Alternatives to Surfface
Compare Surfface alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Surfface in 2026. Compare features, ratings, user reviews, pricing, and more from Surfface competitors and alternatives in order to make an informed decision for your business.
-
1
Criminal IP ASM
AI Spera
Criminal IP ASM delivers a threat intelligence-powered approach to attack surface management by combining continuous asset discovery with deep threat analysis across IPs, domains, OSINT, and associated infrastructure. Built on Criminal IP’s advanced scanning and enrichment capabilities, it brings Threat Intelligence context such as vulnerability intelligence, C2 detections, malicious IP/domain correlations, and dark web exposure into every layer of asset discovery in an integrated approach that empowers security teams to proactively identify, prioritize, and mitigate threats before they are exploited. -
2
Lenso.ai
Lenso.ai
Lenso.ai is a perfect example of an AI image search tool, where you can simply search for images that you are most interested in. Thanks to advanced AI technology implemented on lenso.ai, you can easily start searching for places, people, duplicates, related or similar images. The process of reverse image search with lenso.ai is significantly more accurate and efficient compared to traditional image search. Lenso.ai as an AI-powered reverse image tool, is designed to quickly analyze the image that you are searching for, pinpointing only the best matches. Besides that, search by image with lenso.ai does not require any specific background knowledge or skills. Reverse image search is designed to fit diverse needs, whether you're a professional photographer looking for different places/landscapes/landmarks, a marketer searching for related or similar images, an enthusiast exploring the duplicates/copyright or you want to protect your privacy using face search.Starting Price: $19.99 per month -
3
Social Catfish
Social Catfish
We help you find lost connections and verify a person's online identity using images, email addresses, phone numbers and online profiles. A reverse name search allows you to find people using their names. By using a reverse name lookup, you can find out what social accounts they have under their names. From there, you are able to get additional information such as name, physical address, phone numbers and even their relatives. This is great for people who think they might be catfished, people who want to avoid getting scammed or just connect with loved ones and lost connections. Find lost connections and verify if people are really who they say they are online. Social Catfish helps you find people and verify information like images, email addresses, phone numbers and online profiles. Get access to powerful tools to easily search through billions of hard to find public records all in one place to find lost connections, verify someone’s online profiles, and manage your online data. -
4
PimEyes
PimEyes
PimEyes is an online face search engine that goes through the Internet to find pictures containing given faces. PimEyes uses face recognition search technologies to perform a reverse image search. Find a face and check where the image appears online. Our face finder helps you find a face and protect your privacy. Facial recognition online system allows you to search by image. PimEyes is a face picture search and photo search engine available for everyone. It is a great tool to audit copyright infringement. We believe that you have the right to find yourself on the Internet and protect your privacy and image. Using the latest technologies, artificial intelligence and machine learning, we help you find your pictures on the Internet and defend yourself from scammers, identity thieves, or people who use your image illegally. That is why we have created PimEyes - a multi-purpose tool allowing you to track down your face on the Internet, reclaim image rights, and monitor your likeness.Starting Price: $29.99 per month -
5
Picarta
Picarta
Picarta is a powerful AI tool that identifies where any photo was taken by analysing visual content. Just upload an image, and Picarta returns accurate GPS coordinates—no metadata needed. Whether it’s a travel snapshot, drone footage, or a social media post, Picarta helps reveal the exact image location worldwide. Perfect for OSINT, investigations, journalism, real estate, historical research, travellers, photographers, and more, Picarta supports global geolocation for ground-level and aerial imagery.Starting Price: $12.99 -
6
Epieos
Epieos
The ultimate OSINT tool for email and phone reverse lookup. Perform an email or a phone reverse lookup on our OSINT tool to uncover all social media profiles. Because we know your investigations are sensitive, we do not save any of your requests and results. We only implement OSINT techniques that do not send a notification to the target. Only real-time results from social networks, allowing you to save time on your investigations.Starting Price: €29.99 per month -
7
TinEye
TinEye
TinEye’s computer vision, image recognition and reverse image search products power applications that make your images searchable. We have built some of the world's fastest and most accurate image recognition APIs. Use image recognition for content moderation and fraud detection. Integrate fast and accurate label matching for the beverage industry. Track where and how your images appear online. Verify images, find where an image is appearing, comply with copyright. Connect the physical world to the digital using image recognition. Most likely the best color search tool in the world. -
