Compare the Top OSINT Tools for Linux as of October 2026

What are OSINT Tools for Linux?

OSINT (Open-Source Intelligence) tools help cybersecurity professionals, investigators, law enforcement agencies, researchers, and businesses collect, analyze, and interpret publicly available information from online and offline sources. These tools aggregate data from websites, search engines, social media platforms, public records, domain registries, news sources, and other open sources to uncover relationships, identify threats, investigate entities, and generate actionable intelligence. OSINT tools often include capabilities such as automated data collection, web scraping, social media monitoring, domain and IP analysis, geolocation analysis, entity resolution, link analysis, dark web monitoring, and threat intelligence visualization. Many OSINT solutions integrate with security information and event management (SIEM) systems, threat intelligence platforms, investigation management software, and cybersecurity tools to support digital investigations, risk assessments, fraud detection, and security operations. By transforming publicly accessible information into structured intelligence, OSINT tools help organizations identify potential threats, conduct due diligence, investigate suspicious activities, and make more informed security and business decisions. Compare and read user reviews of the best OSINT tools for Linux currently available using the table below. This list is updated regularly.

  • 1
    Maltego

    Maltego

    Maltego Technologies

    Maltego is a Java application that runs on Windows, Mac and Linux. Maltego is used by a broad range of users, ranging from security professionals to forensic investigators, investigative journalists, and researchers. Easily gather information from dispersed data sources. View up to 1 million entities on a graph​. Access over 58 data sources in the Maltego transform hub. Connect public (OSINT), commercial and own data sources. Write your own Transforms. Automatically link and combine all information in one graph. Automatically combine disparate data sources in point-and-click logic​. Use our regex algorithms to auto-detect entity types. Enrich your data through our intuitive graphical user interface​. Use entity weights to detect patterns even in the largest graphs. Annotate your graph and export it for further use.
    Starting Price: €5000 per user per year
  • 2
    DeepState

    DeepState

    DeepState

    DeepState is a desktop investigation analysis platform for OSINT analysts, investigative journalists and corporate security teams. People, organisations, events, documents, social posts, locations and crypto wallets sit on one infinite canvas as typed nodes, joined by reasoned connections (funds, controls, contradicts), with a timeline, narratives and full-text search. An AI agent beside the board has 70+ research tools: web search, page capture, Wayback Machine, WHOIS, X, Reddit, Bluesky, YouTube, LinkedIn, CourtListener, SEC EDGAR, sanctions lists, historic newspapers, blockchain and OpenStreetMap. It creates and links nodes itself, cites sources, and every action can be undone. Captured evidence keeps its URL, retrieval time, archived copy and credibility rating. Boards export to briefing decks and PDFs. Case data stays in a local SQLite file; use Claude, ChatGPT, OpenRouter, OpenCode or offline Ollama. Windows, macOS, Linux.
    Starting Price: $29/month
  • 3
    Insomnia
    Insomnia is an autonomous AI pentesting and offensive security platform from CQR Cybersecurity. Point it at a target and its AI red team runs recon, vulnerability scanning, OSINT, CVE validation, exploitation and privilege escalation across web apps, APIs, networks, cloud and Active Directory, then writes a client-ready PDF, DOCX or HTML report with CVSS scoring and fixes. It brings 275+ security modules into one tool: SAST and DAST, secret detection with live key validation, dependency and CVE scanning, API and GraphQL testing, wireless audit, Active Directory auditing with BloodHound, an HTTP interception proxy and a CI/CD pipeline builder. It also ships Insomnia OS, a Debian-based offensive OS. There is a free Community Edition and a free SAST engine (pip, npm, Docker, Homebrew, plus VS Code and JetBrains plugins). Paid Advanced and Pro plans add full AI automation, the 30,000+ CVE database, exploitation tooling, OSINT and mobile analysis.
    Starting Price: $149/month
  • Previous
  • You're on page 1
  • Next