Best Government OSINT Tools
View:
What are Government OSINT Tools?
OSINT (Open-Source Intelligence) tools help cybersecurity professionals, investigators, law enforcement agencies, researchers, and businesses collect, analyze, and interpret publicly available information from online and offline sources. These tools aggregate data from websites, search engines, social media platforms, public records, domain registries, news sources, and other open sources to uncover relationships, identify threats, investigate entities, and generate actionable intelligence. OSINT tools often include capabilities such as automated data collection, web scraping, social media monitoring, domain and IP analysis, geolocation analysis, entity resolution, link analysis, dark web monitoring, and threat intelligence visualization. Many OSINT solutions integrate with security information and event management (SIEM) systems, threat intelligence platforms, investigation management software, and cybersecurity tools to support digital investigations, risk assessments, fraud detection, and security operations. By transforming publicly accessible information into structured intelligence, OSINT tools help organizations identify potential threats, conduct due diligence, investigate suspicious activities, and make more informed security and business decisions. Compare and read user reviews of the best Government OSINT tools currently available using the table below. This list is updated regularly.
-
1
Criminal IP ASM
AI Spera
Criminal IP ASM delivers a threat intelligence-powered approach to attack surface management by combining continuous asset discovery with deep threat analysis across IPs, domains, OSINT, and associated infrastructure. Built on Criminal IP’s advanced scanning and enrichment capabilities, it brings Threat Intelligence context such as vulnerability intelligence, C2 detections, malicious IP/domain correlations, and dark web exposure into every layer of asset discovery in an integrated approach that empowers security teams to proactively identify, prioritize, and mitigate threats before they are exploited. -
2
Threat Landscape
Ecliptica Labs AB
Threat Landscape is an automated threat intelligence platform built for security analysts and SOC teams who need high-confidence, actionable intelligence — without the manual triage. The platform continuously ingests and processes global OSINT and darknet sources, automatically extracting structured facts and filtering out noise before it reaches analysts. All intelligence is normalized into STIX 2.1 format, MITRE ATT&CK mapped, and correlated across threat actors, malware families, CVEs, TTPs, and IOCs — so teams spend time acting on intelligence, not building it. Key capabilities include interactive dashboards, visualized STIX threat graphs, advanced search and filtering, darknet monitoring for leak-site claims and criminal chatter, automated daily and weekly digests, and a RESTful API for integration with SIEM, SOAR, and TIP platforms.Starting Price: $499/month -
3
Baited
Baited SA
How convincing would a phishing attack be if it knew your suppliers, your tools, and your people? Baited helps you find out, before a real attacker does. Built by ethical hackers, Baited turns your organization’s public footprint into realistic phishing and social engineering simulations. AI and open-source intelligence (OSINT) shape each scenario around the details that make a malicious request believable. • Test your team across email, Slack, Teams, LinkedIn, SMS, and voice. • Build scenarios using relevant suppliers, familiar names, and workplace context. • Deliver immediate coaching when someone misses a warning sign. • Track risk by person, team, and attack technique. • Protect sensitive data with encryption, pseudonymised targets, and dedicated Swiss infrastructure. Could you spot the bait? Visit baited.io and take the 10-second phishing challenge.Starting Price: $6/month/user -
4
Ipregistry
Ipregistry
Understand your audience and act upon—locate visitors by IP address, enrich forms, target mobile users, detect and prevent online fraud, analyze logs, or perform geo IP based redirections. Ipregistry is a trusted and in-depth IP Geolocation and Threat detections source of information that can benefit publishers, ad networks, retailers, financial services, e-commerce stores and more. Our products produce insights that can be used to personalize content for users, customers or leads in a non-intrusive manner, based on their currency, location, time zone, company or carrier details. These insights can also be leveraged to deliver targeted advertising, control the distribution of digital media but also prevent online fraud by detecting malicious activities: requests from hosting nodes, users using Tor, public proxies or users reported as abusers and attackers in 220+ OSINT threat feeds.Starting Price: $1.8 per 14.409 lookups -
5
XposedOrNot
XposedOrNot
XposedOrNot is a web-based data-breach lookup and monitoring service for individuals, domain owners, and security teams. Users can search an email address to see the public breaches associated with it, including breach dates and exposed data types, and review breach records in a searchable catalog. Optional alerts notify users when an address appears in a newly indexed breach. Organizations can verify control of a domain and then review aggregated exposure, monitor new breaches, and receive email alerts. The service also provides exposure analytics, a free REST API with public keyless endpoints and rate limits, official SDKs, and integrations for security and investigation tools such as Microsoft Sentinel, Splunk, Wazuh, Maltego, MISP, TheHive/Cortex, and an MCP server. The website, API, and SDKs are open source; higher-volume commercial API plans are available separately.Starting Price: $0 -
