Search
Start with a single target and gather useful public information without jumping between disconnected pages.
osint.dev
Investigate public information. Follow the evidence.
Research domains, networks, companies and public identity records. Connect findings in a private investigation, with sources and dates you can check.
Browse toolsNo account required for a preview.
Investigation graphpreview
investigation graph4 shown · 3 relations visible
Start with one target and follow the connections as they appear.
investigate
Research from one starting point.
Start with infrastructure, a company or an identity target, then follow only the connections supported by the results you find.
Verify
Keep source context close to each result, so it is easier to distinguish what was observed from what still needs checking.
Follow connections
Follow sourced connections between infrastructure, organisations, public profiles and email domains when the available evidence supports the link.
recommended
Start here.
A small selection of useful tools and reading from across OSINT.dev.
Tools
- Security Headers CheckerSecurity Headers Check
Inspect HTTP security headers on any public URL.
- DNS / MX / SPF / DMARC InspectorSPF / DKIM / DMARC
Resolve DNS, mail-routing and email-authentication posture for a domain, including deep SPF/DMARC analysis.
- Robots.txt + Sitemap + Meta AnalyzerRobots & Sitemap
Inspect robots.txt, sitemap discovery and head meta of a page.
Reading
- Passive First: When Public Web Research Should Stay Narrowfeatured
A practical argument for staying narrow and passive as long as possible in public web research, before broader or more interaction-heavy methods start adding noise.
- BuiltWith vs urlscan: Stack Hints vs Observed Page Behaviorfeatured
Compare BuiltWith and urlscan as two different web-research evidence layers: structured current and historical technology profiling versus browser-observed requests, redirects, DOM and page behavior.
- How to Use Sanctions and Risk Lists Without Overreading Themfeatured
A disciplined method for sanctions, PEP and risk-list research: resolve the entity, classify the signal, verify the authority, distinguish ownership and control rules, preserve time, and avoid turning adjacency into a verdict.
perspectives
Analysis and ideas around open-source research.
Methods, judgment, ethics and the questions that sit behind the tools.
Terminology
Stop Calling Them Hackers
Calling every cyber actor a hacker collapses authorization, motive and attribution into one vague label. Better OSINT starts with language precise enough to preserve what the evidence actually says.
ReadMindsetOSINT Is Not Just Searching
Search finds public information. OSINT begins when that information is resolved, verified, contextualized, corroborated and turned into a traceable answer to a defined question.
ReadCultureThe Problem With Tool-Centric OSINT Education
Tool lists are useful, but training people around interfaces creates dependency. Durable OSINT education should teach questions, signal meaning, source criticism, limitations, evidence states and judgment — with tools inside the method.
Readbrowse by topic
A clear way through the catalog.
Tools and references are grouped by topic so you can find a useful starting point without working through an unstructured list.
Domain & Web
4 categoriesDomains, HTTP and websites
Email & Deliverability
3 categoriesEmail and deliverability
Security & Headers
3 categoriesHeaders and web security
Metadata & Discovery
3 categoriesMetadata and discovery
Reputation & Risk
3 categoriesRisk and exposure
Infrastructure & DNS
5 categoriesDNS and infrastructure
account
Save an investigation when you need to come back to it.
Browsing and preview searches are open. A free account lets you save investigations and continue from previous results.