# useOSINT > Real-time open-source intelligence for government and enterprise. useOSINT resolves identity at machine speed: hand an agent a single selector — phone number, email address, or username — and it sweeps thousands of live sources, links the accounts back to one person, and returns structured, source-cited intelligence. Built for authorized investigation: government and law enforcement, regulated financial crime and sanctions work, corporate security and due diligence, and accredited journalism. Every capability documents its jurisdictional limits and assumes a documented lawful basis. Append `.md` to any URL below to retrieve its Markdown source instead of HTML — fewer tokens, no markup. ## Platform - [Capability catalog (JSON)](https://useosint.com/catalog.json?src=agent-skills): live machine-readable capability list, kept current without a docs update - [Skill source](https://github.com/useosint/osint-skills): all 28 capabilities, open source, runnable on public sources with no account - [useOSINT platform](https://useosint.com): hosted selector resolution across the same sources — access on request ## Start here — full investigations - [useOSINT](https://useosint.com/skills/useosint.md): - Entry point for open-source intelligence, investigation and verification work. Routes any identifier — a name, phone number, email address, username, domain, company, photo, crypto… - [Investigate anything](https://useosint.com/skills/investigate-anything.md): - Start-here router and tradecraft baseline for any investigation into a person, company, domain, image or selector. Sets authorised scope, turns a vague request into an answerable… - [Find anyone](https://useosint.com/skills/find-anyone.md): - Build a sourced, corroborated profile of a named individual from public records, social platforms, professional networks, court and property filings, licensing boards, patents, papers and… - [X ray a company](https://useosint.com/skills/x-ray-a-company.md): - Corporate due-diligence workflow — resolve a brand or website to its registered legal entity, map group structure and beneficial ownership, profile officers and directors, enumerate the… - [Recon a domain passively](https://useosint.com/skills/recon-a-domain-passively.md): - End-to-end passive reconnaissance for a domain, website or IP — builds an asset inventory covering registration, DNS, subdomains, infrastructure, tech stack, history and ownership without… - [Hunt a handle](https://useosint.com/skills/hunt-a-handle.md): - Enumerate a username across hundreds of platforms with sherlock, maigret and WhatsMyName, then correlate and confirm which accounts genuinely belong to the same person. Use for username… - [What an email reveals](https://useosint.com/skills/what-an-email-reveals.md): - Investigate an email address — MX and syntactic validation, Gravatar lookup, corporate email-format inference, breach exposure, and full mail-header analysis covering the Received chain… - [Whose number is this](https://useosint.com/skills/whose-number-is-this.md): - Investigate a phone number — E.164 normalisation with libphonenumber, phoneinfoga scanning, carrier and line-type identification, VoIP and burner detection, messaging-app registration… - [Where was this taken](https://useosint.com/skills/where-was-this-taken.md): - End-to-end workflow to establish where and when a photo or video was captured and whether it is authentic — evidentiary handling, metadata extraction, reverse image search for provenance… - [Pattern of life from socials](https://useosint.com/skills/pattern-of-life-from-socials.md): - Deep-dive a subject's social media presence — profile metadata, follower and mutual network, content analysis, and posting-time pattern of life across Instagram, Facebook, X/Twitter… - [Write the intel brief](https://useosint.com/skills/write-the-intel-brief.md): - Turn findings into a defensible intelligence product — BLUF key judgements, standardised estimative probability language, per-claim sourcing with timestamps and archived copies, separated… ## Map infrastructure without touching it - [Who owns this domain](https://useosint.com/skills/who-owns-this-domain.md): - Establish who registered and who operates a domain using WHOIS, RDAP and DNS. Use when running a whois lookup, querying RDAP, digging A, AAAA, MX, NS, TXT, SOA or CAA records, reading SPF… - [Find hidden subdomains](https://useosint.com/skills/find-hidden-subdomains.md): - Enumerate an organisation's subdomains and sibling domains from Certificate Transparency logs and passive DNS, without sending traffic to the