OSINT4ALL tool directory

Search OSINT tools by investigation task.

Search the OSINT tools directory by evidence type, access model, pricing, and verification needs so you can choose faster and document the limits.

26 published profiles No paid ranking Filters
Filter tools Search, category, pricing, and verification
Advanced filters
Reset

Editorial standards

Use the data. Keep the judgment.

  • Fit and limits stay visible.
  • Commercial context cannot buy placement.
  • Corrections are reviewed.

Directory workflow

Start broad. Leave with a shortlist.

Open filters
Search by job Start with the task, source type, signal, or tool name.
Narrow fit Use category, pricing, access, and verification filters.
Pin candidates Build a browser-only shortlist while browsing profiles.
Check context Read caveats and disclosure before visiting the tool.

Start by job

Common investigation lanes

Pick a lane when the evidence type is clear and you need a faster shortlist.

Hunt.io official-page screenshot

Official-page screenshot

Hunt.io

Source checked 2026-09-19

Explore threat-related internet infrastructure observations

Verification: Pending Verification Workflow: Enrichment, Triage Pricing: Freemium

Best for: Defensive research into suspicious services, hosting patterns and reported command-and-control infrastructure.

Editorial

Tool profile

Hunt.io

Explore threat-related internet infrastructure observations

VerifyPending Verification WorkflowEnrichment, Triage AccessFreemium · API, Browser-Based, SaaS
Editorial
Profile Visit tool
IntelOwl official-page screenshot

Official-page screenshot

IntelOwl

Source checked 2026-09-19

Orchestrate indicator enrichment across analysis services

Verification: Pending Verification Workflow: Enrichment, Triage Pricing: Free

Best for: Running controlled enrichment of hashes, domains or other permitted indicators across multiple configured sources.

Editorial

Tool profile

IntelOwl

Orchestrate indicator enrichment across analysis services

VerifyPending Verification WorkflowEnrichment, Triage AccessFree · API, Browser-Based, Self-Hosted
Editorial
Profile Visit tool
MalwareBazaar official-page screenshot

Official-page screenshot

MalwareBazaar

Source checked 2026-09-19

Look up malware sample hashes and associated metadata

Verification: Pending Verification Workflow: Enrichment, Triage Pricing: Free

Best for: Defensive identification of a known file hash without opening or executing the file.

Editorial

Tool profile

MalwareBazaar

Look up malware sample hashes and associated metadata

VerifyPending Verification WorkflowEnrichment, Triage AccessFree · API, Browser-Based
Editorial
Profile Visit tool
OpenCTI official-page screenshot

Official-page screenshot

OpenCTI

Source checked 2026-09-19

Manage structured cyber-threat knowledge and relationships

Verification: Pending Verification Workflow: Enrichment, Triage Pricing: Freemium

Best for: Teams organizing indicators, entities, reports and relationships across multiple intelligence sources.

Editorial

Tool profile

OpenCTI

Manage structured cyber-threat knowledge and relationships

VerifyPending Verification WorkflowEnrichment, Triage AccessFreemium · API, SaaS, Self-Hosted
Editorial
Profile Visit tool
ThreatFox official-page screenshot

Official-page screenshot

ThreatFox

Source checked 2026-09-19

Search community-shared malware indicators

Verification: Pending Verification Workflow: Enrichment, Triage Pricing: Free

Best for: Checking whether a scoped domain, IP or hash appears in reported malware-related indicator data.

Editorial

Tool profile

ThreatFox

Search community-shared malware indicators

VerifyPending Verification WorkflowEnrichment, Triage AccessFree · API, Browser-Based
Editorial
Profile Visit tool
FullHunt official-page screenshot

Official-page screenshot

FullHunt

Source checked 2026-05-26

Attack-surface discovery and domain intelligence platform

Verification: Pending Verification Workflow: Discovery, Enrichment Pricing: Freemium

Best for: Expanding a scoped domain or organization into public assets, technologies, services, and exposure clues before validation.

Editorial

Tool profile

FullHunt

Attack-surface discovery and domain intelligence platform

VerifyPending Verification WorkflowDiscovery, Enrichment AccessFreemium · API, SaaS
Editorial
Profile Visit tool

Tool profile

ANY.RUN

Interactive threat-analysis sandbox

WorkflowVerification AccessFreemium · SaaS
Editorial
Profile Visit tool

Tool profile

Hybrid Analysis

Malware-analysis report community

WorkflowVerification AccessFreemium · SaaS
Editorial
Profile Visit tool
Joe Sandbox official-page screenshot

Official-page screenshot

Joe Security

Source checked 2026-05-07

Automated threat-analysis sandbox

Verification: Verification status not listed Workflow: Verification Pricing: Freemium

Best for: Use it when a security team needs deeper sandbox reporting for an authorized suspicious sample.

Editorial

Tool profile

Joe Sandbox

Automated threat-analysis sandbox

WorkflowVerification AccessFreemium · SaaS
Editorial
Profile Visit tool

Tool profile

AlienVault OTX

Open threat-intelligence community pulses

WorkflowEnrichment AccessFree · SaaS
Editorial
Profile Visit tool

Tool profile

Cisco Talos Intelligence

IP, domain, and email reputation intelligence

WorkflowEnrichment AccessFree · Browser-Based
Editorial
Profile Visit tool

Editorial proof card

OpenDNS / Cisco

Source checked 2026-05-07

Community phishing URL verification

Verification: Verification status not listed Workflow: Verification Pricing: Free

Best for: Use it when a suspicious URL needs phishing-report context before broader URL or infrastructure triage.

Editorial

Tool profile

PhishTank

Community phishing URL verification

WorkflowVerification AccessFree · Browser-Based
Editorial
Profile Visit tool
URLhaus official-page screenshot

Official-page screenshot

abuse.ch

Source checked 2026-05-07

Malware-URL intelligence reference

Verification: Verification status not listed Workflow: Verification Pricing: Free

Best for: Use it when a URL or domain needs malware-distribution context and conservative threat corroboration.

Editorial

Tool profile

URLhaus

Malware-URL intelligence reference

WorkflowVerification AccessFree · Browser-Based
Editorial
Profile Visit tool

Tool profile

BinaryEdge

Internet scanning and risk intelligence

WorkflowEnrichment AccessPaid · SaaS
Editorial
Profile Visit tool
FOFA official-page screenshot

Official-page screenshot

FOFA

Source checked 2026-05-07

Cyberspace asset mapping and search

Verification: Verification status not listed Workflow: Discovery Pricing: Freemium

Best for: Use it when a scoped technical clue needs another asset-search dataset, especially for product or service fingerprinting.

Editorial

Tool profile

FOFA

Cyberspace asset mapping and search

WorkflowDiscovery AccessFreemium · SaaS
Editorial
Profile Visit tool

Tool profile

Netlas.io

Internet asset and attack-surface search

WorkflowDiscovery AccessFreemium · SaaS
Editorial
Profile Visit tool

Tool profile

ONYPHE

Cyber defense search engine and attack-surface data

WorkflowEnrichment AccessFreemium · SaaS
Editorial
Profile Visit tool

Tool profile

ZoomEye

Internet asset search and exposure intelligence

WorkflowDiscovery AccessFreemium · SaaS
Editorial
Profile Visit tool

Continue the investigation

Keep narrowing the field.

OSINT Tool Watch

Keep your tool shortlist current.

Get weekly tool changes, useful comparisons, trust warnings, and workflow notes. No sponsored ranking.