Search OSINT tools by investigation task.

Maintain a self-hosted archive of saved web sources

Best for: Building a persistent local or team collection of webpages with multiple preservation outputs.

Query structured research files locally with SQL

Best for: Analyzing large CSV or Parquet collections without first deploying a database server.

Search and organize large document collections for reporting

Best for: Finding names, passages and patterns inside a permitted corpus of reports, scans or recordings.

Inspect public Solana transactions, accounts and tokens

Best for: Verifying a Solana-specific transaction claim from its signature or address.

Organize source feeds and monitor recurring research topics

Best for: Building a daily reading and alerting layer for known publications or a specialist research beat.

Monitor feeds and organize research reading with rules

Best for: Maintaining a controlled source list with filters, folders and repeatable review habits.

Research aggregated audience affinities and media habits

Best for: Choosing relevant publications, channels or outreach opportunities for a topic or market.

Search public asset exposure and domain risk context

Best for: An additional perspective on a scoped IP, service or suspicious domain during defensive triage.

Explore threat-related internet infrastructure observations

Best for: Defensive research into suspicious services, hosting patterns and reported command-and-control infrastructure.

Infrastructure intelligence for connected domain and host leads

Best for: Investigating a suspicious web footprint through DNS, certificate and content-related observations.

Find lookalike domains for brand and phishing triage

Best for: Checking suspicious typo, homoglyph and naming variants around an authorized brand or domain.

Scan authorized repositories for possible exposed secrets

Best for: Defensive checks of code and repository history that the analyst is authorized to examine.

Orchestrate indicator enrichment across analysis services

Best for: Running controlled enrichment of hashes, domains or other permitted indicators across multiple configured sources.