OSINT4ALL tool directory
OSINT tools directory
Search the OSINT tools directory by evidence type, access model, pricing, and verification needs so you can choose faster and document the limits.
Filter tools Search, category, pricing, and verification
Editorial standards
Use the data. Keep the judgment.
- Fit and limits stay visible.
- Commercial context cannot buy placement.
- Corrections are reviewed.
Tools
Editorial proof card
digga
Check current domain DNS and registration context
Best for: Investigators starting from a public domain who need to compare live resolver answers and inspect available registration dates…
digga
Check current domain DNS and registration context
Editorial proof card
Validin
Explore historical domain and internet infrastructure observations
Best for: Comparing DNS, certificates and host-related context across an investigation timeline.
Validin
Explore historical domain and internet infrastructure observations
Official-page screenshot
Osintly SAS
Multi-module OSINT search and investigation workspace
Best for: Broad first-pass research across usernames, emails, phone numbers, domains, IP addresses, companies, and cryptocurrency identifiers in one workspace.
Osintly
Multi-module OSINT search and investigation workspace
Official-page screenshot
Pulsedive
Community threat-intelligence search and indicator enrichment
Best for: Enriching domains, IPs, URLs, and indicators with reputation, community threat-intelligence context, and linked observables during triage.
Pulsedive
Community threat-intelligence search and indicator enrichment
Official-page screenshot
DNSlytics
Reverse analytics, DNS, and domain intelligence
Best for: Use it when a website or domain needs passive pivots through analytics IDs, ad IDs, DNS clues, or…
DNSlytics
Reverse analytics, DNS, and domain intelligence
Official-page screenshot
ViewDNS.info
Free web-based DNS and domain lookup tools
Best for: Use it when a domain investigation needs quick manual pivots across several lightweight DNS and hosting checks.
ViewDNS.info
Free web-based DNS and domain lookup tools
Official-page screenshot
WhoisXML API
Domain, DNS, WHOIS, and threat intelligence APIs
Best for: Use it when domain research needs structured enrichment at scale rather than one manual lookup at a time.
WhoisXML API
Domain, DNS, WHOIS, and threat intelligence APIs
Repository screenshot
laramies
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Best for: Collecting first-pass public leads around an organization's domains, hosts, and exposed contact patterns.
theHarvester
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Official-page screenshot
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Best for: Investigating domains, ownership history, DNS relationships, and infrastructure context around suspicious or important web properties.
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Editorial proof card
Microsoft / RiskIQ
Legacy PassiveTotal reference; successor intelligence in Defender
Best for: Interpreting historical RiskIQ PassiveTotal evidence and identifying the current Microsoft documentation for a replacement workflow.
RiskIQ PassiveTotal
Legacy PassiveTotal reference; successor intelligence in Defender
Start by job
Common investigation lanes
Pick a lane when the evidence type is clear and you need a faster shortlist.
Domain / DNS
Domain, host, certificate, IP, and website footprint checks.
Threat triage
Suspicious URLs, files, IPs, breach signals, and reputation checks.
Company research
Registries, filings, public records, and corporate footprint checks.
People & social
Handles, people, public topics, mentions, and media narratives.
Maps / geolocation
Place names, imagery, satellite, map, and sunlight checks.
Archives
Preserve pages, recover deleted sources, and document timelines.
Continue the investigation