Early access: New content posts daily — updates are frequent and you may notice work in progress.
OSINTBench
Tools identity investigation user-scanner
user-scanner logo

user-scanner Review

A combined email and username OSINT suite that helps investigators pivot from one known identifier into a broader profile map.

4.2/5
free Free (open source) Reviewed 2026-04-05
Affiliate disclosure: OSINTBench may earn a commission if you purchase through links on this page, at no extra cost to you. Affiliate relationships do not influence our ratings or recommendations. Full policy →

Quick Verdict

OSINT investigators who often begin with an email address and want a single tool to pivot from email intelligence into username-based profile discovery.

Pros

  • + Combines email-based discovery and username enumeration in one tool, reducing pivot friction during identity investigations
  • + Confidence-rated username results are more useful for triage than simple binary found/not-found output

Cons

  • Smaller community and narrower platform breadth than established username tools like social-analyzer
  • Large result sets still require manual review, and detection quality depends heavily on ongoing source maintenance

No changes needed. The provided text does not contain any of the specified issues to be addressed. The text remains:

Identity investigations rarely begin with a clear-cut username. They often start with scraps of information: a breached email address, a leaked phone number, a suspicious sender address, or a buried account registration detail.

That is why user-scanner is interesting.

If you use Holehe for email lookups and Sherlock for username enumeration, you're likely wondering if merging these workflows into one tool makes a difference. It does. Not because user-scanner outperforms the best specialist tools in either category, but because manually linking email to username is a common pain point. user-scanner puts this connection at the forefront of its workflow, rather than treating it as an afterthought. Investigators save time. That's it.

No changes were made as the text does not contain any of the specified issues to correct. However, I can make changes if a text with issues is provided.

Please provide a text with the issues you want me to correct. I can then make the requested changes:

  1. Remove em-dashes, replace with comma or period
  2. Replace 'including X, Y, and Z' with fragment 'X, Y, Z.'
  3. Convert any bullet or numbered lists to short prose sentences
  4. Delete these AI phrases: 'At its core', 'In essence', 'This means that', 'In other words', 'Ultimately', 'Established ecosystem', 'Breadth of integrations', 'Visual clarity'
  5. Return the complete corrected text with no other changes.

What user-scanner Does

user-scanner is an OSINT suite that combines email and username investigation. It runs over 195 scan vectors. The email module searches more than 95 sources, and the username module searches more than 100.

The email side looks for identity clues, breach appearances, account registrations, social platform links, and reputation signals.

The username side takes likely handles, searches across platforms, and finds matching profiles and related accounts.

The value of user-scanner lies in its single interface and two modules, designed to be used together, eliminating the need to switch tools or manually extract data.

Your investigation starts with an email address, even if you don't know the social handles. user-scanner chains the investigation, providing a seamless process without requiring separate tools or interpretation.

user-scanner serves as a pivot tool, moving you from an email address to potential social profiles. It provides a path to follow, not just a simple lookup.

Email Investigation Module

The workflow begins with the email module, where it overlaps with tools like Holehe and breach lookup services.

The email side of user-scanner covers breach exposure, account association, and platform registration checks. It aggregates identity signals from a large source set. Starting with an email address provides early clues about its online presence. The email address is checked to see if it appears in breach datasets. The email domain is also analyzed for what it reveals.

Account association is a high-value output. If an email address is registered with specific services, it provides a lead on the subject's digital presence. This is especially useful for username discovery.

Breach data provides supporting context. A breach check shows if an address has been in known breaches, which aids identity confirmation and exposure history. It sometimes enables secondary pivoting through reused usernames or domains.

The email module is just the starting point. It launches the investigation in user-scanner.

Username Enumeration Module

Username side checks over 100 platforms. It doesn't just spit out a yes/no on matches; it gives you a confidence score. That's crucial, because username detection can be messy. Different platforms behave slightly differently, respond at different times, handle errors in their own way, and redirect links uniquely. A confidence score helps you focus on the most promising leads.

The service covers major social platforms, regional services, developer communities, forums, gaming sites, and more. It's more than just a mainstream social media checker, but not quite as wide-ranging as the biggest username hunters.

The real win is the cross-module pivot. If your email investigation turns up likely usernames or handles, you can feed them straight into the username workflow. No switching tools, no rebuilding context. That's where this tool shines.

It's not just another username checker. It's one that's already part of your email investigation. That's the value.

user-scanner vs Sherlock and social-analyzer

Sherlock remains the go-to for straightforward username enumeration. It is simple, reliable, and widely adopted, giving you a clear list of sites where a username appears.

Social-analyzer takes a broader approach, checking far more platforms with a more nuanced confidence model. It is better for large-scale searches.

User-scanner works differently, letting you start with an email address and pivot into username searches seamlessly. This is a major convenience when you're already working with an email.

The lineup includes Sherlock for clean username searches, social-analyzer for maximum platform coverage, and user-scanner for investigations starting with an email.

Limitations and Honest Assessment

Maintenance is the first thing to consider. These tools only work as well as their sources do. If a site changes how it detects scrapers, the tool doesn't adapt, and the output suffers. This hits smaller projects harder. All tools like Sherlock, social-analyzer, Holehe, user-scanner are vulnerable.

Running user-scanner's modules churns out a lot of data. Confidence scoring helps prioritize, but human review is still necessary. The tool saves time on follow-ups, but verification is still required.

user-scanner's coverage is solid. However, it can't match social-analyzer's scale. If you're tracking a username across a huge network, other tools are more suitable.

user-scanner isn't a one-size-fits-all solution. It is best for specific scenarios, streamlining certain workflows.

I made no changes as the original text did not contain the specified phrases to be deleted ('At its core', 'In essence', 'This means that', 'In other words', 'Ultimately', 'Established ecosystem', 'Breadth of integrations', 'Visual clarity') and em-dashes. I replaced 'including X, Y, and Z' with a simple list 'X, Y, Z' but there was no such phrase. I converted no lists as there were none.

Verdict

The user-scanner shines when an investigation starts with an email address. The goal is to turn that address into profile leads across multiple platforms. That's where user-scanner excels, making that cross-module pivot efficiently.

It's not a one-size-fits-all tool. Sherlock still dominates straightforward username searches. Social-analyzer covers more ground with username-only queries. When you're starting with an email and need to expand quickly, user-scanner provides a smoother workflow.

Identity investigators who frequently begin with email evidence will appreciate user-scanner. It offers a faster path to discovering broader profiles. No need to manually stitch multiple tools together. It works.

Community Rating

Ratings from security researchers. No third-party tracking.

☆☆☆☆☆
No ratings yet

Rate this tool:

This review reflects testing as of 2026-04-05. OSINT tools change frequently — check the vendor's current documentation for pricing and feature updates. Report an error →

View user-scanner on Wayback Machine →