8
OSINT Industries
OSINT Industries
OSINT Industries is a powerful open source intelligence platform designed to accelerate online investigations with unmatched accuracy and real-time data. It enables users to perform reverse lookups on emails, phone numbers, usernames, names, or crypto wallets, compiling comprehensive digital profiles by uncovering linked accounts, social media profiles, geolocation data, and activity timelines. It accesses intelligence from over 1,000 sources worldwide, ensuring a holistic approach to data analysis and retrieval. Advanced geospatial technology allows investigators to visualize subjects' digital footprints across the globe, while interactive timelines provide a sequential narrative of online activities. OSINT Industries emphasizes privacy, employing robust encryption and never storing search results. Its state-of-the-art algorithms guarantee zero false positives, delivering trustworthy intelligence every time.Starting Price: $25.78 per month -
9
Bing Visual Search
Microsoft
Check out our library of specialized skills to help you shop, identify landmarks and animals, or just have fun. With the Bing Search app, getting Microsoft Rewards is as easy as searching. Earn points for your searches and redeem for gift cards from your favorite stores and more. Getting results is a snap with Bing Visual Search. From solutions to math problems, deals on your latest street fashion find, and much more, just tap the camera icon and snap a pic. Find local restaurants, and things to do, and get deals for places near you. The Bing Search app also has advice on popular menu items and, once you've decided where to go, can help you get there with quick access to rideshare services and local transit info. -
10
SpiderFoot
SpiderFoot
No matter your use case, SpiderFoot will save you time by automating the collection and surfacing of interesting OSINT. Found a suspicious IP address or other indicators in your logs that you need to investigate? Maybe you want to dig deeper into the e-mail address used, or the links referenced in a recent phishing campaign your organization faced? With over 200 modules for data collection and analysis, you can be confident that with SpiderFoot you’ll be gaining the most comprehensive view into the Internet-facing attack surface of your organization. Red teams and penetration testers love SpiderFoot due to it’s broad OSINT reach and identification of low hanging fuit, revealing long-forgotten and unmanaged IT assets, exposed credentials, open cloud storage buckets and much more. Use SpiderFoot to continually monitor OSINT data sources and detect when new intelligence is discovered about your organization. -
11
Attack Surface Management detects known, unknown, and potentially vulnerable public-facing assets, as well as changes to your attack surface that may introduce risk. How? Through a combination of NetSPI’s powerful ASM technology platform, our global penetration testing experts, and our 20+ years of pen-testing expertise. Take comfort in the fact that the ASM platform is always on, working continuously in the background to provide you with the most comprehensive and up-to-date external attack surface visibility. Get proactive with your security using continuous testing. ASM is driven by our powerful automated scan orchestration technology, which has been utilized on the front lines of our pen-testing engagements for years. We use various automated and manual methods to continuously discover assets and leverage open source intelligence (OSINT) to identify publicly available data sources.
-
12
Baited
Baited SA
How convincing would a phishing attack be if it knew your suppliers, your tools, and your people? Baited helps you find out, before a real attacker does. Built by ethical hackers, Baited turns your organization’s public footprint into realistic phishing and social engineering simulations. AI and open-source intelligence (OSINT) shape each scenario around the details that make a malicious request believable. • Test your team across email, Slack, Teams, LinkedIn, SMS, and voice. • Build scenarios using relevant suppliers, familiar names, and workplace context. • Deliver immediate coaching when someone misses a warning sign. • Track risk by person, team, and attack technique. • Protect sensitive data with encryption, pseudonymised targets, and dedicated Swiss infrastructure. Could you spot the bait? Visit baited.io and take the 10-second phishing challenge.Starting Price: $6/month/user -
13
TraceVeil
TraceVeil
TraceVeil is an evidence-driven entity resolution and identity intelligence engine. Uncover operational links between companies, properties, and people for asset discovery, fraud investigations, and skip tracing. TraceVeil sits in the underserved middle: professionals who need entity resolution depth but can't justify enterprise pricing. This includes private investigators, asset recovery specialists, litigation support teams, OSINT researchers, investigative journalists, and compliance analysts at small to mid-size firms.Starting Price: $10/month -
