OSINT4ALL tool directory

Search OSINT tools by investigation task.

Search the OSINT tools directory by evidence type, access model, pricing, and verification needs so you can choose faster and document the limits.

38 published profiles No paid ranking Filters
Filter tools Search, category, pricing, and verification
Advanced filters
Reset

Editorial standards

Use the data. Keep the judgment.

  • Fit and limits stay visible.
  • Commercial context cannot buy placement.
  • Corrections are reviewed.

Directory workflow

Start broad. Leave with a shortlist.

Open filters
Search by job Start with the task, source type, signal, or tool name.
Narrow fit Use category, pricing, access, and verification filters.
Pin candidates Build a browser-only shortlist while browsing profiles.
Check context Read caveats and disclosure before visiting the tool.

Start by job

Common investigation lanes

Pick a lane when the evidence type is clear and you need a faster shortlist.

Tool profile

Arkham

Explore on-chain activity with entity labels and visual context

VerifyPending Verification WorkflowAnalysis, Verification AccessFreemium · Browser-Based, SaaS
Editorial
Profile Visit tool
Criminal IP official-page screenshot

Official-page screenshot

Criminal IP

Source checked 2026-09-19

Search public asset exposure and domain risk context

Verification: Pending Verification Workflow: Discovery, Pivoting, Verification Pricing: Freemium

Best for: An additional perspective on a scoped IP, service or suspicious domain during defensive triage.

Editorial

Tool profile

Criminal IP

Search public asset exposure and domain risk context

VerifyPending Verification WorkflowDiscovery, Pivoting, Verification AccessFreemium · API, Browser-Based, SaaS
Editorial
Profile Visit tool
Hunt.io official-page screenshot

Official-page screenshot

Hunt.io

Source checked 2026-09-19

Explore threat-related internet infrastructure observations

Verification: Pending Verification Workflow: Enrichment, Triage Pricing: Freemium

Best for: Defensive research into suspicious services, hosting patterns and reported command-and-control infrastructure.

Editorial

Tool profile

Hunt.io

Explore threat-related internet infrastructure observations

VerifyPending Verification WorkflowEnrichment, Triage AccessFreemium · API, Browser-Based, SaaS
Editorial
Profile Visit tool
Silent Push official-page screenshot

Official-page screenshot

Silent Push

Source checked 2026-09-19

Infrastructure intelligence for connected domain and host leads

Verification: Pending Verification Workflow: Discovery, Pivoting, Verification Pricing: Freemium

Best for: Investigating a suspicious web footprint through DNS, certificate and content-related observations.

Editorial

Tool profile

Silent Push

Infrastructure intelligence for connected domain and host leads

VerifyPending Verification WorkflowDiscovery, Pivoting, Verification AccessFreemium · API, Browser-Based, SaaS
Editorial
Profile Visit tool

Tool profile

Validin

Explore historical domain and internet infrastructure observations

VerifyPending Verification WorkflowDiscovery, Pivoting, Verification AccessFreemium · API, Browser-Based, SaaS
Editorial
Profile Visit tool
dnstwist repository screenshot

Repository screenshot

dnstwist

Source checked 2026-09-19

Find lookalike domains for brand and phishing triage

Verification: Pending Verification Workflow: Discovery, Pivoting, Verification Pricing: Free

Best for: Checking suspicious typo, homoglyph and naming variants around an authorized brand or domain.

Editorial

Tool profile

dnstwist

Find lookalike domains for brand and phishing triage

VerifyPending Verification WorkflowDiscovery, Pivoting, Verification AccessFree · Browser-Based, Desktop
Editorial
Profile Visit tool
Gitleaks official-page screenshot

Official-page screenshot

Gitleaks

Source checked 2026-09-19

Scan authorized repositories for possible exposed secrets

Verification: Pending Verification Workflow: Discovery, Pivoting, Verification Pricing: Free

Best for: Defensive checks of code and repository history that the analyst is authorized to examine.

Editorial

Tool profile

Gitleaks

Scan authorized repositories for possible exposed secrets

VerifyPending Verification WorkflowDiscovery, Pivoting, Verification AccessFree · Desktop
Editorial
Profile Visit tool
IntelOwl official-page screenshot

Official-page screenshot

IntelOwl

Source checked 2026-09-19

Orchestrate indicator enrichment across analysis services

Verification: Pending Verification Workflow: Enrichment, Triage Pricing: Free

Best for: Running controlled enrichment of hashes, domains or other permitted indicators across multiple configured sources.

