Browse and search our comprehensive collection of OSINT tools
Scan an Android APK for hardcoded URLs, endpoints and secrets
Mobile-app security search engine surfacing APK secrets, keys and subdomains
Scan open cloud buckets for exposed files and secrets
Generates a target-specific password wordlist from personal details
Aggregated breach search across Dehashed, Snusbase and LeakCheck
Archive of leaked and classified public documents
Check if an email is in the Ashley Madison leak
CLI for querying the DeHashed breach API by email, username or domain
Crawls open Elasticsearch for breach data
Dark-web and Telegram monitoring for leaked corporate credentials
Search leaked credentials by email address
Monitors public GitHub for an org's leaked secrets and credentials
Search files in publicly exposed S3 and Azure buckets
Search 16B+ breach records by email, username or password
Check emails and domains against infostealer data
Email-to-footprint with 40B+ breach and stealer-log records
Text and image paste site, searchable for leaks
Browser extension that passively detects leaked API keys and secrets on pages
449B+ stealer-log and breach credential search, EU-hosted
Breach and stealer-log search across surface, deep and dark web
Search public text pastes for leaks and credentials
Mine a Slack workspace token for leaked credentials and secrets
Privacy-first OSINT aggregator over 37+ breach and dark-web sources
Search leaked breach data by name, email, or phone
