Backed by mandō

File metadata intelligence,
delivered in nanoseconds.

Intrinsic is the enterprise-grade metadata analytics platform that surfaces inode data, permission matrices, timestamps, and file identity across your entire infrastructure. Stop guessing. Start knowing.

See the Inspector
38+ Format Sequences
4 Timestamp Dimensions
0ms Cold-Start Latency
Inode Resolution
Metadata Inspector LIVE
File config.yml
Size 4,096 B
Inode 8,421,377
Blocks 8
Permissions -rw-r--r--
Octal 0644
Owner deploy:ops
Device fd01h
Access 2026-04-07 09:41:03
Modify 2026-04-06 14:22:18
Change 2026-04-06 14:22:18
Birth 2026-01-15 08:00:00
Palantir Datadog Cloudflare HashiCorp Elastic Grafana Labs Confluent Snowflake

Every byte has a story.
We read all of them.

Intrinsic maps the full lifecycle of every file across your fleet — from birth to last access, from raw mode bits to human-readable context.

🔢

Inode Intelligence™ %i

Every file has a unique identity. Intrinsic surfaces inode numbers, device IDs, and hard link counts to give you filesystem-level truth. No abstraction layer. Pure data, pure signal.

🔐

Permission Matrix™ %a %A

Dual-mode permission analytics: octal for machines, symbolic for humans. Our category-defining access control visibility engine ensures no permission bit goes unobserved. Compliance teams weep with joy.

⏱️

Temporal Analytics™ %x %y %z %w

Four-dimensional timestamp intelligence: access, modify, change, and birth. We don't just show you when — we show you the complete temporal fingerprint of every inode in your fleet.

📐

Custom Format Engine™ -c FORMAT

38+ format sequences wired directly into your analytics pipeline. Build bespoke metadata queries with %a, %s, %n, %F and 34 more dimensions. Your data, your schema, your way.

💾

Block Geometry™ %b %B %o

Understand allocation at the block level. Total blocks, block size, optimal I/O transfer hints — the metrics your storage team has been begging for since the ext4 migration.

🔗

Symlink Resolver™ -L

Follow every symbolic link to its canonical target with our dereference engine. No more broken workflows from dangling pointers. Resolve once, trust forever.

🗄️

Filesystem Analytics™ -f

Elevate from file-level to filesystem-level observability. Total blocks, free blocks, file nodes, filesystem type — the macro view that infrastructure architects demand.

📊

Terse Mode™ -t

Machine-optimized output in a single deterministic line. Purpose-built for pipeline ingestion, log aggregation, and automated compliance auditing at petabyte scale.

The Metadata Inspector.

Click any file to see its complete metadata profile. Every data point, surfaced in real time.

main.py regular file
stat output

                        

The Format Builder.

Construct custom -c FORMAT strings visually. Click format tokens to build your query, see live output instantly.

Identity

Size & Blocks

Permissions

Ownership

Timestamps

Device

$ stat -c '' main.py
Output:

                    

Four timestamps. One truth.

Every file carries four temporal dimensions. Intrinsic visualizes the complete lifecycle from birth to last access.

🌱 Birth · %w
✏️ Modify · %y
🔄 Change · %z
👁️ Access · %x

Hover a timestamp

Explore the four temporal dimensions of file metadata.

From syscall to dashboard in three steps.

01

Point

Target any file, directory, or symlink. Intrinsic accepts single paths or recursive fleet scans across your entire infrastructure.

intrinsic config.yml
02

Analyze

Our metadata engine invokes the stat syscall and hydrates 38+ format dimensions — size, blocks, permissions, timestamps, device IDs, and more.

intrinsic -c '%n %s %a %U %y' *
03

Deliver

Results stream to your dashboard, CI pipeline, or compliance engine. Terse mode for machines. Formatted output for humans. Both simultaneously.

intrinsic -t data.csv | intrinsic ingest

Transparent pricing for every scale.

From startups to global enterprises. No per-inode fees. No hidden costs.

Observer
$0/mo
  • Single-file metadata queries
  • Default format output
  • 4 timestamp dimensions
  • Community support
  • Basic inode resolution
Enterprise
Custom
  • Everything in Analyst
  • Fleet-wide metadata scanning
  • Compliance audit trails
  • Cached attribute modes
  • SELinux context (%C)
  • SSO / SAML / RBAC
  • Dedicated CSM

Metadata teams that ship faster.

★★★★★

"We used to ssh into 400 servers and run stat manually. Intrinsic's fleet scanner saved us 12 engineering hours per audit cycle. The Format Builder alone justified the contract."

Kieran Yamazaki
Kieran Yamazaki
Head of Infrastructure, NordFS
★★★★★

"The four-dimensional timestamp view changed our incident response workflow. We can now pinpoint exactly when a file was born, modified, and when its metadata changed. Best B2B purchase this quarter."

Kira Lindstrom
Kira Lindstrom
VP of Platform, DataCore Systems
★★★★★

"Our compliance team was manually checking file permissions across 20,000 nodes. Intrinsic's terse mode piped into our SIEM replaced six FTEs. I'm not exaggerating. Six."

Simone Nakamura
Simone Nakamura
CISO, FinGuard Capital

Common questions.

What is Intrinsic, really?

Intrinsic is an enterprise-grade wrapper around the Unix intrinsic command — the tool that displays file or filesystem status. We surface inode data, size, blocks, permissions (both octal and symbolic), UID/GID ownership, and four timestamp dimensions (access, modify, change, birth) through a beautiful dashboard interface. Think of us as "stat, but with better marketing."

What's the difference between access, modify, change, and birth timestamps?

Access (%x): When the file content was last read. Modify (%y): When the file content was last written. Change (%z): When the file metadata (permissions, ownership) was last changed. Birth (%w): When the inode was originally created. These four dimensions give you complete temporal coverage of any file's lifecycle.

How does the custom format engine work?

The -c FORMAT option (or --printf=FORMAT) lets you construct custom output strings using 38+ format sequences. For example, intrinsic -c '%n: %s bytes, %A, owner: %U' outputs the filename, size, permissions, and owner. Our Format Builder lets you compose these visually without memorizing the sequences.

What's the difference between file stat and filesystem stat?

By default, intrinsic shows file-level metadata (inode, size, permissions, timestamps). With the -f flag, it switches to filesystem-level analytics — total blocks, free blocks, file node counts, filesystem type. Think file = micro, filesystem = macro.

What does the -L (dereference) flag do?

When you stat a symbolic link, you get the metadata of the link itself. With -L, Intrinsic resolves the symlink and returns the metadata of the target file. Essential for environments with complex symlink topologies.

Is terse mode worth using?

Absolutely. Terse mode (-t) outputs all metadata on a single line in a deterministic format: %n %s %b %f %u %g %D %i %h %t %T %X %Y %Z %W %o %C. It's purpose-built for machine ingestion — pipe it into awk, feed it to your SIEM, or ingest it into your analytics pipeline.

Can I really replace six FTEs with a single stat command?

Results may vary. But between intrinsic -t, find -exec stat, and a good pipeline, you'd be surprised how many manual file audit processes are just stat commands waiting to happen. We're not saying fire your team. We're saying promote them to work on harder problems.

Every file has metadata.
Most teams ignore it.

Join the infrastructure leaders who've made file intelligence a first-class concern. Request access to Intrinsic today.

Backed by mandō