6
Media Sonar
Media Sonar Technologies
Harness the unique insights only available from Web Intelligence & Investigation to better protect your corporate brand and assets. Our unique investigative module, Pathfinder, empowers both novice and experienced security teams with a streamlined path of next step related entities and a visible recording of your selected investigative trail. Media Sonar integrates the top OSINT tools and data sources into a seamless, single platform making it 30X faster than conducting OSINT with traditional methods. Your team will no longer be required to spend hours going in and out of multiple, incompatible OSINT tools and manually compiling results. Our Web Intelligence & Investigations platform will broaden your lens on your digital attack surface, helping you to secure your brand and assets and strengthen your security operations posture. Equip your security team with visibility into indicators of threat emerging outside of your organization, with intelligence from the Open and Dark Web.Starting Price: $1,500 per 3 users per month -
7
PatrOwl
PatrOwl.io
PatrowlHears supports your vulnerability watch process for your internal IT assets (OS, middleware, application, Web CMS, Java/.Net/Node library, network devices, IoT). Vulnerabilities and related exploitation notes at put at your disposal. Scan continuously websites, public IP, domains and subdomains for vulnerabilities, misconfigurations. Perform the reconnaissance steps, including the asset discovery and the full-stack vulnerability assessment and the remediation checks. Automation of static code analysis, external resources assessment and web application vulnerability scans. Access a comprehensive and continuously updated vulnerability database scored and enriched with exploit and threat news information. Metadata are collected and qualified by security experts from public OSINT and private feeds.Starting Price: €49 per month -
8
Maltego
Maltego Technologies
Maltego is a Java application that runs on Windows, Mac and Linux. Maltego is used by a broad range of users, ranging from security professionals to forensic investigators, investigative journalists, and researchers. Easily gather information from dispersed data sources. View up to 1 million entities on a graph. Access over 58 data sources in the Maltego transform hub. Connect public (OSINT), commercial and own data sources. Write your own Transforms. Automatically link and combine all information in one graph. Automatically combine disparate data sources in point-and-click logic. Use our regex algorithms to auto-detect entity types. Enrich your data through our intuitive graphical user interface. Use entity weights to detect patterns even in the largest graphs. Annotate your graph and export it for further use.Starting Price: €5000 per user per year -
9
ImmuniWeb Discovery
ImmuniWeb
Attack Surface Management and Dark Web Monitoring. ImmuniWeb® Discovery leverages OSINT and our award-winning AI technology to illuminate attack surface and Dark Web exposure of a company. The non-intrusive and production-safe discovery is a perfect fit both for continuous self-assessment and vendor risk scoring to prevent supply chain attacks. Attack Surface Management Detect, map and classify your on-prem and cloud IT assets Continuous Security Monitoring Detect misconfigured or vulnerable IT assets Vendor Risk Scoring Discover insecure third parties that process your data Dark Web Monitoring Detect stolen data and credentials, and compromised systems Brand Protection Detect online misuse of your brand and take down phishing websitesStarting Price: $499/month -
10
Netlas.io
Netlas
Netlas.io is a network scanner and search engine on the Internet. Netlas stores DNS records of billions of domain names, hundreds of millions of HTTP responses and SSL certificates. All this information can be obtained through several tools: Responses Search: This collection consists of results from internet scans. Netlas non-intrusive scanners continuously scan internet-accessible hosts and save their responses. DNS Search: These stores domain names, their corresponding IP addresses, and other types of DNS records. IP WHOIS: Information about the owner and management of an IP address, including the IP address range, network provider name, and contact information. Domain WHOIS: Information about the domain owner and registrar, such as contact information, registrar details, registration dates, and expiration dates. Certificates: Database of SSL certificates collected from various sources. Netlas is an indispensable tool for any cybersecurity professional!Starting Price: $49 per month -
11
Epieos
Epieos
The ultimate OSINT tool for email and phone reverse lookup. Perform an email or a phone reverse lookup on our OSINT tool to uncover all social media profiles. Because we know your investigations are sensitive, we do not save any of your requests and results. We only implement OSINT techniques that do not send a notification to the target. Only real-time results from social networks, allowing you to save time on your investigations.Starting Price: €29.99 per month -
