OSINT tools, reviewed and classified.

Inspect HTTP security headers on any public URL.

Resolve DNS, mail-routing and email-authentication posture for a domain, including deep SPF/DMARC analysis.

Inspect robots.txt, sitemap discovery and head meta of a page.

Follow every hop of a URL and report the response chain.

Lightweight tech-stack fingerprint for a public URL.

Search company records across many official registries in one place.

Search open sanctions, PEP and related-risk datasets in a unified format.

Resolve legal entities by name or exact Legal Entity Identifier using GLEIF reference data.

Search public records, datasets and documents for investigative research.

Convert public place/address queries to coordinate candidates or coordinates to nearby OpenStreetMap place records.

Search certificate-transparency logs for certificates and related hostnames.

Query authoritative domain registration data through IANA-discovered RDAP services.

Submit a URL to a sandboxed browser and inspect the resulting web requests and artifacts.

Query authoritative registry allocation data for a public IP address or autonomous system number.

Explore current and historical DNS, domain and infrastructure data.

Identify technologies, frameworks and services used by a website.

Observe BGP prefixes and origin ASNs using public RouteViews collector data.

Search internet-facing assets and certificates across a large internet map.

Inspect the certificate, chain, validity and negotiated TLS metadata presented on TCP/443.

Resolve PTR names for a public IP and forward-check whether each hostname maps back to the original address.

Run reverse-image searches to find copies, origins and variants of an image.

Find public person candidates by name or inspect a qualified Wikidata record.

Observe a public GitHub profile for a username without inferring its owner.

Inspect email structure and domain mail routing without probing the mailbox.

Analyze international phone format and numbering-plan metadata locally.

Observe a public Bluesky profile, its current handle and stable DID without inferring its owner.

Observe a bounded public sample of followers and following around a Bluesky account.

Check a bounded curated set of public profile sites for a username.

Read, write and inspect metadata across many file types.

Use browser-based image-forensics tools for visual tampering analysis.

Search claims and fact checks already published by independent fact-checkers.

Check files, URLs and indicators against many security engines and community context.

Browse and share open threat-intelligence indicators and pulses.

Capture, preserve and organize web evidence with audit-friendly context.

Find archived captures of a public web page, with capture dates and links to the Internet Archive.

Save a full web page into one self-contained HTML file.

Self-host web archiving and preserve URLs, media and page assets under your control.

Automate multi-source OSINT collection and correlation from a single workflow.

Map entities and relationships for complex OSINT and cyber investigations.