National Security & Government

Multi-engine malware scanner and threat intelligence platform for files, URLs, IPs, and domains

A malware triage tool that quickly tells analysts what an executable is capable of doing and where those behaviors appear.

A modular enrichment engine that lets TheHive analysts analyze observables in place instead of pivoting across dozens of external CTI tools.

An enrichment and response engine that lets TheHive analysts analyze observables and trigger actions without leaving the case workflow.

A structured cluster library that gives threat intelligence events actor, malware, and technique context instead of leaving them as unlabeled IOC collections.

An open source threat intelligence platform built for structured IOC management, community sharing, and fast operational distribution.

The RTL-SDR alternative with tighter frequency accuracy and a complete antenna bundle — better value than the V4 if you don't need shortwave.

Query OpenStreetMap with precision to surface infrastructure, facilities, and location patterns for geospatial investigations.

Fast passive subdomain enumeration that gives pentesters a clean starting point for external recon.

Map sun and moon geometry against real terrain to test whether a photo's claimed place and time make sense.

A massive, investigator-friendly directory for finding the right OSINT tools before you waste time using the wrong ones.

A live C2 infrastructure feed that helps defenders hunt, block, and correlate active command-and-control servers by framework type.

Telegram intelligence platform searching 175M+ posts across 2M+ channels for OSINT and influence operation research

Build faster visual geolocation instincts by training on real-world imagery under repeatable, investigator-relevant conditions.

Automatic web capture and evidence management for OSINT investigators

Store, correlate, and visualize structured threat intelligence using STIX2 as the native data model — with a 150+ connector ecosystem and graph-based investigation workflows designed for serious TI programs.

Find where an image originated, when it first appeared online, and every modified version that shares its visual fingerprint — without relying on metadata or keywords.

Archive a complete Instagram profile — posts, stories, reels, metadata, and follower lists — to local storage before the subject deletes it.

Orchestrate IOC enrichment across 100+ threat intelligence sources through a single API — with automated multi-hop correlation and direct output to MISP, OpenCTI, or DFIR-IRIS.

Professional-grade RF bug detector covering 10 MHz to 6 GHz with digital and analog signal detection — the standard for corporate and professional sweep work.

End-to-end encrypted email under Swiss jurisdiction, designed so that Proton itself cannot read your messages.

Swiss-based VPN with open-source client and strong jurisdiction for journalists and investigators

Map a target's full digital footprint automatically — domains, IPs, emails, names, and ASNs across 500+ sources.

Practical OSINT training for investigators and security professionals

On-chain intelligence platform that deanonymizes blockchain addresses and maps crypto fund flows

A categorized DFIR directory that helps responders discover forensic, malware, and case-management tools with added adoption signals from GitHub metadata.

Internet-wide scanner with certificate transparency coverage no other tool matches.

A web-focused internet asset search engine that helps analysts pivot from one exposed fingerprint to broader infrastructure quickly.

A group-centric ransomware reference that helps defenders translate gang attribution into concrete tools, hunt leads, and detection priorities.

A full-scope domain recon framework that chains proven CLI tools into one repeatable workflow for broad attack surface discovery.

The leading threat intelligence platform for enterprise security teams

Social media intelligence and OSINT automation for law enforcement and enterprise

Real-time satellite tracking and space intelligence platform combining orbital data with geopolitical analysis

Search a username across 1000+ social networks with confidence-scored results and structured JSON output — a material step above binary found/not-found enumeration.

Enterprise OSINT platform with 500+ data sources and 1,700+ investigative methods for social media, dark web, and blockchain investigation

Crowdsourced wireless network database mapping billions of Wi-Fi, Bluetooth, and cell networks globally

Sub-1 GHz wireless transceiver for 433/868 MHz IoT, key fob, and industrial protocol analysis — the dedicated tool for the RF bands that run smart devices.

The only major flight tracker that refuses to filter opt-out aircraft

A purpose-built ADS-B receiver with integrated filter and LNA — better 1090 MHz decode performance out of the box than any generic RTL-SDR dongle.