14
PassiveTotal
RiskIQ
RiskIQ PassiveTotal aggregates data from the whole internet, absorbing intelligence to identify threats and attacker infrastructure, and leverages machine learning to scale threat hunting and response. With PassiveTotal, you get context on who is attacking you, their tools and systems, and indicators of compromise outside the firewall—enterprise and third party. Investigation can go fast, really fast. Find answers quickly with over 4,000 OSINT articles and artifacts. Along with 10+ years of mapping the internet, RiskIQ has the deepest and broadest security intelligence on earth. By absorbing web data like Passive DNS, WHOIS, SSL, hosts and host pairs, cookies, exposed services, ports, components, and code. With curated OSINT and proprietary security intelligence, you can see everything—from every angle—on the digital attack surface. Take charge of your digital presence and combat threats to your organization. -
15
Social Links
Social Links
We bring together data from 500+ open sources covering social media, messengers, blockchains, and the dark web, to visualize and analyze a holistic picture for streamlining investigations. Conduct investigations across 500+ open sources with the help of 1700+ search methods. Extract user profiles, numbers, messages, groups, and more. View transactions, addresses, senders, recipients, and more. Access an expansive set of original search methods. Gain full access to darknet marketplaces, forums, and more. Delve into an extensive set of corporate sources. A suite of data extraction and analysis methods across social media, blockchains, messengers, and the dark web is connected directly to your in-house platform via our API. An enterprise-grade on-premise OSINT platform with customization options, private data storage, and our widest range of search methods. Companies from S&P500 and law enforcement agencies from 80+ countries rely on Social Links' solutions. -
16
Videris
Blackdot Solutions
Videris is an enterprise-grade open-source intelligence platform designed to help organizations collect, analyze, and visualize public and deep-web data to uncover hidden risks and networks. It enables users to search across corporate registries, surface web, deep and dark web, and social media, then layer internal or niche data sources for enriched context. Featured capabilities include AI-driven risk analysis, automated entity disambiguation, network visualization tools that map connections between people, organizations, and events, secure browsing of live web content without revealing investigator identity, and automated reporting that preserves evidential integrity with full sourcing and audit logs. It offers two modes: an “Automate” workflow for high-volume, repeat investigations and a “Investigate” mode for expert-driven deep dives into complex cases. -
17
OSINTverse
OSINTverse
OSINTverse is an open-source intelligence ecosystem that provides investigation tools, data-provider integrations, APIs, educational content, and community resources. Its SearchIn platform offers a UI-first investigation workspace where users can start with an identifier, query multiple integrated OSINT providers, and organize findings into cases. GraphIn provides a graph-first workflow for starting with an entity, expanding relationships through transforms, triaging results, and sharing investigation snapshots. Both products use the same prepaid wallet, with no subscription or per-seat requirement and credits that do not expire. OSINTverse also provides a SearchIn API for engineering teams, shared team workspaces, and integrations with providers such as Shodan, SecurityTrails, DeHashed, Snusbase, Hunter.io, BuiltWith, WhoisXML, and OSINT Industries.Starting Price: $10 -
18
Image Reverse
Image Reverse
Image Reverse is a free online image finder that can help you quickly identify images and find their source. It can also accurately identify faces in images to protect your copyright and portrait. Image Reverse uses advanced AI and encryption technology to protect your privacy and data security.Starting Price: $0 -
19
Darkscope
Darkscope
In contrast to many other so-called dark web intelligence providers that use OSINT and only aggregate data, Darkscope has developed a human-like search technology that works in the deep web, on social media and in the dark web. Darkscope will run a one-off full Threat Scan of the internet, social media and the dark web on your business, your internet presence and your key people. This will show if you are at risk from a cyber attack and how you can improve your cyber security. Most other threat intelligence providers aggregate threat information using OSINT. Commonly, you will receive a threat intelligence stream that is only between 1% and 5% relevant to you. When you consider that those preparing a cyber attack on your business will have researched you: your staff, partners, and customer base, a stream of generic threat intelligence has only little value if any. -
20
SL Crimewall
Social Links
