Maltego for Mac

Product snapshot

Maltego is an OSINT-focused application for discovering and visualizing relationships between people, domains, infrastructure, and online accounts. It combines automated data extraction with interactive graphing so investigators can see how disparate pieces of information connect.

Who benefits most

• Security analysts and threat hunters who need to map attacker infrastructure and relationships.
• Journalists, researchers, and private investigators conducting open‑source research.
• Incident response teams and law enforcement units tracing digital footprints.

Core capabilities

• A large catalog of transforms that query social platforms, DNS records, WHOIS entries, and other public sources to gather relevant data.
• Interactive graphing and mapping tools that let you build, explore, and annotate link charts to reveal patterns.
• Support for collaborative projects so multiple users can contribute to the same investigation and share findings.
• Multiple export options and integrations to move results into reports or other tools for further analysis.

Collaboration and workflows

Workspaces can be shared among teammates, enabling parallel analysis and progressive refinement of link maps. Analysts typically run iterative transforms, prune noisy nodes, and then drill down on items of interest to validate hypotheses.

Licensing and editions

Maltego is available in a free Community edition as well as paid tiers with expanded transform access, larger graph sizes, and enterprise features. Choose the edition that matches your project scale and required data sources.

Alternatives and quick resources

• SpiderFoot — automated reconnaissance focused on external attack surface discovery.
• OSINT Framework — curated collection of resources and tools for open-source investigations.
• Recon-ng — modular web reconnaissance framework with command-line workflow support.

Quick start tip: begin with a seed entity (an email, domain, or name), run targeted transforms, and then refine the graph by removing irrelevant nodes to surface meaningful connections.