A curated DFIR resource directory that helps investigators find relevant forensic tools quickly when unfamiliar evidence types appear.

Global multilingual intelligence platform for government, law enforcement, and enterprise

A focused incident response tracking app that helps teams manage systems, artifacts, tasks, and timelines without relying on spreadsheets.

Mac software suite for system cleanup, file management, and operational hygiene

A practical reference directory for finding, comparing, and operationalizing free IOC feeds across MISP, SIEM, and enrichment pipelines.

A centralized exploit search engine that helps analysts check public exploit availability across multiple sources in one place.

Telegram channel analytics platform covering 50+ million channels with growth data and content search

A local-first AI document analysis platform that helps investigators extract entities and map relationships without exposing sensitive files to the cloud.

A free Android forensic utility that simplifies ADB-based extraction and app analysis for investigators without a commercial mobile suite.

A multi-language security tool collection that helps researchers study how offensive and analysis utilities are built across different ecosystems.

Consolidate criminal records, address history, and associate data on US subjects in a single report — with broader court record coverage than most consumer people-search competitors.

A structured reference of dark web and deep web CTI sources — ransomware tracking sites, IOC feeds, paste monitors, and threat actor Telegram channels — organized for feed coverage auditing.

AI-powered geolocation tool that identifies the location of photos from visual content alone

A search engine and permanent data archive that indexes dark web content, full breach records, historical WHOIS, and deleted documents — content that disappeared from the public web still lives here.

Username OSINT tool that checks 2,500+ sites, extracts profile data from hits, and automatically pivots to linked identifiers found in discovered accounts.

End-to-end encrypted password manager with built-in email aliasing for investigators who need compartmentalized identities and Swiss-jurisdiction credential storage.

CLI-based web reconnaissance framework modeled after Metasploit

Curated Mac app subscription with several tools useful for investigators and security researchers

Passively harvest emails, subdomains, and hostnames from public sources before you touch a single target system.

A breach credential database with 14+ billion records, searchable by email, username, phone, IP, domain, and hash.

US commercial flight tracking with FAA data integration and a developer-friendly API

Budget VPN with wide server coverage for basic IP separation during investigations

Certified secure disk wiping for investigators who need to sanitize devices before disposal or reuse

Validate, format, and enumerate phone numbers from public sources before you invest time in manual investigation.

Historical DNS and domain intelligence database covering 10+ years of infrastructure changes

Consolidate address history, phone, email, and associate data on US subjects in a single report before you start working individual sources.

A fast browser-based sun and moon position tool for validating shadow, lighting, and timing hypotheses in geolocation work.

A Tor-routed OSINT crawler that helps analysts map .onion infrastructure, collect contact details, and preserve volatile dark web content.

Reverse face search engine that finds where a face appears across social media and the public web

Email address lookup and verification tool that searches publicly indexed sources for addresses associated with a domain

Cyber defense search engine indexing internet-wide scan data, threat intelligence feeds, and passive DNS

End-to-end encrypted cloud storage under Swiss jurisdiction for investigators who can't trust iCloud or Google Drive with case files.

Run the same dork across multiple search engines and target site collections without rebuilding every query by hand.

Data recovery software for investigators recovering deleted files, drive evidence, and mobile data

Submits an email or phone number and returns linked social accounts, Google profile data, and carrier information without touching the target platforms directly.

Counter-surveillance and tactical equipment retailer carrying RF detectors, GPS tracker detectors, hidden camera finders, TSCM gear, and related hardware from multiple manufacturers.

Phrase and vocabulary training for 140+ languages, including obscure regional languages no other app covers.

Chinese-operated internet search engine for cyberspace — maps exposed services and devices globally

Free ADS-B flight tracking API with multi-year historical archive — the right tool when Flightradar24's history tier is too expensive.

Virtual US phone numbers with real carrier attribution, usable for account registration, covert contact, and operational separation.

AIS-based ship tracking that earns its place as a cross-reference tool — and occasionally the primary one

Queries Google's internal APIs from the command line to extract account metadata from a Gmail address — name, photo, linked services, Maps reviews, and more — for free.