A Practical Starter Stack for New OSINT Practitioners

Historical web captures for deleted or changed pages

Best for: Historical web-page review, deleted-page recovery, source preservation, claim timelines, profile changes, and before/after web evidence.

Snapshot archiving service for cited web pages

Best for: Quick static snapshots of individual public pages when a second archive path is useful or Wayback capture is…

Search published fact checks across indexed sources

Best for: Discovering published fact-checks, claim-review articles, repeated rumor variants, and prior reporting around a public claim.

Reverse-image search for reuse and chronology checks

Best for: Reverse-image corroboration, earlier-publication checks, image reuse detection, modified-copy discovery, and quick visual-claim triage.

Company registry search for legal-entity grounding

Best for: First-pass company verification, jurisdiction lookup, company-number checks, officer/director pivots, and public-register source discovery.

Primary UK company registry and filing search

Best for: Primary UK company identity, company-number, officer, filing, status, charge, and document checks.

Email pattern and verification

Best for: Professional email discovery, domain search, email verification, and company-linked contact checks around an organization already in scope.

DNS history and domain intelligence for scoped investigations

Best for: Historical DNS, subdomain, IP, nameserver, and registration-adjacent context around domains already in scope.

Passive DNS and subdomain reconnaissance

Best for: Use it when a domain is already in scope and the next job is quick passive mapping before…

Public-internet exposure search for hosts and services

Best for: Fast first-pass checks on scoped IPs, hosts, ASNs, organizations, exposed services, ports, banners, and technology fingerprints.

Browser-based data decoding and transformation

Best for: Use it when an analyst needs safe, repeatable transformations of indicators, logs, URLs, encodings, or extracted text.

Automated OSINT collection for scoped leads

Best for: Authorized OSINT automation around domains, IPs, subnets, ASNs, emails, usernames, and organization exposure review.

Link analysis and graphing for entity investigations

Best for: Graph-led link analysis across entities such as domains, IPs, emails, people, companies, documents, social handles, and infrastructure clues.