Search the OSINT tools directory.

Social media search and monitoring

Best for: Use it when a public keyword, brand, or topic needs lightweight social/media monitoring without enterprise tooling.

Brand and media monitoring platform

Best for: Use it when a brand, organization, topic, or public figure needs ongoing mention monitoring and alerting.

Malware-analysis report community

Best for: Use it when a suspicious hash, file, or URL needs malware-analysis context while respecting evidence-sharing limits.

Interactive threat-analysis sandbox

Best for: Use it when an authorized suspicious sample or URL needs behavioral analysis and visual triage.

Automated threat-analysis sandbox

Best for: Use it when a security team needs deeper sandbox reporting for an authorized suspicious sample.

Scholarly and legal web citation preservation

Best for: Use it when a cited web source needs a durable reference for legal, academic, policy, or investigative documentation.

Curated public web archive collections

Best for: Use it when an investigation needs institutionally curated historical web context around public issues, governments, elections, or events.

Open web crawl dataset for large-scale research

Best for: Use it when a project needs large-scale historical web crawl data rather than page-by-page archiving.

IP, domain, and email reputation intelligence

Best for: Use it when an indicator needs reputation or sender context from a major threat-intelligence provider.

Open threat-intelligence community pulses

Best for: Use it when an indicator needs community threat-intelligence context and related indicators.

Open-source threat-intelligence sharing platform

Best for: Use it when a team needs controlled threat-intelligence sharing, correlation, and internal/private community workflows.

Browser-based data decoding and transformation

Best for: Use it when an analyst needs safe, repeatable transformations of indicators, logs, URLs, encodings, or extracted text.

Malware-URL intelligence reference

Best for: Use it when a URL or domain needs malware-distribution context and conservative threat corroboration.

Free web-based DNS and domain lookup tools

Best for: Use it when a domain investigation needs quick manual pivots across several lightweight DNS and hosting checks.

Reverse analytics, DNS, and domain intelligence

Best for: Use it when a website or domain needs passive pivots through analytics IDs, ad IDs, DNS clues, or…

Internet asset search and exposure intelligence

Best for: Use it when a scoped host, service, product, or organization needs additional exposure context beyond Shodan or Censys.

Cyber defense search engine and attack-surface data

Best for: Use it when a technical artifact needs passive cyber-intelligence enrichment and historical context.