Know what OSINT can find — before someone else uses it on you
OSINT Yourself is an open-source-intelligence education and tools-directory site. It teaches how these techniques actually work, warns how much of your own footprint they can surface, and catalogues the tools themselves — including which ones are dual-use.
Teach →
Plain explanations of how OSINT techniques — recon, username pivoting, metadata extraction — actually work, without requiring a security background.
Warn →
What your own digital footprint looks like from the outside, and the concrete steps that reduce it.
Tools →
A catalogued directory of OSINT tools — cost, dual-use status and a privacy note where one applies.
Featured tools
Blackbird
Fast username and email search across 600+ platforms.
GHunt
Investigates Google accounts, extracting data tied to a Gmail address.
IntelTechniques
Michael Bazzell's OSINT search tools, books and training resources.
MISP
Open-source platform for sharing and correlating threat intelligence.
Nmap
Free network scanner for host discovery, port scanning and service/OS detection.
OSINT Framework
Web directory categorizing hundreds of OSINT tools and data sources.
Categories
Infrastructure & Network Reconnaissance
Tools that scan and map internet-facing infrastructure: hosts, open ports, exposed devices and the technology a website runs, plus IP reputation and IP data lookups, website crawling, and email and name harvesting for a domain.
Username & Social Media Tracking
Tools that check a username across social platforms and other services, and that search or collect public posts and profiles from social networks.
Data Visualization & Analysis
Tools for analysing and visualising collected data, including link-analysis graphs, timelines, graph databases and data-transformation utilities, plus platforms for searching and cross-referencing leaked documents and for monitoring exposed credentials and data.
Email & Phone Lookup
Tools that check which services or accounts an email address or phone number is linked to, look up Google accounts and breach exposure for an address, run caller-ID and reverse phone lookups, and find email addresses for a domain.
Reverse Image Search & Geolocation
Tools that search for where an image or a face appears online, and that help work out where and when a photo was taken.
Domain, DNS & WHOIS
Tools that look up domains, DNS records, certificates and registration history, and that enumerate the subdomains of a domain.
Breach & Leak Data
Tools and services that search known data breaches and leaks for exposed email addresses, usernames and credentials.
People Search & Public Records
Company registries, filings and ownership databases, offshore-leak and relationship databases, sanctions and watchlist data, and people-search and identity-data services that aggregate public records.
Metadata & Document Forensics
Tools that extract metadata from documents and images, analyse images and video for signs of manipulation, and index, search and extract entities from large document collections.
Maps & Geospatial
Tools for satellite imagery and maps, map-data queries, flight and ship tracking, and wireless-network mapping.
Dark Web & Threat Intelligence
Tools for accessing and searching Tor services, scanning URLs and files, and checking or sharing indicators of compromise.
All-in-one Frameworks & Aggregators
Multi-source OSINT frameworks and platforms, collections of tools and techniques, investigation notes and capture software, web archives, and search tools for source code and Google dorks.
Frequently asked questions
What is OSINT?
OSINT (open-source intelligence) is information gathered from sources that are publicly available, rather than obtained by hacking or insider access — public records, social media, breach data, file metadata and infrastructure records are the main categories. See What is OSINT? for the full explanation.
Is any of this legal?
Looking up publicly available information is technically legal in most places, most of the time, in isolation. The legal and ethical line is mostly about what you do with what you find and who you do it to, not which technique you used — see the ethics and the line you don't cross.
Are these tools free?
Some are, some aren't. Every tool in the directory is tagged as free, open source, freemium or paid so you can filter by cost before clicking through.
What does "dual-use" mean?
A dual-use tool is capable of both legitimate research (journalism, security work, due diligence) and of harassment or stalking. Dual-use tools are marked as such on every page they appear; listing one is not an endorsement of either use.
Can I use this to check what is exposed about me?
Yes — that is the point of the Protect section: a findability checklist, a breach and password check, and a data-broker opt-out directory for removing yourself from people-search sites.
Do you collect my data?
Almost never. Reading the site requires no account, runs no advertising trackers, and sells no visitor data; the password checker runs entirely in your browser. The one thing we collect is an email address, and only if you choose to subscribe to the newsletter — double opt-in, one-click unsubscribe, nothing else stored. See Privacy for the full picture.
Who is this site for?
Anyone curious about their own digital footprint, plus journalists, security researchers and due-diligence professionals who want a catalogued reference of OSINT tools rather than a scattered set of bookmarks. See About.