Research path

Cybersecurity Analysts

A focused view of OSINT4ALL tool profiles mapped to this investigation path.

50 mapped profiles No pay-to-rank ordering

How to use this path

  • Start broad here, then narrow in the directory filters.
  • Open profiles for limits, pricing, and verification notes.
  • Use collections when you need a workflow stack, not one tool.

Tool profile

theHarvester

Open-source passive reconnaissance for domains, subdomains, hosts, and emails

WorkflowDiscovery, Enrichment AccessFree
Editorial
Open profile

Editorial proof card

AbuseIPDB

Source checked 2026-05-07

IP abuse-report and reputation lookup service

Verification: Pending Verification Workflow: Enrichment, Verification Pricing: Freemium

Best for: Checking suspicious IP addresses against public abuse reports during security, exposure, and infrastructure triage.

Editorial

Tool profile

AbuseIPDB

IP abuse-report and reputation lookup service

WorkflowEnrichment, Verification AccessFreemium
Editorial
Open profile
EmailRep.io official-page screenshot

Official-page screenshot

EmailRep.io

Source checked 2026-05-07

Email reputation lookup for risk and identity-signal triage

Verification: Pending Verification Workflow: Enrichment, Verification Pricing: Freemium

Best for: Adding email reputation context to fraud, breach, contact-vetting, and people-research triage.

Editorial

Tool profile

EmailRep.io

Email reputation lookup for risk and identity-signal triage

WorkflowEnrichment, Verification AccessFreemium
Editorial
Open profile
Nmap official-page screenshot

Official-page screenshot

Nmap Project

Source checked 2026-05-07

Open-source network mapper for authorized exposure and service discovery

Verification: Pending Verification Workflow: Discovery, Verification Pricing: Free

Best for: Authorized network inventory, service discovery, exposure validation, and defensive technical assessment.

Editorial

Tool profile

Nmap

Open-source network mapper for authorized exposure and service discovery

WorkflowDiscovery, Verification AccessFree
Editorial
Open profile

Tool profile

DomainTools

Commercial domain intelligence for WHOIS history and DNS pivots

WorkflowEnrichment, Pivoting AccessFreemium, Paid
Editorial
Open profile

Tool profile

FOCA

Open-source document metadata analysis for OSINT and exposure review

WorkflowDiscovery, Enrichment AccessFree
Editorial
Open profile

Tool profile

Holehe

Open-source email registration checker for public account-signal triage

WorkflowDiscovery, Enrichment AccessFree
Editorial
Open profile

Tool profile

Recon-ng

Open-source modular reconnaissance framework for technical OSINT

WorkflowDiscovery, Enrichment AccessFree
Editorial
Open profile
VirusTotal official-page screenshot

Official-page screenshot

Google Cloud

Source checked 2026-05-27

Multi-source reputation context for indicators

Verification: Verification status not listed Workflow: Verification Pricing: Freemium

Best for: Quick reputation triage for suspicious URLs, domains, IPs, file hashes, and already-public malware or phishing indicators.

Editorial

Tool profile

VirusTotal

Multi-source reputation context for indicators

WorkflowVerification AccessFreemium
Editorial
Open profile

Tool profile

Hudson Rock Exposure Intelligence

Infostealer exposure intelligence

WorkflowMonitoring AccessPaid
Editorial
Open profile
GreyNoise official-page screenshot

Official-page screenshot

GreyNoise

Source checked 2026-05-07

Background internet noise intelligence

Verification: Verification status not listed Workflow: Monitoring Pricing: Paid

Best for: Triage of suspicious IPs, scan activity, security alerts, and exposed-service noise where routine internet scanning may explain the…

Sponsored

Tool profile

GreyNoise

Background internet noise intelligence

WorkflowMonitoring AccessPaid
Sponsored
Open profile

Editorial proof card

Microsoft / RiskIQ

Source checked 2026-05-27

Legacy PassiveTotal context and Microsoft threat intelligence

Verification: Verification status not listed Workflow: Pivoting Pricing: Enterprise

Best for: Understanding legacy PassiveTotal-style passive-DNS, certificate, WHOIS, tracker, reputation, and infrastructure pivots inside current Microsoft threat-intelligence context.

Editorial

Tool profile

RiskIQ PassiveTotal

Legacy PassiveTotal context and Microsoft threat intelligence

WorkflowPivoting AccessEnterprise
Editorial
Open profile

Tool profile

Shodan

Public-internet exposure search for hosts and services

WorkflowDiscovery AccessFreemium
Tested
Open profile
crt.sh official-page screenshot

Official-page screenshot

Sectigo

Source checked 2026-05-27

Free certificate-transparency lookup for domain pivots

Verification: Verification status not listed Workflow: Discovery Pricing: Free

Best for: Certificate-transparency pivots around domains, organizations, hostnames, SAN entries, fingerprints, and historical infrastructure naming patterns.

Editorial

Tool profile

crt.sh

Free certificate-transparency lookup for domain pivots

WorkflowDiscovery AccessFree
Editorial
Open profile