OSINT explained
What is OSINT?
OSINT (open-source intelligence) is intelligence produced by collecting, verifying and analyzing publicly available information, such as websites, social media, public records, satellite imagery and aircraft or ship transponder data, to answer a specific question.
What does OSINT mean?
OSINT stands for open-source intelligence. "Open source" means the information is publicly accessible, not that the software is open source.
It sits alongside other intelligence disciplines: HUMINT (human sources), SIGINT (signals), GEOINT (geospatial imagery) and SOCMINT (social media).
How is OSINT different from just searching?
Public data only becomes intelligence once it is collected for a defined question, checked against independent sources, analyzed in context and delivered to someone who needs it.
A screenshot of a post is data. A verified account of who posted it, where and when, with sources, is intelligence.
What is OSINT in cyber security?
Security teams use OSINT to map an organization's attack surface: exposed subdomains from certificate logs, internet-facing services, leaked credentials in breach data and employee details attackers could use for phishing.
Threat intelligence analysts also track infrastructure behind phishing and malware campaigns through DNS and registration records.
Who uses OSINT?
Journalists verifying footage, security and fraud teams, researchers, humanitarian groups monitoring disasters, and analysts tracking conflicts, aircraft and shipping.
Is OSINT legal?
Collecting publicly available information is generally legal, but how you obtain and use it is regulated by privacy, computer misuse, harassment and data protection laws that vary by country. Only research targets you are permitted to investigate.
How do I start with OSINT?
Start with one identifier and one question, follow a framework so you pick the right tool for each pivot, verify everything twice and keep notes with sources and timestamps.
Ready to practice? Browse the free OSINT tools directory, follow the step-by-step OSINT framework, or read the Cylect field guide for a full investigation workflow.