12
OSINT Industries
OSINT Industries
OSINT Industries is a powerful open source intelligence platform designed to accelerate online investigations with unmatched accuracy and real-time data. It enables users to perform reverse lookups on emails, phone numbers, usernames, names, or crypto wallets, compiling comprehensive digital profiles by uncovering linked accounts, social media profiles, geolocation data, and activity timelines. It accesses intelligence from over 1,000 sources worldwide, ensuring a holistic approach to data analysis and retrieval. Advanced geospatial technology allows investigators to visualize subjects' digital footprints across the globe, while interactive timelines provide a sequential narrative of online activities. OSINT Industries emphasizes privacy, employing robust encryption and never storing search results. Its state-of-the-art algorithms guarantee zero false positives, delivering trustworthy intelligence every time.Starting Price: $25.78 per month -
13
Picarta
Picarta
Picarta is a powerful AI tool that identifies where any photo was taken by analysing visual content. Just upload an image, and Picarta returns accurate GPS coordinates—no metadata needed. Whether it’s a travel snapshot, drone footage, or a social media post, Picarta helps reveal the exact image location worldwide. Perfect for OSINT, investigations, journalism, real estate, historical research, travellers, photographers, and more, Picarta supports global geolocation for ground-level and aerial imagery.Starting Price: $12.99 -
14
OSINTverse
OSINTverse
OSINTverse is an open-source intelligence ecosystem that provides investigation tools, data-provider integrations, APIs, educational content, and community resources. Its SearchIn platform offers a UI-first investigation workspace where users can start with an identifier, query multiple integrated OSINT providers, and organize findings into cases. GraphIn provides a graph-first workflow for starting with an entity, expanding relationships through transforms, triaging results, and sharing investigation snapshots. Both products use the same prepaid wallet, with no subscription or per-seat requirement and credits that do not expire. OSINTverse also provides a SearchIn API for engineering teams, shared team workspaces, and integrations with providers such as Shodan, SecurityTrails, DeHashed, Snusbase, Hunter.io, BuiltWith, WhoisXML, and OSINT Industries.Starting Price: $10 -
15
ipdata
ipdata
Lookup the location of any IP Address to localize your website content, analyze logs, enrich forms, target ads, enforce GDPR compliance, perform redirections, block countries and more. We provide a fast, highly available IP Geolocation API backed by accurate data. Locate your website visitors by IP Address with city and postal code granularity. Check if an IP Address is listed in any of 200+ OSINT Threat Feeds instantaneously. Detect anonymous users to protect your business from fraud and abuse. Get the AS Organization and number of any IP Address. Determine whether an IP Address belongs to an ISP, Datacenter/Hosting or Business. We update hundreds of data sources roughly every 15 minutes. We help you prevent fraud on your ecommerce store. Stop fake account signups on your SaaS or App. Manage GDPR and CCPA regulatory compliance. Localize or fence your website's content based on a user's location and analyze logs and website traffic.Starting Price: $10 per month -
16
DNSdumpster.com
DNSdumpster.com
DNSdumpster.com is a free domain research tool that can discover hosts related to a domain. Finding visible hosts from the attacker's perspective is an important part of the security assessment process. The ability to quickly identify the attack surface is essential whether you are penetration testing or chasing bug bounties. Network defenders benefit from passive reconnaissance in a number of ways, with analysis informing information security strategy. Understanding network-based OSINT helps information technologists to better operate, assess, and manage the network. Save time and headaches by incorporating our attack surface discovery into your vulnerability assessment process. No brute force subdomain enumeration is used as is common. We use open source intelligence resources to query for related domain data. It is then compiled into an actionable resource for both attackers and defenders of Internet-facing systems.Starting Price: Free -
17
GeoInfer
GeoInfer
GeoInfer is an AI-powered geolocation / geospatial intelligence platform that can analyze photographs (or images) and attempt to deduce where on Earth those images were taken, even without GPS/EXIF metadata.Starting Price: $0.06/image -
18
Surfface
Muskelo LLC
Surfface is an OSINT orchestrator and people search engine built for businesses that need to know who they are really dealing with online. Teams upload a face photo and optional context such as a name or handle, and Surfface scans social profiles, posts, videos and other lawful, publicly available sources. It then connects the dots so you can see the person behind an account, inbox or transaction. Security, fraud and trust and safety teams use Surfface to investigate social engineering risks, fake accounts and potential insider threats. HR and compliance teams use it to add an extra layer of open source checks around high risk roles, vendors or partners. Sales and customer facing teams use it to quickly understand the real people behind key accounts. Unlike generic reverse image tools, Surfface can discover faces in social media content, link them to profiles and surface context that helps you assess intent and risk, while staying compliant and currently focused on the US market.Starting Price: $19.99/month/user -
