Domain / DNS
Domain, host, certificate, IP, and website footprint checks.
OSINT4ALL tool directory
Search the OSINT tools directory.
This is the core workspace: search by investigation task, evidence type, access model, pricing, and verification context before you click out.
Filter tools Search, category, pricing, and verification
Editorial standards
Use the data. Keep the judgment.
- Fit and limits stay visible.
- Commercial context cannot buy placement.
- Corrections stay reviewed.
Directory workflow
Start broad. Leave with a shortlist.
Search by job
Start with the task, source type, signal, or tool name.
Narrow fit
Use category, pricing, access, and verification filters.
Pin candidates
Build a browser-only shortlist while browsing profiles.
Check context
Read caveats and disclosure before visiting the tool.
Start by job
Common investigation lanes
Pick a lane when the evidence type is clear and you need a faster shortlist.
Threat triage
Suspicious URLs, files, IPs, breach signals, and reputation checks.
Company research
Registries, filings, public records, and corporate footprint checks.
People & social
Handles, people, public topics, mentions, and media narratives.
Maps / geolocation
Place names, imagery, satellite, map, and sunlight checks.
Archives
Preserve pages, recover deleted sources, and document timelines.
Editorial proof card
Microsoft / RiskIQ
Passive DNS and infrastructure context
Verification: Editorial review
Workflow: Pivoting
Pricing: Enterprise
Best for: Historical passive-DNS, SSL certificate, WHOIS, tracker, reputation, and infrastructure pivots from a concrete domain, IP, hash, or host…
Affiliate
RiskIQ PassiveTotal
Passive DNS and infrastructure context
Affiliate
Live interface preview
urlscan GmbH
URL render, screenshot, and network trace capture
Verification: Editorial review
Workflow: Verification
Pricing: Freemium
Best for: Capturing a URL render, screenshot, DOM/network trace, redirects, loaded resources, and visible page behavior during phishing, web-evidence, or…
Editorial
urlscan.io
URL render, screenshot, and network trace capture
Editorial
Live interface preview
GreyNoise
Background internet noise intelligence
Verification: Editorial review
Workflow: Monitoring
Pricing: Paid
Best for: Triage of suspicious IPs, scan activity, security alerts, and exposed-service noise where routine internet scanning may explain the…
Sponsored
GreyNoise
Background internet noise intelligence
Sponsored
Live interface preview
OCCRP
Document-led investigative research across public datasets
Verification: Editorial review
Workflow: Discovery
Pricing: Free
Best for: Document-heavy public-records, company, procurement, sanctions-adjacent, and cross-border investigative research where source documents matter.
Editorial
Aleph
Document-led investigative research across public datasets
Editorial
Live interface preview
OpenCorporates
Company registry search for legal-entity grounding
Verification: Editorial review
Workflow: Verification
Pricing: Freemium
Best for: First-pass company verification, jurisdiction lookup, company-number checks, officer/director pivots, and public-register source discovery.
Editorial
OpenCorporates
Company registry search for legal-entity grounding
Editorial
Editorial workflow visual
OSINT4ALL Editorial
Search operator playbook for precise web discovery
Verification: Editorial review
Workflow: Discovery
Pricing: Free
Best for: Precise public-web discovery using exact phrases, site/domain searches, file-type searches, exclusions, and advanced-search fields.
Editorial
Advanced Search Operators Workflow
Search operator playbook for precise web discovery
Editorial
Live interface preview
InVID / WeVerify
Newsroom toolkit for image and video verification
Verification: Editorial review
Workflow: Attribution Support
Pricing: Free
Best for: Frame-level video and image verification, keyframe extraction, reverse-search preparation, metadata clues, and visual-claim triage.
Tested
InVID Verification Toolkit
Newsroom toolkit for image and video verification
Tested
Live interface preview
TinEye
Reverse-image search for reuse and chronology checks
Verification: Editorial review
Workflow: Verification
Pricing: Paid
Best for: Reverse-image corroboration, earlier-publication checks, image reuse detection, modified-copy discovery, and quick visual-claim triage.
Tested
TinEye
Reverse-image search for reuse and chronology checks
Tested
Live interface preview
Archive.today
Snapshot archiving service for cited web pages
Verification: Editorial review
Workflow: Archiving
Pricing: Free
Best for: Quick static snapshots of individual public pages when a second archive path is useful or Wayback capture is…
Submitted
Archive.today
Snapshot archiving service for cited web pages
Submitted
Live interface preview
Internet Archive
Historical web captures for deleted or changed pages
Verification: Editorial review
Workflow: Archiving
Pricing: Free
Best for: Historical web-page review, deleted-page recovery, source preservation, claim timelines, profile changes, and before/after web evidence.
Editorial
Wayback Machine
Historical web captures for deleted or changed pages
Editorial
Live interface preview
Hunter
Email pattern and verification
Verification: Editorial review
Workflow: Verification
Pricing: Paid
Best for: Professional email discovery, domain search, email verification, and company-linked contact checks around an organization already in scope.
Editorial
Hunter
Email pattern and verification
Editorial
Editorial proof card
Epieos
Email and profile investigation
Verification: Editorial review
Workflow: Enrichment
Pricing: Freemium
Best for: Email, phone, username, and account-clue enrichment during source vetting, people research, and early identity-corroboration workflows.
Editorial
Epieos
Email and profile investigation
Editorial
Live interface preview
Hudson Rock
Infostealer exposure intelligence
Verification: Editorial review
Workflow: Monitoring
Pricing: Paid
Best for: Infostealer-exposure checks around company domains, employee accounts, third-party risk, and defensive credential-risk triage.
Affiliate
Hudson Rock Exposure Intelligence
Infostealer exposure intelligence
Affiliate
Live interface preview
HIBP
Breach exposure lookup for emails and domains
Verification: Editorial review
Workflow: Verification
Pricing: Free
Best for: Checking known breach exposure for emails, domains, and passwords in defensive account-security and incident-response workflows.
Tested
Have I Been Pwned
Breach exposure lookup for emails and domains
Tested
Editorial workflow visual
Intelligence X
Sensitive-source and archive search context
Verification: Editorial review
Workflow: Discovery
Pricing: Paid
Best for: Selector-based search across archived, public-web, leak-adjacent, WHOIS, DNS, dark-web-adjacent, and document datasets when the identifier is already in…
Editorial
Intelligence X
Sensitive-source and archive search context
Editorial
Live interface preview
Maltego
Link analysis and graphing for entity investigations
Verification: Editorial review
Workflow: Mapping
Pricing: Paid
Best for: Graph-led link analysis across entities such as domains, IPs, emails, people, companies, documents, social handles, and infrastructure clues.
Tested
Maltego
Link analysis and graphing for entity investigations
Tested
Live interface preview
SpiderFoot
Automated OSINT collection for scoped leads
Verification: Editorial review
Workflow: Enrichment
Pricing: Freemium
Best for: Authorized OSINT automation around domains, IPs, subnets, ASNs, emails, usernames, and organization exposure review.
Tested
SpiderFoot
Automated OSINT collection for scoped leads
Tested
Live interface preview
ICANN Lookup / RDAP workflow
RDAP/WHOIS registration-data checklist for domain leads
Verification: Editorial review
Workflow: Verification
Pricing: Free
Best for: Registrar, registration-date, nameserver, status, and visible contact checks around a domain already in scope.
Editorial
WHOIS Lookup Workflow
RDAP/WHOIS registration-data checklist for domain leads
Editorial
Continue the investigation