53 free OSINT tools,
right inside Telegram.

Google's refined search page: filter by exact phrase, file type, domain, language, and region without memorizing search operators.

Checks a username's presence across hundreds of social media sites and websites at once.

The Internet Archive's archive of the web. View historical snapshots of sites as they appeared in the past, even after deletion.

The world's largest open database of company filings: look up ownership, directors, registration status, and corporate structures.

Free searchable database of U.S. court opinions, dockets, filings, and judicial data from the Free Law Project.

Reverse image search: find where an image came from, how it's being used, and whether modified versions exist online.

Official ICANN WHOIS lookup: domain registration details, name servers, registration dates, and ownership records.

Crowdsourced collection of open-source research tools, databases, and methodologies compiled by Bellingcat.

Open-source automation tool for threat intel and footprinting, pulling from 100+ public data sources (IPs, domains, emails, names).

Google privacy tool to monitor search results containing your personal contact info and request removals.

World's largest source of live public safety audio streams: police scanners, fire, EMS, aircraft, and rail.

Software-defined radio receivers on the internet: listen to and tune shortwave radio frequencies worldwide from a browser.

Search engine for internet-connected devices, domains, and certificates, used to analyze exposed infrastructure.

Privacy monitoring service: check whether your email or personal data was shared or sold by data brokers.

Virtual card service: generate disposable or merchant-locked debit cards to hide your real card details when shopping.

Disposable online SMS reception (burner numbers) to receive verification codes without giving out your phone number.

Amazon price tracker: historical price charts and alerts when prices drop to your target.

Detect fake or sponsored product reviews (ReviewMeta) and track long-term price and rank trends (Keepa).

Open-source platform for journalists and researchers to upload, analyze, OCR, and annotate primary source documents.

How modern apps run across multiple cloud regions and providers at once — the design pattern behind services that never go down.

How big companies process massive datasets fast. Spark is the free, open-source engine behind much of today’s data work.

The security model where nothing is trusted by default — every user and device must prove itself, every time.

How teams ship software securely and automatically: Kubernetes runs the apps, Terraform builds the infrastructure as code.

What happens after a hack: how security teams detect intrusions, contain them, and hunt for attackers hiding in networks.

Using AI to handle repetitive work for you — sorting email, summarizing documents, moving data between apps.

The legal side of hacking: testing your own systems for weaknesses before criminals find them.

How businesses move from their own servers to the cloud without breaking everything.

Managing servers and networks with text files instead of clicking around — repeatable, version-controlled, and automated.

Showing what you can do beats listing what you know — building real projects that prove your skills to employers.

Small files sites store in your browser to remember you. Some are useful (keeping you logged in); others follow you across the web.

Invisible 1×1 images hidden in pages and emails that report back when you open them — including your location and device.

Those extra ?utm_source= bits on links tell companies exactly which ad, email, or post brought you there.

Your IP address reveals your rough location and internet provider to every site you visit.

Sites can identify you without cookies by combining your screen size, fonts, timezone, and dozens of other tiny details.

Your phone has a resettable ad ID (IDFA on iPhone, AAID on Android) that apps use to track you across different apps.

Many free apps hide third-party trackers (SDKs) that send your behavior data to advertisers and data brokers.

GPS, Wi-Fi networks, and cell towers can pinpoint your phone — often collected by apps that don’t need it.

Marketing emails often contain hidden pixels that tell the sender exactly when and where you opened them.

Logging into Google, Facebook, or Apple on multiple devices lets them connect everything you do into one profile.

Type in your email address and find out which data breaches exposed it — and exactly what information leaked.

Paste a suspicious link or upload a file; it scans with 70+ antivirus engines and tells you whether it’s dangerous.

A search engine for internet-connected devices: webcams, servers, routers, and industrial systems exposed online.

Opens a suspicious link in an isolated sandbox and shows you everything it does — without it ever touching your device.

Look up any IP address to see if it’s been reported for hacking, spam, or abuse — and report bad ones yourself.

A huge organized directory of OSINT tools, sorted by what you’re investigating: usernames, emails, domains, and more.

Enter an email or phone number and find public profiles linked to it across the web.

Enter any website address and get an A-to-F grade on its security setup.

A public archive of known software vulnerabilities, used by security researchers and defenders to understand and fix flaws.

Free in-browser file tools: convert PDFs, compress images, remove backgrounds — no signup needed.

Searches a username across 3,000+ websites to find where someone has accounts. Runs on your own computer.

Checks whether an email address is registered on 100+ websites — without sending any notifications.

Pulls the public Google footprint of a Gmail address: name, profile photo, reviews, and more.

Turns a username into confirmed email addresses by checking it across dozens of email providers.