Research path

English

A focused view of OSINT4ALL tool profiles mapped to this investigation path.

160 mapped profiles No pay-to-rank ordering

How to use this path

  • Start broad here, then narrow in the directory filters.
  • Open profiles for limits, pricing, and verification notes.
  • Use collections when you need a workflow stack, not one tool.
OSINT Framework official-page screenshot

Official-page screenshot

OSINT Framework

Source checked 2026-05-07

Reference index for OSINT tool categories and discovery paths

Verification: Pending Verification Workflow: Discovery Pricing: Free

Best for: Finding OSINT tool categories and candidate resources during early workflow planning or training.

Editorial

Tool profile

OSINT Framework

Reference index for OSINT tool categories and discovery paths

WorkflowDiscovery AccessFree
Editorial
Open profile
Nmap official-page screenshot

Official-page screenshot

Nmap Project

Source checked 2026-05-07

Open-source network mapper for authorized exposure and service discovery

Verification: Pending Verification Workflow: Discovery, Verification Pricing: Free

Best for: Authorized network inventory, service discovery, exposure validation, and defensive technical assessment.

Editorial

Tool profile

Nmap

Open-source network mapper for authorized exposure and service discovery

WorkflowDiscovery, Verification AccessFree
Editorial
Open profile

Tool profile

Recon-ng

Open-source modular reconnaissance framework for technical OSINT

WorkflowDiscovery, Enrichment AccessFree
Editorial
Open profile

Tool profile

GHunt

Open-source Google account OSINT lead-generation tool

WorkflowDiscovery, Enrichment AccessFree
Editorial
Open profile

Tool profile

Sherlock

Open-source username discovery across public services

WorkflowDiscovery, Pivoting AccessFree
Editorial
Open profile

Tool profile

Maigret

Open-source username search with broad site coverage and reports

WorkflowDiscovery, Pivoting AccessFree
Editorial
Open profile

Tool profile

DomainTools

Commercial domain intelligence for WHOIS history and DNS pivots

WorkflowEnrichment, Pivoting AccessFreemium, Paid
Editorial
Open profile

Tool profile

FOCA

Open-source document metadata analysis for OSINT and exposure review

WorkflowDiscovery, Enrichment AccessFree
Editorial
Open profile
LittleSis official-page screenshot

Official-page screenshot

LittleSis

Source checked 2026-05-27

Public influence and relationship mapping

Verification: Pending Verification Workflow: Discovery, Mapping Pricing: Free

Best for: Mapping public relationships among people, companies, nonprofits, donors, officials, and organizations during influence research.

Editorial

Tool profile

LittleSis

Public influence and relationship mapping

WorkflowDiscovery, Mapping AccessFree
Editorial
Open profile

Tool profile

Holehe

Open-source email registration checker for public account-signal triage

WorkflowDiscovery, Enrichment AccessFree
Editorial
Open profile
VirusTotal official-page screenshot

Official-page screenshot

Google Cloud

Source checked 2026-05-27

Multi-source reputation context for indicators

Verification: Verification status not listed Workflow: Verification Pricing: Freemium

Best for: Quick reputation triage for suspicious URLs, domains, IPs, file hashes, and already-public malware or phishing indicators.

Editorial

Tool profile

VirusTotal

Multi-source reputation context for indicators

WorkflowVerification AccessFreemium
Editorial
Open profile

Tool profile

Wappalyzer

Passive website technology fingerprinting

WorkflowEnrichment AccessFreemium
Editorial
Open profile

Tool profile

Sentinel Hub EO Browser

Browser-based satellite imagery exploration

WorkflowVerification AccessFreemium
Editorial
Open profile

Tool profile

WhatsMyName

Open-source username discovery

WorkflowDiscovery AccessFree
Editorial
Open profile

Tool profile

Hunchly

Automatic web-capture and case-notes tool for online investigations

WorkflowArchiving, Reporting AccessPaid
Editorial
Open profile
GreyNoise official-page screenshot

Official-page screenshot

GreyNoise

Source checked 2026-05-07

Background internet noise intelligence

Verification: Verification status not listed Workflow: Monitoring Pricing: Paid

Best for: Triage of suspicious IPs, scan activity, security alerts, and exposed-service noise where routine internet scanning may explain the…

Sponsored

Tool profile

GreyNoise

Background internet noise intelligence

WorkflowMonitoring AccessPaid
Sponsored
Open profile

Tool profile

urlscan.io

URL render, screenshot, and network trace capture

WorkflowVerification AccessFreemium
Editorial
Open profile

Editorial proof card

Microsoft / RiskIQ

Source checked 2026-05-27

Legacy PassiveTotal context and Microsoft threat intelligence

Verification: Verification status not listed Workflow: Pivoting Pricing: Enterprise

Best for: Understanding legacy PassiveTotal-style passive-DNS, certificate, WHOIS, tracker, reputation, and infrastructure pivots inside current Microsoft threat-intelligence context.

Editorial

Tool profile

RiskIQ PassiveTotal

Legacy PassiveTotal context and Microsoft threat intelligence

WorkflowPivoting AccessEnterprise
Editorial
Open profile