What is SL Crimewall? SL Crimewall is a powerful OSINT (Open-Source Intelligence) platform that streamlines the entire investigation process. It gives users access to 500+ open sources, including social media, messengers, blockchains, and the Dark Web, with tools for fast, actionable analysis. Key Features: - Case Management & Collaboration: Work across teams with secure, scalable case handling. - Data Access: Collect real-time data using 1,500+ proprietary methods. - Automation: Use templates, scripts, and AI tools to speed up analysis and reduce manual work. - Visualization: Map digital footprints and links to uncover hidden patterns. SL Crimewall reduces investigation time and delivers more accurate results for both public and private sector teams. -
21
Media Sonar
Media Sonar Technologies
Harness the unique insights only available from Web Intelligence & Investigation to better protect your corporate brand and assets. Our unique investigative module, Pathfinder, empowers both novice and experienced security teams with a streamlined path of next step related entities and a visible recording of your selected investigative trail. Media Sonar integrates the top OSINT tools and data sources into a seamless, single platform making it 30X faster than conducting OSINT with traditional methods. Your team will no longer be required to spend hours going in and out of multiple, incompatible OSINT tools and manually compiling results. Our Web Intelligence & Investigations platform will broaden your lens on your digital attack surface, helping you to secure your brand and assets and strengthen your security operations posture. Equip your security team with visibility into indicators of threat emerging outside of your organization, with intelligence from the Open and Dark Web.Starting Price: $1,500 per 3 users per month -
22
Echosec
Flashpoint
Anchored by Echosec, Flashpoint’s geospatial Open-Source Intelligence (OSINT) product, the Physical Security Intelligence (PSI) solution offers an extensive range of global open-source data fused with geospatial enrichments, integrated AI, and expert finished intelligence, so practitioners can understand critical events, protect executives, and safeguard physical assets. Accelerate investigations and enhance situational awareness with open-source data, intelligence expertise, analytical tools, and AI enrichments. Effortlessly filter out social media noise to extract meaningful information quickly, monitor the topics and locations that matter to your organization, and alert the right team members when relevant posts are detected. -
23
ReverseImageSearch.org
ReverseImageSearch.org
ReverseImageSearch.org is a free, AI-powered reverse image search tool that allows users to find similar images, track image usage, and verify authenticity across the web. Users can upload images in formats like JPG, PNG, WEBP, and HEIC, or paste image URLs, and the tool searches across Google, Bing, and Yandex to find matching results. It employs advanced artificial intelligence algorithms to analyze objects, shapes, color schemes, and facial features, providing accurate and precise results. Key features include the ability to track where and when images have been uploaded online, analyze image authenticity, detect fake profiles, and improve search engine optimization by identifying unauthorized use of images. ReverseImageSearch.org ensures user privacy by not storing uploaded images; all data is automatically deleted after the search process is completed.Starting Price: $4.99 per week -
24
DeepState
DeepState
DeepState is a desktop investigation analysis platform for OSINT analysts, investigative journalists and corporate security teams. People, organisations, events, documents, social posts, locations and crypto wallets sit on one infinite canvas as typed nodes, joined by reasoned connections (funds, controls, contradicts), with a timeline, narratives and full-text search. An AI agent beside the board has 70+ research tools: web search, page capture, Wayback Machine, WHOIS, X, Reddit, Bluesky, YouTube, LinkedIn, CourtListener, SEC EDGAR, sanctions lists, historic newspapers, blockchain and OpenStreetMap. It creates and links nodes itself, cites sources, and every action can be undone. Captured evidence keeps its URL, retrieval time, archived copy and credibility rating. Boards export to briefing decks and PDFs. Case data stays in a local SQLite file; use Claude, ChatGPT, OpenRouter, OpenCode or offline Ollama. Windows, macOS, Linux.Starting Price: $29/month -
25
RemoteView
RemoteView
RemoteView is a real-time global intelligence map that combines public information about conflict and unrest, internet outages, shipping chokepoints, earthquakes, and other disasters in one live view. It covers key maritime routes including the Red Sea, Suez, Hormuz, Panama, and Malacca, and provides country pages and live situation hubs for exploring events by place and topic. The service is intended for analysts, journalists, OSINT researchers, and risk and security teams monitoring public events and changing conditions across regions. The map places these open-source signals in geographic context and helps users follow developments relevant to research, reporting, and risk awareness. A public demo is available on the website, alongside Personal and Pro subscription plans and a seven-day trial.Starting Price: $19.99/month -
26
revel8
revel8
revel8 is an AI-native security awareness platform that offers solutions designed to enhance organisational resilience through multi-channel simulations across email, SMS, voice, and video deepfakes. Features include OSINT risk profiling, gamified micro-learning, and real-time reporting, supporting NIS2 and ISO 27001 compliance for SMBs to enterprises across Europe. To explore an interactive preview, pricing options, or speak with our team, visit our website. -
