Domain / DNS
Domain, host, certificate, IP, and website footprint checks.
OSINT4ALL tool directory
Search OSINT tools by investigation task.
Search the OSINT tools directory by evidence type, access model, pricing, and verification needs so you can choose faster and document the limits.
Filter tools Search, category, pricing, and verification
Editorial standards
Use the data. Keep the judgment.
- Fit and limits stay visible.
- Commercial context cannot buy placement.
- Corrections are reviewed.
Directory workflow
Start broad. Leave with a shortlist.
Search by job
Start with the task, source type, signal, or tool name.
Narrow fit
Use category, pricing, access, and verification filters.
Pin candidates
Build a browser-only shortlist while browsing profiles.
Check context
Read caveats and disclosure before visiting the tool.
Start by job
Common investigation lanes
Pick a lane when the evidence type is clear and you need a faster shortlist.
Threat triage
Suspicious URLs, files, IPs, breach signals, and reputation checks.
Company research
Registries, filings, public records, and corporate footprint checks.
People & social
Handles, people, public topics, mentions, and media narratives.
Maps / geolocation
Place names, imagery, satellite, map, and sunlight checks.
Archives
Preserve pages, recover deleted sources, and document timelines.
Repository screenshot
Soxoj
Open-source username search with broad site coverage and reports
Verification: Pending Verification
Workflow: Discovery, Pivoting
Pricing: Free
Best for: Building a broad username lead list and exportable report for social-account, alias, or profile-clustering investigations.
Editorial
Maigret
Open-source username search with broad site coverage and reports
Editorial
Repository screenshot
lanmaster53
Open-source modular reconnaissance framework for technical OSINT
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Technical analysts who need repeatable passive reconnaissance and enrichment around domains, organizations, contacts, or infrastructure leads.
Editorial
Recon-ng
Open-source modular reconnaissance framework for technical OSINT
Editorial
Repository screenshot
Sherlock Project
Open-source username discovery across public services
Verification: Pending Verification
Workflow: Discovery, Pivoting
Pricing: Free
Best for: Generating public account leads from a distinctive username during social media, alias, or source research.
Editorial
Sherlock
Open-source username discovery across public services
Editorial
Repository screenshot
WebBreacher
Open-source username discovery
Verification: Verification status not listed
Workflow: Discovery
Pricing: Free
Best for: Finding public account leads from a known username, handle, or alias during people research, source vetting, or identity-corroboration…
Editorial
WhatsMyName
Open-source username discovery
Editorial
Official-page screenshot
SpiderFoot
Automated OSINT collection for scoped leads
Verification: Verification status not listed
Workflow: Enrichment
Pricing: Freemium
Best for: Authorized OSINT automation around domains, IPs, subnets, ASNs, emails, usernames, and organization exposure review.
Tested
SpiderFoot
Automated OSINT collection for scoped leads
Tested
Continue the investigation