SpiderFoot
Open-source OSINT automation tool with 200+ modules for threat intelligence and attack surface mapping
ToolOSINT ToolsSelf-hosted, Open source
Pricing: Free and open source (MIT).
Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed September 2026 · How we review listings
What is SpiderFoot?
SpiderFoot is an open-source (MIT) tool that automates OSINT collection for threat intelligence and for mapping an organisation's attack surface. Given a target such as a domain, IP address, email address or name, it runs over 200 modules against data sources and correlates the results, using a YAML-configurable correlation engine with 37 pre-defined rules. It runs as a self-hosted web application or from the command line, supports Docker deployment, can search the dark web through Tor, and can call other tools such as Nmap and DNSTwist. The project has been on GitHub since 2012.
Best for: Security teams that want automated reconnaissance and attack surface mapping on their own infrastructure.
Pros
- Free and open source under the MIT licence
- Broad automated collection from one scan
- Self-hosted, so scan data stays on your own infrastructure
Things to check
- Self-hosted: you install, run and maintain it
Reported in public reviews and vendor documentation. See sources below.
Key Features
Do you work at SpiderFoot? to confirm the details or send us a correction.
Add the Cyber Vendor Guide badge to your site
Sources & references
Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.
Spot an error, or do you represent SpiderFoot? Request a correction.
Key facts
- Pricing
- Free and open source (MIT).
- Model
- Open source
- Founded
- 2012
- Cloud
- No
- Self-hosted
- Yes
- Open source
- Yes
SpiderFoot Alternatives
- MaltegoOSINT and link analysis platform that maps people, organisat...
- Intelligence XSearch engine for leaks, pastes, stealer logs, darknet and W...
- SearchWebCodeSearch engine for website source code across about 131 milli...
- MaigretOpen-source tool that builds a profile from a username acros...
- SherlockOpen-source command-line tool that checks a username across ...