27
ClarityRadar
ClarityRadar
ClarityRadar is a web-based reverse image search service. Upload a photo and the platform scans publicly available sources to find where the same image, or a visually similar one, has been published online - surfacing outdated profiles, reused images and unauthorized copies of your pictures The service also includes phone number and name lookup tools that aggregate data from open sources, helping users check unknown contacts before responding to them. Phone reports combine carrier and region data, messenger presence and public mentions into a single summary Everything runs in the browser with no installation. Searching is free; unlocking a full report is a one-time payment, with discounted multi-report packs. The interface is available in ten languages.Starting Price: $4.99 one-time -
28
Intuo
Intuo
Intuo monitors CVEs, vendor advisories, and trusted OSINT, then tells you exactly what matters to your stack or each client's stack, and answers your questions with agentic AI search. Every day brings vendor spam, conflicting feeds, breach rumors, and regulatory noise. Drowning in thousands of CVE notifications, vendor advisories, and threat intel feeds with no context for your environment. Tab-hopping between CVE databases, vendor sites, and OSINT sources to piece together what actually matters to your stack. That moment when you discover a critical vulnerability affecting your clients' infrastructure days after the patch was released. Scrambling to create security briefings and threat reports for clients without reliable, cited intelligence sources. Multi-tenant visibility and critical-only alerts across dozens of clients. KEV and EPSS aware prioritization with quick IOC investigations. -
29
ipdata
ipdata
Lookup the location of any IP Address to localize your website content, analyze logs, enrich forms, target ads, enforce GDPR compliance, perform redirections, block countries and more. We provide a fast, highly available IP Geolocation API backed by accurate data. Locate your website visitors by IP Address with city and postal code granularity. Check if an IP Address is listed in any of 200+ OSINT Threat Feeds instantaneously. Detect anonymous users to protect your business from fraud and abuse. Get the AS Organization and number of any IP Address. Determine whether an IP Address belongs to an ISP, Datacenter/Hosting or Business. We update hundreds of data sources roughly every 15 minutes. We help you prevent fraud on your ecommerce store. Stop fake account signups on your SaaS or App. Manage GDPR and CCPA regulatory compliance. Localize or fence your website's content based on a user's location and analyze logs and website traffic.Starting Price: $10 per month -
30
Reversee
Reversee
Reversee is an application that serves as a bridge between your pictures and reverse image search engines, allowing you to make a search by image. Use Reversee to search for webpages displaying a picture, a higher resolution version of a picture, or someone's social network profile. Features include searching with Google Images (default search engine), an editor to crop and rotate the picture, smart navigation of your device photos, the ability to paste images, setting the size of the image sent to the search engine, opening the results page in various browsers or saving options, saving pictures from the web, and an extension to use Reversee inside other apps like Photos, Safari, Chrome, and any app that exports an image or URL. Pro features add two additional search engines (Bing and Yandex), auto crop to automatically remove borders of a picture, editor gestures for complete image visualization, and displaying detailed information about the image.Starting Price: Free -
31
Black Kite
Black Kite
The Black Kite RSI follows a process of inspecting, transforming, and modeling collected from a variety of OSINT sources (internet wide scanners, hacker forums, the deep/dark web and more). Using the data and machine learning, the correlation between control items is identified to provide approximations. Operationalize with a platform that integrates with questionnaires, vendor management systems and process workflows. Automate adherence to cybersecurity compliance requirements and reduce the risk of a breach with a defense in depth approach. The platform uses Open-Source Intelligence (OSINT) and non-intrusive cyber scans to identify potential security risks, without ever touching the target customer. Vulnerabilities and attack patterns identified using 20 categories and 400+ controls, making the Black Kite platform 3x more comprehensive than competitors’. -
32
CYBORA
CYBORA