19
Pixalytica
Pixalytica
Pixalytica uses an AI-based facial recognition and automated public web-searching to generate KYC and identity verification reports in under 20 seconds, giving businesses a fast way to verify clients, partners or employees. It also pulls together data such as possible sanction lists, criminal associations and risk flags into a clear report, helping companies reduce fraud, meet compliance requirements and build trust.Starting Price: $79.99 -
20
CYBORA
CYBORA
CYBORA is a Cyber Risk Resilience platform that ties every risk to the live systems and controls behind it, then keeps checking around the clock — so exposure is measured continuously rather than reconstructed once a year. Risks carry owners, treatments, appetite thresholds and live key risk indicators on a 5x5 matrix, with control mapping across ISO 27001, NIST CSF, SOC 2, PCI DSS, HIPAA, GDPR, CIS v8, DORA and NIS2. Third-party risk runs 34 deterministic rules including DORA Article 28 concentration exposure. Assets and AI models are registered and classified for EU AI Act risk. Detection feeds the register directly: OSINT and darknet monitoring, IOC tracking, SOC case management with MITRE ATT&CK mapping and SIEM export to Splunk, Elastic and Sentinel. Business impact analysis, continuity plans and a live crisis workspace close the loop. Delivered from Lithuania, the UK and the US. Private tenant, two 256-bit keys, self-hosting, 20+ languages.Starting Price: $250/month -
21
DeepState
DeepState
DeepState is a desktop investigation analysis platform for OSINT analysts, investigative journalists and corporate security teams. People, organisations, events, documents, social posts, locations and crypto wallets sit on one infinite canvas as typed nodes, joined by reasoned connections (funds, controls, contradicts), with a timeline, narratives and full-text search. An AI agent beside the board has 70+ research tools: web search, page capture, Wayback Machine, WHOIS, X, Reddit, Bluesky, YouTube, LinkedIn, CourtListener, SEC EDGAR, sanctions lists, historic newspapers, blockchain and OpenStreetMap. It creates and links nodes itself, cites sources, and every action can be undone. Captured evidence keeps its URL, retrieval time, archived copy and credibility rating. Boards export to briefing decks and PDFs. Case data stays in a local SQLite file; use Claude, ChatGPT, OpenRouter, OpenCode or offline Ollama. Windows, macOS, Linux.Starting Price: $29/month -
22
Insomnia
CQR
Insomnia is an autonomous AI pentesting and offensive security platform from CQR Cybersecurity. Point it at a target and its AI red team runs recon, vulnerability scanning, OSINT, CVE validation, exploitation and privilege escalation across web apps, APIs, networks, cloud and Active Directory, then writes a client-ready PDF, DOCX or HTML report with CVSS scoring and fixes. It brings 275+ security modules into one tool: SAST and DAST, secret detection with live key validation, dependency and CVE scanning, API and GraphQL testing, wireless audit, Active Directory auditing with BloodHound, an HTTP interception proxy and a CI/CD pipeline builder. It also ships Insomnia OS, a Debian-based offensive OS. There is a free Community Edition and a free SAST engine (pip, npm, Docker, Homebrew, plus VS Code and JetBrains plugins). Paid Advanced and Pro plans add full AI automation, the 30,000+ CVE database, exploitation tooling, OSINT and mobile analysis.Starting Price: $149/month -
23
RemoteView
RemoteView
RemoteView is a real-time global intelligence map that combines public information about conflict and unrest, internet outages, shipping chokepoints, earthquakes, and other disasters in one live view. It covers key maritime routes including the Red Sea, Suez, Hormuz, Panama, and Malacca, and provides country pages and live situation hubs for exploring events by place and topic. The service is intended for analysts, journalists, OSINT researchers, and risk and security teams monitoring public events and changing conditions across regions. The map places these open-source signals in geographic context and helps users follow developments relevant to research, reporting, and risk awareness. A public demo is available on the website, alongside Personal and Pro subscription plans and a seven-day trial.Starting Price: $19.99/month -
24
i2
N. Harris Computer Corporation
Turn overwhelming and disparate data from multiple sources into actionable intelligence in near-real time to make informed decisions. Quickly find hidden connections and critical patterns buried in internal, external, and open-source data. Experience i2’s world-class intelligence analysis software for yourself. Request an i2 demo and learn how to uncover critical connections and hidden insights faster than ever. Track critical missions across law enforcement, fraud and financial crime, military defense, and national security and intelligence sectors with the i2 intelligence analysis platform. Capture and fuse structured and unstructured data from internal and external sources, including OSINT and dark web data, to provide an expansive data pool to search and discover over. Fuse advanced analytics with sophisticated geospatial, visual, graph, temporal, and social analysis capabilities to give analysts greater situational awareness. -