Editorial

Tool profile

IntelOwl

Orchestrate indicator enrichment across analysis services

VerifyPending Verification WorkflowEnrichment, Triage AccessFree · API, Browser-Based, Self-Hosted
Editorial
Profile Visit tool
MalwareBazaar official-page screenshot

Official-page screenshot

MalwareBazaar

Source checked 2026-09-19

Look up malware sample hashes and associated metadata

Verification: Pending Verification Workflow: Enrichment, Triage Pricing: Free

Best for: Defensive identification of a known file hash without opening or executing the file.

Editorial

Tool profile

MalwareBazaar

Look up malware sample hashes and associated metadata

VerifyPending Verification WorkflowEnrichment, Triage AccessFree · API, Browser-Based
Editorial
Profile Visit tool
OpenCTI official-page screenshot

Official-page screenshot

OpenCTI

Source checked 2026-09-19

Manage structured cyber-threat knowledge and relationships

Verification: Pending Verification Workflow: Enrichment, Triage Pricing: Freemium

Best for: Teams organizing indicators, entities, reports and relationships across multiple intelligence sources.

Editorial

Tool profile

OpenCTI

Manage structured cyber-threat knowledge and relationships

VerifyPending Verification WorkflowEnrichment, Triage AccessFreemium · API, SaaS, Self-Hosted
Editorial
Profile Visit tool
OWASP Amass official-page screenshot

Official-page screenshot

OWASP Amass

Source checked 2026-09-19

Map an authorized organization's external asset footprint

Verification: Pending Verification Workflow: Discovery, Pivoting, Verification Pricing: Free

Best for: Structured discovery of domains and related infrastructure for a clearly scoped asset inventory.

Editorial

Tool profile

OWASP Amass

Map an authorized organization's external asset footprint

VerifyPending Verification WorkflowDiscovery, Pivoting, Verification AccessFree · Desktop, Self-Hosted
Editorial
Profile Visit tool
ThreatFox official-page screenshot

Official-page screenshot

ThreatFox

Source checked 2026-09-19

Search community-shared malware indicators

Verification: Pending Verification Workflow: Enrichment, Triage Pricing: Free

Best for: Checking whether a scoped domain, IP or hash appears in reported malware-related indicator data.

Editorial

Tool profile

ThreatFox

Search community-shared malware indicators

VerifyPending Verification WorkflowEnrichment, Triage AccessFree · API, Browser-Based
Editorial
Profile Visit tool

Tool profile

Chainabuse

Public crypto scam and suspicious-address reporting database

VerifyPending Verification WorkflowDiscovery, Triage AccessFree · Browser-Based
Editorial
Profile Visit tool
FullHunt official-page screenshot

Official-page screenshot

FullHunt

Source checked 2026-05-26

Attack-surface discovery and domain intelligence platform

Verification: Pending Verification Workflow: Discovery, Enrichment Pricing: Freemium

Best for: Expanding a scoped domain or organization into public assets, technologies, services, and exposure clues before validation.

Editorial

Tool profile

FullHunt

Attack-surface discovery and domain intelligence platform

VerifyPending Verification WorkflowDiscovery, Enrichment AccessFreemium · API, SaaS
Editorial
Profile Visit tool

Tool profile

Pulsedive

Community threat-intelligence search and indicator enrichment

VerifyPending Verification WorkflowTriage, Verification AccessFreemium · API, Browser-Based
Editorial
Profile Visit tool

Tool profile

Etherscan

Ethereum blockchain explorer for public wallet and transaction research

VerifyPending Verification WorkflowDiscovery, Verification AccessFree · API, Browser-Based
Editorial
Profile Visit tool

Tool profile

ANY.RUN

Interactive threat-analysis sandbox

WorkflowVerification AccessFreemium · SaaS
Editorial
Profile Visit tool

Tool profile

Hybrid Analysis

Malware-analysis report community

WorkflowVerification AccessFreemium · SaaS
Editorial
Profile Visit tool

Continue the investigation

Keep narrowing the field.

OSINT Tool Watch

Keep your tool shortlist current.

Get weekly tool changes, useful comparisons, trust warnings, and workflow notes. No sponsored ranking.