CYBORA is a Cyber Risk Resilience platform that ties every risk to the live systems and controls behind it, then keeps checking around the clock — so exposure is measured continuously rather than reconstructed once a year. Risks carry owners, treatments, appetite thresholds and live key risk indicators on a 5x5 matrix, with control mapping across ISO 27001, NIST CSF, SOC 2, PCI DSS, HIPAA, GDPR, CIS v8, DORA and NIS2. Third-party risk runs 34 deterministic rules including DORA Article 28 concentration exposure. Assets and AI models are registered and classified for EU AI Act risk. Detection feeds the register directly: OSINT and darknet monitoring, IOC tracking, SOC case management with MITRE ATT&CK mapping and SIEM export to Splunk, Elastic and Sentinel. Business impact analysis, continuity plans and a live crisis workspace close the loop. Delivered from Lithuania, the UK and the US. Private tenant, two 256-bit keys, self-hosting, 20+ languages.Starting Price: $250/month -
33
i2
N. Harris Computer Corporation
Turn overwhelming and disparate data from multiple sources into actionable intelligence in near-real time to make informed decisions. Quickly find hidden connections and critical patterns buried in internal, external, and open-source data. Experience i2’s world-class intelligence analysis software for yourself. Request an i2 demo and learn how to uncover critical connections and hidden insights faster than ever. Track critical missions across law enforcement, fraud and financial crime, military defense, and national security and intelligence sectors with the i2 intelligence analysis platform. Capture and fuse structured and unstructured data from internal and external sources, including OSINT and dark web data, to provide an expansive data pool to search and discover over. Fuse advanced analytics with sophisticated geospatial, visual, graph, temporal, and social analysis capabilities to give analysts greater situational awareness. -
34
Reverse Contact
Reverse Contact
Find easily reliable professional information about a person and their companies based on their personal or professional email address. The service automates the process of gathering professional information and company-related data from email addresses, streamlining lead generation and contact management. Quickly and easily gather reliable information on a person's career path, their current job and all relevant company data. Expand your Linkedin network by associating an email address with your prospect's LinkedIn profile effortlessly. Reverse Contact employs exclusive proprietary OSINT algorithms and its servers to discover, assess, and authenticate all data. The enrichment process does not rely on any databases, ensuring it is 100% GDPR and CCPA compliant. -
35
SauceNAO
SauceNAO
SauceNAO is a reverse image search engine that allows users to identify the source of images by uploading or pasting them into the platform. It specializes in anime, manga, and other art-related content, indexing billions of images from various sources, including Pixiv, Danbooru, Nico Nico Seiga, and more. Users can search across multiple databases simultaneously and utilize features like Safe Search and database selection to refine their results. SauceNAO also offers browser extensions for Chrome and Firefox, enabling quick searches directly from the context menu. It was developed by Xamayon and has been operational since October 2008, continually expanding its database and refining its search algorithms to provide accurate and efficient results. Uploaded images are temporarily stored to facilitate the search process and are deleted shortly thereafter to ensure user privacy.Starting Price: Free -
36
Chance AI
Chance AI
Chance AI is an AI-powered visual search engine that enables users to interact with images to access information, news, and stories. Recognizing objects within images, allows users to delve into the layers of emotion and context behind each visual. This innovative tool aims to make art and imagery more accessible and meaningful, fostering genuine connections in an increasingly disconnected world. Founded by a team passionate about art and technology, Chance AI seeks to restore the richness of visual storytelling, providing insights that go beyond mere images. Users can explore and understand the narratives hidden within every picture, from the mysteries of distant planets to the history behind a painting in a museum. The platform is designed for creative and curious minds, offering a unique way to connect with the emotions and stories that art can inspire. By utilizing advanced visual intelligence, Chance AI transforms the way people interact with visual content.Starting Price: Free -
37
DNSdumpster.com
DNSdumpster.com
DNSdumpster.com is a free domain research tool that can discover hosts related to a domain. Finding visible hosts from the attacker's perspective is an important part of the security assessment process. The ability to quickly identify the attack surface is essential whether you are penetration testing or chasing bug bounties. Network defenders benefit from passive reconnaissance in a number of ways, with analysis informing information security strategy. Understanding network-based OSINT helps information technologists to better operate, assess, and manage the network. Save time and headaches by incorporating our attack surface discovery into your vulnerability assessment process. No brute force subdomain enumeration is used as is common. We use open source intelligence resources to query for related domain data. It is then compiled into an actionable resource for both attackers and defenders of Internet-facing systems.Starting Price: Free -
38
SocialFinder.ai
SocialFinder.ai
