What is OSINT?

OSINT (Open Source Intelligence) is the discipline of collecting, cross-checking and analysing lawfully accessible information — without ever accessing private systems, hacking accounts or buying stolen data.

The sources are public by nature: social media, official and court records, company databases, press and web archives, classified ads, patent filings, WHOIS data, satellite imagery, forums, data leaks that are already public, and much more.

                Core principle: OSINT does not bypass any security measure. If information sits behind a private account, a password or restricted access, it is out of reach. This is not a skills limit — it is a legal and ethical limit that every serious provider respects.
            

OSINT is now used by intelligence services, investigation firms, cybersecurity teams, investigative journalists, legal teams and businesses of all sizes to verify, anticipate or respond to a situation.

Use Cases

OSINT applies to a wide range of situations. Here are the most common requests:

Vetting a partner or supplier

Before signing a major contract: online reputation, history of public litigation, consistency between the sales pitch and documented facts.

Supporting recruitment

Analysis of the digital footprint of a candidate for a sensitive position, consistency with their CV, publicly visible behavioural red flags.

Collecting digital evidence

For a legal case: timestamped and authenticated captures, archives of deleted posts, tracing of an online defamation or harassment campaign.

Reputation monitoring

Proactive detection of negative content, identity theft or leaks of sensitive information about a person or a brand.

Cybersecurity exposure

Identifying compromised data that is publicly accessible: credentials in breaches, exposed infrastructure information, attack surface visible from the outside.

Locating people

Locating someone through public digital traces: active accounts, mentions, geotagged photos, contact networks. Used in particular to find witnesses or heirs.

How does an OSINT assignment work?

Practices vary from one provider to another, but a serious assignment generally follows these steps:

1

Scoping

Who or what is being investigated? Which questions need answers? Precise scoping avoids scattered research and an unusable report.

2

Structured collection

A combination of automated tools and manual analysis to explore the relevant sources depending on the target (individual, company, infrastructure, etc.).

3

Verification and cross-checking

Information found in a single source has little value. Data is cross-checked and confirmed to separate established fact, rumour and disinformation.

4

Analysis and interpretation

Raw data is put into context. The expert identifies patterns, inconsistencies and meaningful signals in light of the assignment's objectives.

5

Documented report

A structured deliverable with cited sources, timestamps, screenshots and conclusions. Data traceability is essential if the report is to be used in legal proceedings.

Commonly Used Tools

OSINT professionals rely on an ecosystem of specialized tools, combining automation and manual analysis:

Maltego Visual mapping of links between entities (people, domains, IP addresses…)

Shodan Search engine for internet-exposed connected devices

SpiderFoot Automated OSINT collection on a given target

Wayback Machine Web archives — recover deleted pages or content

theHarvester Extraction of emails, domain names and metadata

Have I Been Pwned Checks whether credentials appear in known data breaches

                Note: tools do not do the analyst's job. Interpreting results, spotting false positives and putting things in context remain human skills. A quality OSINT report reflects expertise as much as technology.
            

Free tool or OSINT expert?

Search engines and free OSINT tools let you run a first search on a person or a company yourself. They quickly reach their limits when the stakes are real:

False positives: the same username or name often points to several people. Sorting true from false takes method and cross-checking.
Sources tools cannot reach: official registers, press archives, court decisions, data on foreign companies.
Usable evidence: a screenshot you took yourself carries little weight with a court or an employer; a sourced, timestamped report carries much more.
Legal framework: a professional knows how far to go without crossing the line of privacy or the law.

The right approach: start on your own if the need is simple. As soon as a decision, a contract or legal proceedings depend on it, hand the research to a vetted OSINT expert — browse the directory.

Limits and Legal Framework

OSINT is powerful, but it has real limits that every client should know before commissioning an investigation:

Small digital footprint of the target: if the person or entity has little public presence, results will necessarily be limited. OSINT cannot create information that does not exist.
Outdated data: public sources are not always up to date. A profile inactive for several years can give a distorted picture of the current reality.
Private profiles and deleted accounts: inaccessible by definition. Any offer claiming to access them falls outside the legal scope of OSINT.
Admissibility of evidence: the conditions for admitting digital evidence vary by jurisdiction. An OSINT report intended for legal proceedings must be produced following rigorous protocols — discuss this with your lawyer.
Laws vary by country: the collection and processing of personal data are regulated differently from one country to another (GDPR in Europe, specific laws in North America, Asia, etc.). Every serious provider operates within the legal framework of the country concerned.
No guaranteed result: an OSINT assignment may yield little or nothing if the conditions are not met. Be wary of any provider who guarantees a result in advance.

Watch out: some practices disguised as OSINT are illegal — unauthorized access to accounts, buying stolen data, fraudulent social engineering, installing spyware. A legitimate expert will never offer these methods. If they do, it is an immediate red flag.

Market Rates

Market prices vary with the complexity of the assignment, the volume of sources to analyse, the geographic area and the provider's level of expertise. The ranges below are indicative:

Individual profile or simple check

200 – 800 €

Analysis of an individual, vetting of a candidate or digital presence research on a single target.

Typical turnaround: 2 to 5 business days

Company or online reputation investigation

500 – 2 500 €

Analysis of a company, its executives and its public history. Vetting before a partnership or acquisition.

Typical turnaround: 5 to 10 business days

Complex or multi-target assignment

1 500 – 8 000 €

Investigations involving several entities, long-term monitoring or a strong technical component (cybersecurity, dark web monitoring).

Turnaround depends on scope

These ranges reflect rates generally observed on the market. Seek & Find does not set these prices — each provider quotes based on your specific situation.

Need an OSINT Expert?

Seek & Find lists vetted professionals wherever you are in the world.

Find an Expert

OSINT — Open Source Intelligence