25
PassiveTotal
RiskIQ
RiskIQ PassiveTotal aggregates data from the whole internet, absorbing intelligence to identify threats and attacker infrastructure, and leverages machine learning to scale threat hunting and response. With PassiveTotal, you get context on who is attacking you, their tools and systems, and indicators of compromise outside the firewall—enterprise and third party. Investigation can go fast, really fast. Find answers quickly with over 4,000 OSINT articles and artifacts. Along with 10+ years of mapping the internet, RiskIQ has the deepest and broadest security intelligence on earth. By absorbing web data like Passive DNS, WHOIS, SSL, hosts and host pairs, cookies, exposed services, ports, components, and code. With curated OSINT and proprietary security intelligence, you can see everything—from every angle—on the digital attack surface. Take charge of your digital presence and combat threats to your organization. -
26
SpiderFoot
SpiderFoot
No matter your use case, SpiderFoot will save you time by automating the collection and surfacing of interesting OSINT. Found a suspicious IP address or other indicators in your logs that you need to investigate? Maybe you want to dig deeper into the e-mail address used, or the links referenced in a recent phishing campaign your organization faced? With over 200 modules for data collection and analysis, you can be confident that with SpiderFoot you’ll be gaining the most comprehensive view into the Internet-facing attack surface of your organization. Red teams and penetration testers love SpiderFoot due to it’s broad OSINT reach and identification of low hanging fuit, revealing long-forgotten and unmanaged IT assets, exposed credentials, open cloud storage buckets and much more. Use SpiderFoot to continually monitor OSINT data sources and detect when new intelligence is discovered about your organization. -
27
Black Kite
Black Kite
The Black Kite RSI follows a process of inspecting, transforming, and modeling collected from a variety of OSINT sources (internet wide scanners, hacker forums, the deep/dark web and more). Using the data and machine learning, the correlation between control items is identified to provide approximations. Operationalize with a platform that integrates with questionnaires, vendor management systems and process workflows. Automate adherence to cybersecurity compliance requirements and reduce the risk of a breach with a defense in depth approach. The platform uses Open-Source Intelligence (OSINT) and non-intrusive cyber scans to identify potential security risks, without ever touching the target customer. Vulnerabilities and attack patterns identified using 20 categories and 400+ controls, making the Black Kite platform 3x more comprehensive than competitors’. -
28
Darkscope
Darkscope
In contrast to many other so-called dark web intelligence providers that use OSINT and only aggregate data, Darkscope has developed a human-like search technology that works in the deep web, on social media and in the dark web. Darkscope will run a one-off full Threat Scan of the internet, social media and the dark web on your business, your internet presence and your key people. This will show if you are at risk from a cyber attack and how you can improve your cyber security. Most other threat intelligence providers aggregate threat information using OSINT. Commonly, you will receive a threat intelligence stream that is only between 1% and 5% relevant to you. When you consider that those preparing a cyber attack on your business will have researched you: your staff, partners, and customer base, a stream of generic threat intelligence has only little value if any. -
29
Attack Surface Management detects known, unknown, and potentially vulnerable public-facing assets, as well as changes to your attack surface that may introduce risk. How? Through a combination of NetSPI’s powerful ASM technology platform, our global penetration testing experts, and our 20+ years of pen-testing expertise. Take comfort in the fact that the ASM platform is always on, working continuously in the background to provide you with the most comprehensive and up-to-date external attack surface visibility. Get proactive with your security using continuous testing. ASM is driven by our powerful automated scan orchestration technology, which has been utilized on the front lines of our pen-testing engagements for years. We use various automated and manual methods to continuously discover assets and leverage open source intelligence (OSINT) to identify publicly available data sources.
-
30
Reverse Contact
Reverse Contact
Find easily reliable professional information about a person and their companies based on their personal or professional email address. The service automates the process of gathering professional information and company-related data from email addresses, streamlining lead generation and contact management. Quickly and easily gather reliable information on a person's career path, their current job and all relevant company data. Expand your Linkedin network by associating an email address with your prospect's LinkedIn profile effortlessly. Reverse Contact employs exclusive proprietary OSINT algorithms and its servers to discover, assess, and authenticate all data. The enrichment process does not rely on any databases, ensuring it is 100% GDPR and CCPA compliant.
