Domain / DNS
Domain, host, certificate, IP, and website footprint checks.
OSINT4ALL tool directory
Search the OSINT tools directory.
This is the core workspace: search by investigation task, evidence type, access model, pricing, and verification context before you click out.
Filter tools Search, category, pricing, and verification
Editorial standards
Use the data. Keep the judgment.
- Fit and limits stay visible.
- Commercial context cannot buy placement.
- Corrections stay reviewed.
Directory workflow
Start broad. Leave with a shortlist.
Search by job
Start with the task, source type, signal, or tool name.
Narrow fit
Use category, pricing, access, and verification filters.
Pin candidates
Build a browser-only shortlist while browsing profiles.
Check context
Read caveats and disclosure before visiting the tool.
Start by job
Common investigation lanes
Pick a lane when the evidence type is clear and you need a faster shortlist.
Threat triage
Suspicious URLs, files, IPs, breach signals, and reputation checks.
Company research
Registries, filings, public records, and corporate footprint checks.
People & social
Handles, people, public topics, mentions, and media narratives.
Maps / geolocation
Place names, imagery, satellite, map, and sunlight checks.
Archives
Preserve pages, recover deleted sources, and document timelines.
Live interface preview
laramies
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Collecting first-pass public leads around an organization's domains, hosts, and exposed contact patterns.
Editorial
theHarvester
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Editorial
Live interface preview
Nmap Project
Open-source network mapper for authorized exposure and service discovery
Verification: Pending Verification
Workflow: Discovery, Verification
Pricing: Free
Best for: Authorized network inventory, service discovery, exposure validation, and defensive technical assessment.
Editorial
Nmap
Open-source network mapper for authorized exposure and service discovery
Editorial
Live interface preview
Megadose
Open-source email registration checker for public account-signal triage
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Checking whether an email address may have public account-registration signals during authorized people or exposure research.
Editorial
Holehe
Open-source email registration checker for public account-signal triage
Editorial
Live interface preview
lanmaster53
Open-source modular reconnaissance framework for technical OSINT
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Technical analysts who need repeatable passive reconnaissance and enrichment around domains, organizations, contacts, or infrastructure leads.
Editorial
Recon-ng
Open-source modular reconnaissance framework for technical OSINT
Editorial
Continue the investigation