Corporate Intelligence & Investigations
75 toolsOSINT tools for due diligence, competitive intelligence, litigation support, asset tracing, supply chain vetting, and cross-border investigations.
Pricing
Min Rating
Top-Rated Tools
Sherlock
4.5/5Hunt usernames across 400+ social networks simultaneously with no API keys or accounts required.
Have I Been Pwned
4.4/5The fastest way to confirm whether an email address appears in known data breaches — free, accurate, and maintained by a single researcher who vets every dataset.
Awesome OSINT
4.3/5A massive, investigator-friendly directory for finding the right OSINT tools before you waste time using the wrong ones.
crt.sh
4.3/5Passive certificate transparency searches uncover subdomains and related infrastructure before you ever touch the target.
Crucix
4.3/527 parallel intelligence feeds, push alerts to your phone, and LLM-powered briefings on demand — self-hosted, no cloud dependency.
DorkSearch
4.3/5889,000+ pre-built Google dorks with an AI dork builder for instant recon
More Tools
Flightradar24
Network ReconReal-time and historical flight tracking via a global ADS-B receiver network
Hunchly
Identity InvestigationAutomatic web capture and evidence management for OSINT investigators
OSINT Framework
Identity InvestigationNavigate from target data type to relevant tools in seconds — an interactive tree that mirrors how investigators actually work, not how tools are alphabetically organized.
OSINT Industries
Identity InvestigationSearch engine for digital footprint — email, phone, username across 200+ sources
TinEye
Identity InvestigationFind where an image originated, when it first appeared online, and every modified version that shares its visual fingerprint — without relying on metadata or keywords.
Web Check
Network ReconPaste a URL and get DNS records, SSL details, security headers, tech stack, WHOIS, and 100+ more domain intelligence checks in a single browser view — in under thirty seconds.
BuiltWith
Network ReconTechnology intelligence — find what any website is built with and who else uses it
Instaloader
Social MediaArchive a complete Instagram profile — posts, stories, reels, metadata, and follower lists — to local storage before the subject deletes it.
KJB DD1206 iProtect
Physical SurveillanceProfessional-grade RF bug detector covering 10 MHz to 6 GHz with digital and analog signal detection — the standard for corporate and professional sweep work.
Proton Mail
Identity InvestigationEnd-to-end encrypted email under Swiss jurisdiction, designed so that Proton itself cannot read your messages.
SpiderFoot
Network ReconMap a target's full digital footprint automatically — domains, IPs, emails, names, and ASNs across 500+ sources.
Sucuri
Network ReconWebsite security platform used by investigators to analyze site integrity, malware, and CDN infrastructure
TCM Security OSINT Course
TrainingPractical OSINT training for investigators and security professionals
Brand24
Social MediaReal-time social media monitoring and brand intelligence for OSINT investigators
FOFA
Network ReconA web-focused internet asset search engine that helps analysts pivot from one exposed fingerprint to broader infrastructure quickly.
GrayHatWarfare
Network ReconFind exposed cloud storage faster by searching indexed public S3 buckets and blob containers tied to real targets.
Hudson Rock
Threat IntelligenceInfostealer intelligence platform exposing compromised credentials from malware-infected machines worldwide
LeakIX
Network ReconInternet-wide scanner for exposed services and data leaks, with a focus on misconfigured databases and sensitive data exposure
NordVPN
Identity InvestigationEncrypted tunnel and threat protection for OSINT investigators working in hostile environments
openSquat
Threat IntelligenceAn open source monitoring tool that helps defenders catch brand lookalike domains before phishing campaigns go live.
Recorded Future
Threat IntelligenceThe leading threat intelligence platform for enterprise security teams
ShadowDragon
Identity InvestigationSocial media intelligence and OSINT automation for law enforcement and enterprise
Social Analyzer
Social MediaSearch a username across 1000+ social networks with confidence-scored results and structured JSON output — a material step above binary found/not-found enumeration.
Social Links
Social MediaEnterprise OSINT platform with 500+ data sources and 1,700+ investigative methods for social media, dark web, and blockchain investigation
Surfshark
Identity InvestigationVPN with built-in identity monitoring and anonymous browsing identity tools
Ubikron
Identity InvestigationThe OSINT browser extension that runs 200+ enrichments from any web page
ADS-B Exchange
Network ReconThe only major flight tracker that refuses to filter opt-out aircraft
Babel Street
Threat IntelligenceGlobal multilingual intelligence platform for government, law enforcement, and enterprise
JMDHKK K18+
Physical SurveillanceThree-in-one RF bug detector, GPS tracker finder, and hidden camera lens detector — the best all-in-one counter-surveillance device for investigators and travelers.
MacPaw
Identity InvestigationMac software suite for system cleanup, file management, and operational hygiene
mihari
Threat IntelligenceA rule-driven OSINT hunting engine that automates recurring infrastructure queries and alerts only on what is newly discovered.
