Search OSINT tools by investigation task.

Open threat-intelligence community pulses

Best for: Use it when an indicator needs community threat-intelligence context and related indicators.

IP, domain, and email reputation intelligence

Best for: Use it when an indicator needs reputation or sender context from a major threat-intelligence provider.

Open-source threat-intelligence sharing platform

Best for: Use it when a team needs controlled threat-intelligence sharing, correlation, and internal/private community workflows.

Internet scanning and risk intelligence

Best for: Use it when a security workflow needs another passive dataset for exposed-service and infrastructure context.

Cyber defense search engine and attack-surface data

Best for: Use it when a technical artifact needs passive cyber-intelligence enrichment and historical context.

Internet asset search and exposure intelligence

Best for: Use it when a scoped host, service, product, or organization needs additional exposure context beyond Shodan or Censys.

Enterprise intelligence platform for multilingual risk and threat workflows

Best for: Enterprise teams evaluating commercial intelligence coverage for threat, identity, vendor-risk, or multilingual monitoring workflows.

Domain, DNS, WHOIS, and threat intelligence APIs

Best for: Use it when domain research needs structured enrichment at scale rather than one manual lookup at a time.

Browser extension for quick IOC and threat-intelligence pivots

Best for: Pivoting from domains, IPs, URLs, hashes, and CVEs into reputation and threat-intelligence sources during triage.

Open-source passive reconnaissance for domains, subdomains, hosts, and emails

Best for: Collecting first-pass public leads around an organization's domains, hosts, and exposed contact patterns.

Commercial domain intelligence for WHOIS history and DNS pivots

Best for: Investigating domains, ownership history, DNS relationships, and infrastructure context around suspicious or important web properties.