Search OSINT tools by investigation task.

Organize source feeds and monitor recurring research topics

Best for: Building a daily reading and alerting layer for known publications or a specialist research beat.

Monitor feeds and organize research reading with rules

Best for: Maintaining a controlled source list with filters, folders and repeatable review habits.

Research aggregated audience affinities and media habits

Best for: Choosing relevant publications, channels or outreach opportunities for a topic or market.

Search public asset exposure and domain risk context

Best for: An additional perspective on a scoped IP, service or suspicious domain during defensive triage.

Explore threat-related internet infrastructure observations

Best for: Defensive research into suspicious services, hosting patterns and reported command-and-control infrastructure.

Infrastructure intelligence for connected domain and host leads

Best for: Investigating a suspicious web footprint through DNS, certificate and content-related observations.

Find lookalike domains for brand and phishing triage

Best for: Checking suspicious typo, homoglyph and naming variants around an authorized brand or domain.

Scan authorized repositories for possible exposed secrets

Best for: Defensive checks of code and repository history that the analyst is authorized to examine.

Orchestrate indicator enrichment across analysis services

Best for: Running controlled enrichment of hashes, domains or other permitted indicators across multiple configured sources.

Look up malware sample hashes and associated metadata

Best for: Defensive identification of a known file hash without opening or executing the file.

Manage structured cyber-threat knowledge and relationships

Best for: Teams organizing indicators, entities, reports and relationships across multiple intelligence sources.

Map an authorized organization's external asset footprint

Best for: Structured discovery of domains and related infrastructure for a clearly scoped asset inventory.

Discover subdomains from passive sources

Best for: Generating an initial domain inventory before validation and historical research.

Search community-shared malware indicators

Best for: Checking whether a scoped domain, IP or hash appears in reported malware-related indicator data.

Open-source browser crawling and extraction for structured research

Best for: Building a local, configurable collector when analysts need more control over extraction and storage.

Parse documents into structured text and tables

Best for: Preparing PDFs and other document collections for search, comparison or extraction without relying only on copy-and-paste.

Search and retrieve web content for research pipelines

Best for: Programmatic discovery of relevant public pages for a documented, repeatable research workflow.