Infrastructure & Network Reconnaissance
SpiderFoot
Automates threat-intel and reconnaissance gathering.
SpiderFoot is an open-source intelligence automation tool that aggregates data from numerous public sources to map out an entity's digital footprint. It is commonly used by security professionals and researchers to conduct automated reconnaissance on domains, IP addresses, and email addresses for threat intelligence and vulnerability assessment purposes.
Dual-use tool. This tool can be used for research and investigation, and also to find, track or identify people without their consent. Listing it here is not an endorsement of either use.
Privacy note. SpiderFoot can take an email address, phone number, username or a person's name as a scan target and runs more than 200 modules, including email, phone-number and human-name extraction and a module that tries to find social-media profiles for names it identifies. Its README says it can be used defensively "to gather information about what you or your organisation might have exposed over the Internet".
Official site: https://github.com/smicallef/spiderfoot
Source: https://github.com/smicallef/spiderfoot
Last verified 2026-08-30.
Description drafted with an AI model. How entries are checked.