies

- [Agent](/Theses/Agent) — embodies · Theses

### Similar Opportunities

- [Entity Graph](/Opportunities/Entity_Graph) — similar · Opportunities
- [Graph Topology Builder](/Opportunities/Graph_Topology_Builder) — similar · Opportunities
- [Dark Liquidity Aggregator](/Opportunities/Dark_Liquidity_Aggregator) — similar · Opportunities
- [First-Pass Discovery Agent](/Occupations/Legal_Occupations/Opportunities/First-Pass_Discovery_Agent) — similar · Opportunities
- [Case Data Router](/Opportunities/Case_Data_Router) — similar · Opportunities
- [Referral Outreach Agent](/Opportunities/Referral_Outreach_Agent) — similar · Opportunities
- [OSINT Threat Analyst](/Knowledge/Public_Safety_and_Security/Opportunities/OSINT_Threat_Analyst) — similar · Opportunities
- [Compliance Forensic Analyst](/Opportunities/Compliance_Forensic_Analyst) — similar · Opportunities
- [Forensic Audit Agent](/Opportunities/Forensic_Audit_Agent) — similar · Opportunities
- [AI Chart Extractor](/Opportunities/AI_Chart_Extractor) — similar · Opportunities
- [Fraud Interception Agent](/Opportunities/Fraud_Interception_Agent) — similar · Opportunities
- [Technology Graphing for Corporate Development](/Opportunities/Technology_Graphing_for_Corporate_Development) — similar · Opportunities
- [Autonomous Video Discovery](/Opportunities/Autonomous_Video_Discovery) — similar · Opportunities
- [Deep Web Enrichment for Enterprise](/Opportunities/Deep_Web_Enrichment_for_Enterprise) — similar · Opportunities
- [Supplier Risk Agent](/Opportunities/Supplier_Risk_Agent) — similar · Opportunities
- [AI Threat Correlation for State Bureaus](/Opportunities/AI_Threat_Correlation_for_State_Bureaus) — similar · Opportunities
- [Hidden Conflict Engine](/Industries/Professional,_Scientific,_and_Technical_Services/Opportunities/Hidden_Conflict_Engine) — similar · Opportunities
- [Autonomous KYC Investigator](/Industries/Finance_and_Insurance/Opportunities/Autonomous_KYC_Investigator) — similar · Opportunities
- [Conflict Clearance Engine](/Opportunities/Conflict_Clearance_Engine) — similar · Opportunities
- [Dependency Mapping Engine](/Opportunities/Dependency_Mapping_Engine) — similar · Opportunities