8 Free OSINT Tools 100% Free (and 5 More with Free Plan)
You want to know if your email appeared in a breach or who registered a domain. You search for a tool and end up on websites that ask for your credit card before showing you anything. You waste time and sometimes money. There are OSINT tools that work without paying. Here are 13: 8 completely free and 5 with limited free plans.
Free means you can use it without paying for the basics. Freemium means there's a free plan with limits. The limits you see here are from October 2026 and may change.
Start here: no payment required
| Tool | What it does | What you should know |
|---|---|---|
| Have I Been Pwned | Check if your email appeared in breaches | Web checking and alerts are free. The API is paid |
| Cover Your Tracks | See how identifiable your browser is (EFF tool) | Free and no registration required |
| BrowserLeaks | See what your browser reveals: IP, WebRTC, DNS and more | Technical. Free, no API |
| FotoForensics | Search for signs of editing in an image | Personal use, maximum 10 MB, no account needed. It's a clue, not proof |
| ICANN Lookup | Look up official domain data (RDAP) | Free and no login required |
| Whois (DomainTools) | See registrar, registration dates and name servers for a domain | The owner is usually hidden. DomainTools warns that the service could be discontinued |
| Wayback Machine | See what a website looked like in the past | Free and no account required |
| OSINT Framework | Find more tools, organized by category | It's a directory of links, not a search engine. Free and open source (MIT). Some links are paid |
Where to start
You don't need to try them all. These three steps take ten minutes and require no technical knowledge.
Enter it in Have I Been Pwned and see which breaches it appears in.
Take the Cover Your Tracks test. If you want to dig deeper, use BrowserLeaks.
Search for yours in ICANN Lookup and see what data is public.
When you need more: free plan with limits
These five have a useful free plan for occasional use. If you use them daily, the limits become noticeable.
| Tool | What it does | Free plan limit |
|---|---|---|
| Epieos | Search for accounts associated with an email | Only Google, Email Checker and Skype modules. Results with watermark |
| TinEye | Reverse image search | 100 searches per day and 300 per week. Non-commercial use only |
| Hunter | Find company emails from their domain | 50 credits per month. Registration required |
| Intelligence X | Search for emails, domains or IPs in breaches and archives | With account, 50 searches per day. Without account, 2 per day. Phonebook, downloads and alerts are paid |
| urlscan.io | See what a suspicious website loads in an isolated environment | Per day: 5,000 public scans, 1,000 unlisted and 50 private |
Limits as of October 2026. Check them on each tool's website before relying on them.
A public scan on urlscan.io can be seen by anyone. If the link contains personal data, don't scan it publicly.
Just because data is public doesn't mean you can use it for anything. Use these tools on your own data or with permission. Don't use them to harass, locate or profile a person. Rules vary by country. If you have legal questions, consult a lawyer.
YOU MIGHT BE INTERESTED
OSINT Industries: what it is and how to search for information about anyone
If something appears in a breach
If Have I Been Pwned shows your email in a breach, change the password for that account. Then enable two-step verification. A physical key like the YubiKey is the most phishing-resistant option. We explain it in what is 2FA and how to protect your accounts with YubiKey. And if you want to erase your traces from the internet, you have the guide to delete your digital footprint.
Frequently asked questions
What is OSINT?
OSINT stands for open source intelligence. It consists of obtaining information from public sources: websites, records, search engines, archives or social media.
Is it legal to use OSINT tools?
The tools access publicly available information. But legality depends on the country and what you do with the data. Use them on your own data or with permission, and consult a lawyer if you have doubts.
Do I need to register?
With the 8 free tools, no. With the free plan tools, Epieos and Hunter require an account. Intelligence X requires one to reach 50 daily searches.
Are my searches logged?
It depends on the tool. On urlscan.io a public scan can be seen by anyone. Check the privacy policy of each website before searching for sensitive data.
Where can I learn OSINT from scratch?
You have a selection in our guide to free OSINT courses in Spanish.
Start with free tools and your own data
With Have I Been Pwned, Cover Your Tracks and ICANN Lookup you can already review your email, browser and a domain without paying anything.
Tools with free plans are good for occasional use. If you need them daily, the limits become apparent quickly, and paid plans are another decision.
YOU MIGHT BE INTERESTED
Best free OSINT courses in Spanish 2026
