SearchWebCode vs OSINTLeak
SearchWebCode
SearchWebCode is a search engine for the source code of public websites. It indexes the HTML, JavaScript and CSS of about 131 million homepage domains and matches exact strings or regular expressions, returning every site that contains the match together with its full source. Security uses include finding sites that load a known-bad script or an outdated library, and linking sites that share a tracking or analytics ID; it is also used to map technology stacks. A signature library identifies common technologies by their fingerprints, and results can be filtered by domain and exported to CSV or read through an API.
Pros
- Regex search across web source code at a low per-search price
- Useful for tracing shared analytics IDs and for finding sites loading a vulnerable script
- CSV export and API on every plan
Things to check
- Indexes homepages by default; every page is an Enterprise option
- Results reflect the last crawl; the index is refreshed monthly, per its Capterra listing
- Unlimited plan carries a fair-use limit of 500 requests a day
Pricing: Pay as you go at $0.05 a search (empty results are free), or Unlimited at $10/month billed $120 a year with a fair-use limit of 500 requests a day. Enterprise on request.
OSINTLeak
OSINTLeak is a cloud-hosted breach intelligence platform whose page title describes it as a breach intelligence platform and stealer log search. It offers search across emails, usernames, phone numbers and other indicators with 17 or more search selectors, domain and IP intelligence, WHOIS, reverse image search and real-time monitoring, and it targets OSINT researchers, enterprises, governments and law enforcement. Pricing is published in US dollars from a free Community tier of 20 searches per day to a Developer tier at USD 250 per month with API access, and an Enterprise option from USD 6,500 per year. A Python client and command-line tool, pyosintleak, is published on GitHub and PyPI. The terms state the service is operated by BREACHGUARDS LLC, is available only to professional users, and that data is obtained from public and less public sources rather than purchased from threat actors; no address or jurisdiction is published. An opt-out page allows individuals to remove their email address from public search after verification.
Pros
- Published tiered pricing with a free tier
- Public Python client and CLI on GitHub and PyPI for API automation
- Terms state data is not purchased from threat actors and the service is restricted to professional users
Things to check
- Operator named only as BREACHGUARDS LLC with no address or jurisdiction published, and no registry record found
- Access to stealer logs and leaked credentials raises legal and ethical questions a buyer must clear with counsel
Pricing: Community free (20 searches per day); Starter USD 35 per month or USD 350 per year (150 per day); Platinum USD 100 per month or USD 960 per year (500 per day); Developer USD 250 per month or USD 2,400 per year (1,500 per day, API); Enterprise from USD 6,500 per year.