OSINT Tools: 10 Tools compared

Maigret is an open-source (MIT) tool that collects a profile of a person from a username alone. Its project description says it checks about 6,000 websites. It extracts the information available on the profiles it finds, follows links to other accounts, and searches again recursively using any new usernames and IDs it discovers. Results can be filtered by site category and country and exported as HTML or PDF reports. It installs with pip, runs from a terminal or a web interface, and is also offered through a community Telegram bot.

Opsis OSINT is a hosted search platform for open-source intelligence. It takes a username, email address or domain, checks it against public sources in real time and returns the matching accounts with the profile data each source exposes, such as names, avatars, bios, follower counts and join dates. Opsis says it now runs about 1,100 modules: around 700 username platform lookups and 400 email enrichment modules, plus domain WHOIS and DNS tools. Its website still gives the earlier figure of 700+. A result only counts as a match when the source shows real profile signals, such as an avatar, display name or structured data. An HTTP 200 response on its own does not count. Premium searches, on the Basic plan and above, add 27 username platforms that need browser automation, including Facebook, Etsy and Crunchbase. The Pro plan adds a versioned REST API with synchronous, polling and streamed modes and a published OpenAPI schema. Opsis says it discards search results and keeps no database of people, and it logs each query with the account, timestamp and IP address for up to 90 days. The operator is Opsis LLC, a Minnesota limited liability company confirmed as active in the Minnesota Secretary of State registry. Its acceptable use policy permits licensed investigation, corporate due diligence, threat intelligence, law enforcement, journalism and academic research, and prohibits stalking, harassment, doxxing and FCRA, GLBA or DPPA-regulated screening.

OSINTLeak is a cloud-hosted breach intelligence platform whose page title describes it as a breach intelligence platform and stealer log search. It offers search across emails, usernames, phone numbers and other indicators with 17 or more search selectors, domain and IP intelligence, WHOIS, reverse image search and real-time monitoring, and it targets OSINT researchers, enterprises, governments and law enforcement. Pricing is published in US dollars from a free Community tier of 20 searches per day to a Developer tier at USD 250 per month with API access, and an Enterprise option from USD 6,500 per year. A Python client and command-line tool, pyosintleak, is published on GitHub and PyPI. The terms state the service is operated by BREACHGUARDS LLC, is available only to professional users, and that data is obtained from public and less public sources rather than purchased from threat actors; no address or jurisdiction is published. An opt-out page allows individuals to remove their email address from public search after verification.

Sherlock is an open-source (MIT) command-line tool that checks whether a username is registered on more than 400 social networks and websites. It can search several usernames at once and saves the accounts it finds to text, CSV or Excel files, with options for proxies, timeouts and checking a single site. It installs with pipx, pip or uv, or runs in Docker. The project has been on GitHub since 2018.

WhatsMyName is a community-maintained dataset of more than 700 websites and the rules for checking whether a username is registered on each, published under a Creative Commons BY-SA 4.0 licence. Other OSINT and digital-footprint tools build on it, and whatsmyname.app is a free browser-based tool built directly on the dataset that needs no installation. The project has been on GitHub since 2015.