Domain / DNS
Domain, host, certificate, IP, and website footprint checks.
OSINT4ALL tool directory
Search OSINT tools by investigation task.
Search the OSINT tools directory by evidence type, access model, pricing, and verification needs so you can choose faster and document the limits.
Filter tools Search, category, pricing, and verification
Editorial standards
Use the data. Keep the judgment.
- Fit and limits stay visible.
- Commercial context cannot buy placement.
- Corrections are reviewed.
Directory workflow
Start broad. Leave with a shortlist.
Search by job
Start with the task, source type, signal, or tool name.
Narrow fit
Use category, pricing, access, and verification filters.
Pin candidates
Build a browser-only shortlist while browsing profiles.
Check context
Read caveats and disclosure before visiting the tool.
Start by job
Common investigation lanes
Pick a lane when the evidence type is clear and you need a faster shortlist.
Threat triage
Suspicious URLs, files, IPs, breach signals, and reputation checks.
Company research
Registries, filings, public records, and corporate footprint checks.
People & social
Handles, people, public topics, mentions, and media narratives.
Maps / geolocation
Place names, imagery, satellite, map, and sunlight checks.
Archives
Preserve pages, recover deleted sources, and document timelines.
Official-page screenshot
BuiltWith
Website technology and competitor-footprint profiling
Verification: Verification status not listed
Workflow: Enrichment
Pricing: Freemium
Best for: Website technology profiling, historical stack checks, commercial due diligence, competitor research, and domain-context enrichment.
Editorial
BuiltWith
Website technology and competitor-footprint profiling
Editorial
Official-page screenshot
Hunchly
Automatic web-capture and case-notes tool for online investigations
Verification: Pending Verification
Workflow: Archiving, Reporting
Pricing: Paid
Best for: Preserving visited web pages, notes, and case context while an online investigation is still active.
Editorial
Hunchly
Automatic web-capture and case-notes tool for online investigations
Editorial
Official-page screenshot
Wappalyzer
Passive website technology fingerprinting
Verification: Verification status not listed
Workflow: Enrichment
Pricing: Freemium
Best for: Passive website technology fingerprinting, technographic enrichment, and first-pass context around public domains before deeper web or infrastructure research.
Editorial
Wappalyzer
Passive website technology fingerprinting
Editorial
Repository screenshot
WebBreacher
Open-source username discovery
Verification: Verification status not listed
Workflow: Discovery
Pricing: Free
Best for: Finding public account leads from a known username, handle, or alias during people research, source vetting, or identity-corroboration…
Editorial
WhatsMyName
Open-source username discovery
Editorial
Official-page screenshot
OSINT4ALL Editorial
Search operator playbook for precise web discovery
Verification: Verification status not listed
Workflow: Discovery
Pricing: Free
Best for: Precise public-web discovery using exact phrases, site/domain searches, file-type searches, exclusions, and advanced-search fields.
Editorial
Advanced Search Operators Workflow
Search operator playbook for precise web discovery
Editorial
Editorial proof card
Epieos
Email and profile investigation
Verification: Verification status not listed
Workflow: Enrichment
Pricing: Freemium
Best for: Email, phone, username, and account-clue enrichment during source vetting, people research, and early identity-corroboration workflows.
Editorial
Epieos
Email and profile investigation
Editorial
Official-page screenshot
Hunter
Email pattern and verification
Verification: Verification status not listed
Workflow: Verification
Pricing: Freemium
Best for: Professional email discovery, domain search, email verification, and company-linked contact checks around an organization already in scope.
Editorial
Hunter
Email pattern and verification
Editorial
Official-page screenshot
urlscan GmbH
URL render, screenshot, and network trace capture
Verification: Verification status not listed
Workflow: Verification
Pricing: Freemium
Best for: Capturing a URL render, screenshot, DOM/network trace, redirects, loaded resources, and visible page behavior during phishing, web-evidence, or…
Editorial
urlscan.io
URL render, screenshot, and network trace capture
Editorial
Official-page screenshot
Maltego
Link analysis and graphing for entity investigations
Verification: Verification status not listed
Workflow: Mapping
Pricing: Paid
Best for: Graph-led link analysis across entities such as domains, IPs, emails, people, companies, documents, social handles, and infrastructure clues.
Tested
Maltego
Link analysis and graphing for entity investigations
Tested
Official-page screenshot
SpiderFoot
Automated OSINT collection for scoped leads
Verification: Verification status not listed
Workflow: Enrichment
Pricing: Freemium
Best for: Authorized OSINT automation around domains, IPs, subnets, ASNs, emails, usernames, and organization exposure review.
Tested
SpiderFoot
Automated OSINT collection for scoped leads
Tested
Continue the investigation