Find anyone online with a single photo SocialFinder uses cutting-edge AI to quickly scan the web, locate social media profiles, determine image geolocation, and verify if the person you're talking to is who they say they are.Starting Price: $19/month -
39
Maltego
Maltego Technologies
Maltego is a Java application that runs on Windows, Mac and Linux. Maltego is used by a broad range of users, ranging from security professionals to forensic investigators, investigative journalists, and researchers. Easily gather information from dispersed data sources. View up to 1 million entities on a graph. Access over 58 data sources in the Maltego transform hub. Connect public (OSINT), commercial and own data sources. Write your own Transforms. Automatically link and combine all information in one graph. Automatically combine disparate data sources in point-and-click logic. Use our regex algorithms to auto-detect entity types. Enrich your data through our intuitive graphical user interface. Use entity weights to detect patterns even in the largest graphs. Annotate your graph and export it for further use.Starting Price: €5000 per user per year -
40
Venntel
Venntel
Venntel is a geolocation intelligence tool that delivers trusted, privacy-focused human mobility analytics and OSINT solutions with on-demand access to global location intelligence via proprietary APIs and machine learning-powered analytics. It processes raw geolocation data from many sources, enhances quality by reducing noise and scoring derivation and anomalies, and provides deeper insights on movement patterns to identify trends, uncover anomalies, support mission scenarios, and predict future outcomes. It supports critical use cases such as national security operations, risk management, defense and civilian challenges, and integration of geolocation data with open-source intelligence to improve situational awareness and analytical accuracy. Venntel’s advanced analytics enable users to quickly assess active threats, manage strategic and operational risk locally and globally, and enrich other commercial or internal data streams with mobility insights. -
41
Sepio
Sepio
Detect, accurately identify, and manage your asset risks based on existence, not behavior. Augmented by OSINT data sources and internal cyber research, Sepio provides up-to-date intelligence on known asset vulnerabilities, so you don’t have to chase them. Granular parameters allow you to create and customize multiple differentiated policies that govern your entire ecosystem of IT, OT, and IoT assets so you have flexibility when it comes to managing your risks. Automated policy enforcement ensures immediate and uniformly applied action saving you from manual intervention so you can respond to asset risks and threats faster. Integration with third-party tools allows for expanded policy actions. Complete visibility to all of your assets, whether connected as a peripheral or a network element. Mitigate risks from uncontrolled or spoofing assets. Easy to operate, requiring low maintenance and minimal human intervention. -
42
REDXRAY
Red Sky Alliance
You have spent years building your business, so don’t let cyber criminals destroy it in seconds. Using our proprietary intelligence feeds, REDXRAY can identify threats against your networks, supply chain, or target companies/agencies daily. The emailed report covers the following threat types: Botnet Tracker, Breach Data, Keylogger Records, Malicious Emails Context, Malicious Email Detections, OSINT Records, Sinkhole Traffic, and THREATRECON Records. -
43
Insomnia
CQR
Insomnia is an autonomous AI pentesting and offensive security platform from CQR Cybersecurity. Point it at a target and its AI red team runs recon, vulnerability scanning, OSINT, CVE validation, exploitation and privilege escalation across web apps, APIs, networks, cloud and Active Directory, then writes a client-ready PDF, DOCX or HTML report with CVSS scoring and fixes. It brings 275+ security modules into one tool: SAST and DAST, secret detection with live key validation, dependency and CVE scanning, API and GraphQL testing, wireless audit, Active Directory auditing with BloodHound, an HTTP interception proxy and a CI/CD pipeline builder. It also ships Insomnia OS, a Debian-based offensive OS. There is a free Community Edition and a free SAST engine (pip, npm, Docker, Homebrew, plus VS Code and JetBrains plugins). Paid Advanced and Pro plans add full AI automation, the 30,000+ CVE database, exploitation tooling, OSINT and mobile analysis.Starting Price: $149/month -
44
Chorus Intelligence
Chorus Intelligence
Manage end-to-end digital investigations from one platform, one dashboard. The Chorus Intelligence Suite (CIS) is a one-platform, one-dashboard solution for managing every stage of a digital investigation. The CIS delivers powerful data cleansing, analysis, search, enrichment, and evidential reporting tools, to law enforcement, financial, and corporate institutions across the globe. The Chorus Intelligence Suite (CIS) offers a powerhouse of investigative tools to progress end-to-end digital investigations. Progress investigations through a single pane of glass. Search, analyze, and report on all investigative data, direct from the CIS. Overlay analytical data with OSINT and internal data, in one interactive dashboard, to spot immediate connections. Visualize all your digital data in one interactive dashboard. Manage end-to-end digital investigations from one platform. Collaborate on and share cases internally and externally, via a secure and auditable environment. -
