Domain / DNS
Domain, host, certificate, IP, and website footprint checks.
OSINT4ALL tool directory
Search OSINT tools by investigation task.
Search the OSINT tools directory by evidence type, access model, pricing, and verification needs so you can choose faster and document the limits.
Filter tools Search, category, pricing, and verification
Editorial standards
Use the data. Keep the judgment.
- Fit and limits stay visible.
- Commercial context cannot buy placement.
- Corrections are reviewed.
Directory workflow
Start broad. Leave with a shortlist.
Search by job
Start with the task, source type, signal, or tool name.
Narrow fit
Use category, pricing, access, and verification filters.
Pin candidates
Build a browser-only shortlist while browsing profiles.
Check context
Read caveats and disclosure before visiting the tool.
Start by job
Common investigation lanes
Pick a lane when the evidence type is clear and you need a faster shortlist.
Threat triage
Suspicious URLs, files, IPs, breach signals, and reputation checks.
Company research
Registries, filings, public records, and corporate footprint checks.
People & social
Handles, people, public topics, mentions, and media narratives.
Maps / geolocation
Place names, imagery, satellite, map, and sunlight checks.
Archives
Preserve pages, recover deleted sources, and document timelines.
Editorial proof card
AbuseIPDB
IP abuse-report and reputation lookup service
Verification: Pending Verification
Workflow: Enrichment, Verification
Pricing: Freemium
Best for: Checking suspicious IP addresses against public abuse reports during security, exposure, and infrastructure triage.
Editorial
AbuseIPDB
IP abuse-report and reputation lookup service
Editorial
Official-page screenshot
EmailRep.io
Email reputation lookup for risk and identity-signal triage
Verification: Pending Verification
Workflow: Enrichment, Verification
Pricing: Freemium
Best for: Adding email reputation context to fraud, breach, contact-vetting, and people-research triage.
Editorial
EmailRep.io
Email reputation lookup for risk and identity-signal triage
Editorial
Official-page screenshot
Mapillary
Street-level imagery platform for geolocation and scene context
Verification: Pending Verification
Workflow: Mapping, Verification
Pricing: Free
Best for: Corroborating roads, storefronts, landmarks, signage, and local scene context in geolocation workflows.
Editorial
Mapillary
Street-level imagery platform for geolocation and scene context
Editorial
Repository screenshot
ninoseki
Browser extension for quick IOC and threat-intelligence pivots
Verification: Pending Verification
Workflow: Enrichment, Pivoting
Pricing: Free
Best for: Pivoting from domains, IPs, URLs, hashes, and CVEs into reputation and threat-intelligence sources during triage.
Editorial
Mitaka
Browser extension for quick IOC and threat-intelligence pivots
Editorial
Official-page screenshot
OpenSecrets
U.S. campaign finance and lobbying research database
Verification: Pending Verification
Workflow: Discovery, Mapping
Pricing: Free
Best for: Researching U.S. political donations, lobbying records, PACs, industries, candidates, committees, and money-in-politics patterns.
Editorial
OpenSecrets
U.S. campaign finance and lobbying research database
Editorial
Official-page screenshot
OSINT Framework
Reference index for OSINT tool categories and discovery paths
Verification: Pending Verification
Workflow: Discovery
Pricing: Free
Best for: Finding OSINT tool categories and candidate resources during early workflow planning or training.
Editorial
OSINT Framework
Reference index for OSINT tool categories and discovery paths
Editorial
Repository screenshot
laramies
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Collecting first-pass public leads around an organization's domains, hosts, and exposed contact patterns.
Editorial
theHarvester
Open-source passive reconnaissance for domains, subdomains, hosts, and emails
Editorial
Official-page screenshot
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Verification: Pending Verification
Workflow: Enrichment, Pivoting
Pricing: Freemium, Paid
Best for: Investigating domains, ownership history, DNS relationships, and infrastructure context around suspicious or important web properties.
Editorial
DomainTools
Commercial domain intelligence for WHOIS history and DNS pivots
Editorial
Repository screenshot
ElevenPaths
Open-source document metadata analysis for OSINT and exposure review
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Inspecting public document metadata for usernames, software clues, paths, and organization context during authorized research.
Editorial
FOCA
Open-source document metadata analysis for OSINT and exposure review
Editorial
Repository screenshot
mxrch
Open-source Google account OSINT lead-generation tool
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Checking public Google-account signals from an email, Gaia ID, Drive artifact, or account clue during authorized people, source,…
Editorial
GHunt
Open-source Google account OSINT lead-generation tool
Editorial
Repository screenshot
Megadose
Open-source email registration checker for public account-signal triage
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Checking whether an email address may have public account-registration or account-recovery signals during authorized people or exposure research.
Editorial
Holehe
Open-source email registration checker for public account-signal triage
Editorial
Repository screenshot
Soxoj
Open-source username search with broad site coverage and reports
Verification: Pending Verification
Workflow: Discovery, Pivoting
Pricing: Free
Best for: Building a broad username lead list and exportable report for social-account, alias, or profile-clustering investigations.
Editorial
Maigret
Open-source username search with broad site coverage and reports
Editorial
Repository screenshot
lanmaster53
Open-source modular reconnaissance framework for technical OSINT
Verification: Pending Verification
Workflow: Discovery, Enrichment
Pricing: Free
Best for: Technical analysts who need repeatable passive reconnaissance and enrichment around domains, organizations, contacts, or infrastructure leads.
Editorial
Recon-ng
Open-source modular reconnaissance framework for technical OSINT
Editorial
Repository screenshot
Sherlock Project
Open-source username discovery across public services
Verification: Pending Verification
Workflow: Discovery, Pivoting
Pricing: Free
Best for: Generating public account leads from a distinctive username during social media, alias, or source research.
Editorial
Sherlock
Open-source username discovery across public services
Editorial
Official-page screenshot
Hunchly
Automatic web-capture and case-notes tool for online investigations
Verification: Pending Verification
Workflow: Archiving, Reporting
Pricing: Paid
Best for: Preserving visited web pages, notes, and case context while an online investigation is still active.
Editorial
Hunchly
Automatic web-capture and case-notes tool for online investigations
Editorial
Continue the investigation