target. Covers crt.sh and CT log queries… - [Find exposed servers](https://useosint.com/skills/find-exposed-servers.md): - Find internet-exposed hosts, ports, services and devices using third-party internet-scan data instead of touching the target. Covers Shodan and Censys query syntax, service banners… - [Read deleted pages](https://useosint.com/skills/read-deleted-pages.md): - Recover deleted, edited or historical web content using the Wayback Machine and its CDX API, archive.today, Common Crawl and Memento/Timetravel. Use when a page is deleted, changed or… - [Google like a spy](https://useosint.com/skills/google-like-a-spy.md): - Craft advanced search-engine queries and Google dorks to surface hidden files, documents and mentions. Covers site:, filetype:, inurl:, intitle:, intext: and before:/after: operators… - [Secrets in git history](https://useosint.com/skills/secrets-in-git-history.md): - Mine GitHub, GitLab and git history for identities, infrastructure and leaked credentials using commit author emails, GitHub code search, the commit .patch endpoint, trufflehog, gitleaks… ## Put a name to it - [Dig through data brokers](https://useosint.com/skills/dig-through-data-brokers.md): - Use people-search aggregators and primary public records to find addresses, phone numbers, relatives, age and background on a person, and to audit and remove your own exposure. Covers… - [Who really owns it](https://useosint.com/skills/who-really-owns-it.md): - Research companies, directors, shareholders and ultimate beneficial ownership in official corporate registries, filings and offshore datasets — OpenCorporates, UK Companies House and the… - [What leaked about you](https://useosint.com/skills/what-leaked-about-you.md): - Check and interpret data-breach exposure for an email, username, phone or name using Have I Been Pwned, the Pwned Passwords k-anonymity range API, DeHashed, IntelX and Snusbase. Use when… - [Graph the network](https://useosint.com/skills/graph-the-network.md): - Build an entity-relationship link-analysis graph of an investigation — nodes, typed edges carrying source and confidence, aliases, and temporal validity — to expose shared infrastructure… ## Where and when was this taken - [Find the original image](https://useosint.com/skills/find-the-original-image.md): - Reverse image search across Yandex, Google Lens, Bing Visual Search, TinEye and Baidu to find where a picture came from and who published it first. Use when reverse image searching… - [Secrets in file metadata](https://useosint.com/skills/secrets-in-file-metadata.md): - Extract and interpret embedded file metadata with exiftool — EXIF GPS coordinates, camera make, model and serial, DateTimeOriginal and CreateDate timestamps, XMP and IPTC fields, and… - [Geolocate from pixels](https://useosint.com/skills/geolocate-from-pixels.md): - Geolocate and chronolocate a photo or video from visual evidence alone — plate and phone number formats, road markings, utility poles, bollards, signage typefaces, architecture and… - [Is this photo real](https://useosint.com/skills/is-this-photo-real.md): - Verify whether an image or video is authentic, original and correctly captioned — provenance checks, error level analysis, noise and JPEG compression analysis, clone and copy-move… ## Follow the money and the movement - [Follow the crypto](https://useosint.com/skills/follow-the-crypto.md): - Trace cryptocurrency addresses and transactions on public blockchains using block explorers including Etherscan, Blockchair, mempool.space and Blockscout. Covers common-input clustering… - [Track planes and ships](https://useosint.com/skills/track-planes-and-ships.md): - Track aircraft and vessels from public ADS-B and AIS broadcasts using ADS-B Exchange, Flightradar24, FlightAware, MarineTraffic, VesselFinder and Equasis. Use when following a tail number… ## Tradecraft — don't get made - [Investigate without getting made](https://useosint.com/skills/investigate-without-getting-made.md): - Investigator OPSEC — threat-model who might notice you, control your attribution surface across IP, ASN, browser and TLS fingerprint, timing and logged-in accounts, separate research… - [Find leaks in the wild](https://useosint.com/skills/find-leaks-in-the-wild.md): - Find leaked or mentioned selectors circulating in pastes, leak forums, Telegram channels and dump markets, and judge whether a claimed leak is genuine or a recycled combolist. Covers… ## Optional - [Skill source on GitHub](https://github.com/useosint/osint-skills): full tradecraft procedures, ethics policy, and confidence-grading standards