Search OSINT tools by investigation task.

Free web-based DNS and domain lookup tools

Best for: Use it when a domain investigation needs quick manual pivots across several lightweight DNS and hosting checks.

Internet asset search and exposure intelligence

Best for: Use it when a scoped host, service, product, or organization needs additional exposure context beyond Shodan or Censys.

U.S. campaign finance and lobbying research database

Best for: Researching U.S. political donations, lobbying records, PACs, industries, candidates, committees, and money-in-politics patterns.

Open-source passive reconnaissance for domains, subdomains, hosts, and emails

Best for: Collecting first-pass public leads around an organization's domains, hosts, and exposed contact patterns.

Open-source document metadata analysis for OSINT and exposure review

Best for: Inspecting public document metadata for usernames, software clues, paths, and organization context during authorized research.

Open-source Google account OSINT lead-generation tool

Best for: Checking public Google-account signals from an email, Gaia ID, Drive artifact, or account clue during authorized people, source,…

Open-source email registration checker for public account-signal triage

Best for: Checking whether an email address may have public account-registration or account-recovery signals during authorized people or exposure research.

Open-source username search with broad site coverage and reports

Best for: Building a broad username lead list and exportable report for social-account, alias, or profile-clustering investigations.

Open-source modular reconnaissance framework for technical OSINT

Best for: Technical analysts who need repeatable passive reconnaissance and enrichment around domains, organizations, contacts, or infrastructure leads.

Open-source username discovery across public services

Best for: Generating public account leads from a distinctive username during social media, alias, or source research.

Open-source username discovery

Best for: Finding public account leads from a known username, handle, or alias during people research, source vetting, or identity-corroboration…

Document-led investigative research across public datasets

Best for: Document-heavy public-records, company, procurement, sanctions-adjacent, and cross-border investigative research where source documents matter.