45
Ipregistry
Ipregistry
Understand your audience and act upon—locate visitors by IP address, enrich forms, target mobile users, detect and prevent online fraud, analyze logs, or perform geo IP based redirections. Ipregistry is a trusted and in-depth IP Geolocation and Threat detections source of information that can benefit publishers, ad networks, retailers, financial services, e-commerce stores and more. Our products produce insights that can be used to personalize content for users, customers or leads in a non-intrusive manner, based on their currency, location, time zone, company or carrier details. These insights can also be leveraged to deliver targeted advertising, control the distribution of digital media but also prevent online fraud by detecting malicious activities: requests from hosting nodes, users using Tor, public proxies or users reported as abusers and attackers in 220+ OSINT threat feeds.Starting Price: $1.8 per 14.409 lookups -
46
smartKYC
smartKYC
smartKYC’s technology drives faster, better and more cost-effective KYC at every stage of the relationship – liberating human effort to focus on decision-making rather than laborious research. smartKYC fuses artificial intelligence with linguistic and cultural sensitivity and deep domain knowledge to set new standards for KYC quality, whilst transforming productivity and hardwiring compliance conformance. smartKYC applies AI to extract precise open source intelligence (OSINT) from vast corpuses of information – internet and deep web, news archives, watchlists and corporate databases. All of this happens at speed and at scale creating new possibilities such as straight through processing, batch remediation and continuous KYC risk monitoring. smartKYC - the world’s most advanced enterprise solution for KYC due diligence automation. -
47
ImmuniWeb Discovery
ImmuniWeb
Attack Surface Management and Dark Web Monitoring. ImmuniWeb® Discovery leverages OSINT and our award-winning AI technology to illuminate attack surface and Dark Web exposure of a company. The non-intrusive and production-safe discovery is a perfect fit both for continuous self-assessment and vendor risk scoring to prevent supply chain attacks. Attack Surface Management Detect, map and classify your on-prem and cloud IT assets Continuous Security Monitoring Detect misconfigured or vulnerable IT assets Vendor Risk Scoring Discover insecure third parties that process your data Dark Web Monitoring Detect stolen data and credentials, and compromised systems Brand Protection Detect online misuse of your brand and take down phishing websitesStarting Price: $499/month -
48
Threat Landscape
Ecliptica Labs AB
Threat Landscape is an automated threat intelligence platform built for security analysts and SOC teams who need high-confidence, actionable intelligence — without the manual triage. The platform continuously ingests and processes global OSINT and darknet sources, automatically extracting structured facts and filtering out noise before it reaches analysts. All intelligence is normalized into STIX 2.1 format, MITRE ATT&CK mapped, and correlated across threat actors, malware families, CVEs, TTPs, and IOCs — so teams spend time acting on intelligence, not building it. Key capabilities include interactive dashboards, visualized STIX threat graphs, advanced search and filtering, darknet monitoring for leak-site claims and criminal chatter, automated daily and weekly digests, and a RESTful API for integration with SIEM, SOAR, and TIP platforms.Starting Price: $499/month -
49
X-Ray
X-Ray Contact
X-Ray.Contact is an AI-powered People Search and identity verification platform designed to help businesses, analysts, journalists, recruiters, security professionals, and individual users investigate digital footprints more efficiently. Users can search people by email address, phone number, username, name, or social profile URL and receive a structured profile that combines publicly available identity signals from multiple sources. Instead of manually reviewing scattered information, users can quickly validate identities, discover connections, and gain additional context through AI-assisted analysis. The platform supports Reverse Email Lookup, Phone Number Lookup, Reverse Username Search, Reverse Name Search, Background Check workflows, Sanctions Screening, and Free Russian Search. Users can start with 100 free people search Basic credits every month and move to Advanced Search when deeper profile analysis, risk factors, and broader identity insights are needed.Starting Price: $2/month -
50
Image Raider
Infringement.Report
Image Raider is a reverse image search tool provided by Infringement.Report, designed to help users identify where an image appears online. By uploading an image or pasting its URL, the tool searches the internet to find the image's source and other pages where it has been posted. This service is particularly useful for individuals and organizations aiming to monitor the use of their images across the web. Infringement.Report also offers dedicated monitoring services tailored for law firms, photographers, and developers, providing specialized solutions to track and manage image usage effectively.
