OpenOSINT

Run it yourself: uvx openosint web (one command, no keys) No terminal? Use OpenOSINT Cloud in your browser, first check free

Docs · Claude Code plugin · MCP server · Live demo

Quickstart

Needs uv. No API keys for these commands.

# Local web app with chat, graph and globe
uvx openosint web

# Or one direct check, no AI involved
uvx openosint exposure example.com

Grade: B  Score: 88/100
Checks: email OK, registration OK (passive)
        tls OK, http_headers OK (these touch the target)
  [LOW] DMARC has no aggregate report address (dmarc_no_rua)
  [LOW] Strict-Transport-Security header missing (hsts_missing)

Real output, trimmed and re-wrapped. More commands: CLI reference · install guide.

What you can do

Moved to Quickstart above and the CLI reference.

Tools

What it can look up. Per-tool docs: openosint.tech/tools. Only passive tools are on by default.

Tool	What it finds	Key needed
search_dns	DNS records, SPF, DMARC	No
search_rdap	Registrar, dates, name servers (RDAP)	No
search_whois	WHOIS registration data	No
search_ip	Hostname, ASN, city for an IP	Optional
search_ip2location	Geolocation, ISP, proxy/VPN/Tor flags (sponsored)	Yes
search_gdelt_geo	Geolocated news mentions (GDELT)	No
generate_dorks	Search-dork URLs for a target	No
search_paste	Paste-site mentions	No
search_github	Repos, code and users	Optional
search_breach	Breaches for an email (HaveIBeenPwned)	Yes
search_shodan	Open ports and banners	Yes
search_censys	Hosts and certificates	Yes

Sherlock, holehe, sublist3r and phoneinfoga run as local binaries you install yourself. Setting up the Bright Data tools: Using OpenOSINT with Bright Data.

Why OpenOSINT

Tools run as real Python code and every finding cites the call that produced it. Compared with SpiderFoot, OpenOSINT has far fewer modules and is built to be driven by an agent. See the comparison.

This is the beginning of the README. Read the rest at the original. Read the full README ↗