NordPass
Identity InvestigationPassword manager with breach monitoring built for secure credential hygiene
SEMrush
Network ReconCompetitive intelligence and web footprint analysis for digital investigators
ArkhamMirror
Threat IntelligenceA local-first AI document analysis platform that helps investigators extract entities and map relationships without exposing sensitive files to the cloud.
BeenVerified
Identity InvestigationConsolidate criminal records, address history, and associate data on US subjects in a single report — with broader court record coverage than most consumer people-search competitors.
Botometer
Social MediaAn academic bot-detection tool that helps analysts prioritize which Twitter/X accounts deserve closer manual review.
deepdarkCTI
Threat IntelligenceA structured reference of dark web and deep web CTI sources — ransomware tracking sites, IOC feeds, paste monitors, and threat actor Telegram channels — organized for feed coverage auditing.
Findomain
Network ReconA fast passive subdomain enumerator that adds built-in monitoring, history, and alerting for newly exposed assets.
Intelligence X
Identity InvestigationA search engine and permanent data archive that indexes dark web content, full breach records, historical WHOIS, and deleted documents — content that disappeared from the public web still lives here.
Maigret
Identity InvestigationUsername OSINT tool that checks 2,500+ sites, extracts profile data from hits, and automatically pivots to linked identifiers found in discovered accounts.
Netlas
Network ReconInternet scanning platform with 8 billion+ indexed IP addresses for attack surface and infrastructure analysis
Norton Small Business
Threat IntelligenceEndpoint protection and threat detection for small OSINT teams and security firms
OpenPlanter
Threat IntelligenceAutonomous AI investigation agent that resolves entities across corporate registries, campaign finance, lobbying disclosures, and government contracts — surfacing non-obvious connections with evidence citations.
Proton Pass
Identity InvestigationEnd-to-end encrypted password manager with built-in email aliasing for investigators who need compartmentalized identities and Swiss-jurisdiction credential storage.
Recon-ng
Network ReconCLI-based web reconnaissance framework modeled after Metasploit
Setapp
Network ReconCurated Mac app subscription with several tools useful for investigators and security researchers
Dehashed
Identity InvestigationA breach credential database with 14+ billion records, searchable by email, username, phone, IP, domain, and hash.
DeleteMe
Identity InvestigationDelegate the multi-day work of data broker opt-outs to a service that repeats the process quarterly — so re-populated listings get caught, not just the first pass.
FlightAware
Network ReconUS commercial flight tracking with FAA data integration and a developer-friendly API
Hide My Name
Identity InvestigationBudget VPN with wide server coverage for basic IP separation during investigations
mailcat
Identity InvestigationA nickname-to-email discovery tool that helps investigators turn known handles into likely email addresses without contacting the subject.
O&O SafeErase
Identity InvestigationCertified secure disk wiping for investigators who need to sanitize devices before disposal or reuse
PhoneInfoga
Identity InvestigationValidate, format, and enumerate phone numbers from public sources before you invest time in manual investigation.
SecurityTrails
Network ReconHistorical DNS and domain intelligence database covering 10+ years of infrastructure changes
SEON
Identity InvestigationFraud detection and digital identity verification using OSINT-based enrichment
Spokeo
Identity InvestigationConsolidate address history, phone, email, and associate data on US subjects in a single report before you start working individual sources.
Exolyt
Social MediaTikTok analytics platform for account research, trend tracking, and content investigation
Hunter.io
Identity InvestigationEmail address lookup and verification tool that searches publicly indexed sources for addresses associated with a domain
PimEyes
Identity InvestigationFacial recognition search engine that finds where a face appears across the web
NordProtect
Identity InvestigationIdentity theft protection and dark web monitoring from Nord Security
Proton Drive
Identity InvestigationEnd-to-end encrypted cloud storage under Swiss jurisdiction for investigators who can't trust iCloud or Google Drive with case files.
WhatsMyName
Identity InvestigationTakes a username and checks whether an account exists on 500+ platforms via HTTP pattern matching — no login, no scraping, no cost.
Wondershare Recoverit
Identity InvestigationData recovery software for investigators recovering deleted files, drive evidence, and mobile data
Epieos
Identity InvestigationSubmits an email or phone number and returns linked social accounts, Google profile data, and carrier information without touching the target platforms directly.
Maltego
Network ReconThe gold standard for visual link analysis and OSINT pivoting
Telusion (Tossable Digits)
Identity InvestigationVirtual US phone numbers with real carrier attribution, usable for account registration, covert contact, and operational separation.
VesselFinder
Network ReconAIS-based ship tracking that earns its place as a cross-reference tool — and occasionally the primary one
GHunt
Identity InvestigationQueries Google's internal APIs from the command line to extract account metadata from a Gmail address — name, photo, linked services, Maps reviews, and more — for free.
Social Catfish
Identity InvestigationPeople search and reverse lookup platform focused on online identity verification and catfish detection