Domain / DNS
Domain, host, certificate, IP, and website footprint checks.
OSINT4ALL tool directory
Search OSINT tools by investigation task.
Search the OSINT tools directory by evidence type, access model, pricing, and verification needs so you can choose faster and document the limits.
Filter tools Search, category, pricing, and verification
Editorial standards
Use the data. Keep the judgment.
- Fit and limits stay visible.
- Commercial context cannot buy placement.
- Corrections are reviewed.
Directory workflow
Start broad. Leave with a shortlist.
Search by job
Start with the task, source type, signal, or tool name.
Narrow fit
Use category, pricing, access, and verification filters.
Pin candidates
Build a browser-only shortlist while browsing profiles.
Check context
Read caveats and disclosure before visiting the tool.
Start by job
Common investigation lanes
Pick a lane when the evidence type is clear and you need a faster shortlist.
Threat triage
Suspicious URLs, files, IPs, breach signals, and reputation checks.
Company research
Registries, filings, public records, and corporate footprint checks.
People & social
Handles, people, public topics, mentions, and media narratives.
Maps / geolocation
Place names, imagery, satellite, map, and sunlight checks.
Archives
Preserve pages, recover deleted sources, and document timelines.
Official-page screenshot
Phil Harvey
Local metadata extraction for files and media
Verification: Verification status not listed
Workflow: Reporting
Pricing: Free
Best for: Reading, comparing, exporting, and cleaning metadata from local image, video, audio, PDF, and document files during verification workflows.
Tested
ExifTool
Local metadata extraction for files and media
Tested
Official-page screenshot
HIBP
Breach exposure lookup for emails and domains
Verification: Verification status not listed
Workflow: Verification
Pricing: Free
Best for: Checking known breach, paste, password, domain, and supported stealer-log exposure in defensive account-security, credential-hygiene, and incident-response workflows.
Tested
Have I Been Pwned
Breach exposure lookup for emails and domains
Tested
Official-page screenshot
Maltego
Link analysis and graphing for entity investigations
Verification: Verification status not listed
Workflow: Mapping
Pricing: Paid
Best for: Graph-led link analysis across entities such as domains, IPs, emails, people, companies, documents, social handles, and infrastructure clues.
Tested
Maltego
Link analysis and graphing for entity investigations
Tested
Official-page screenshot
Shodan
Public-internet exposure search for hosts and services
Verification: Verification status not listed
Workflow: Discovery
Pricing: Freemium
Best for: Fast first-pass checks on scoped IPs, hosts, ASNs, organizations, exposed services, ports, banners, screenshots, and technology fingerprints.
Tested
Shodan
Public-internet exposure search for hosts and services
Tested
Official-page screenshot
SpiderFoot
Automated OSINT collection for scoped leads
Verification: Verification status not listed
Workflow: Enrichment
Pricing: Freemium
Best for: Authorized OSINT automation around domains, IPs, subnets, ASNs, emails, usernames, and organization exposure review.
Tested
SpiderFoot
Automated OSINT collection for scoped leads
Tested
Continue the investigation