Skip to content

Company OSINT Tools Reference

Business Intelligence Databases

Startup & Tech Intelligence

Crunchbase (crunchbase.com)

  • Purpose: Startup and tech company database
  • Data Available: Funding, investors, acquisitions, leadership
  • Cost: Free (limited), Pro ($29/month), Enterprise (custom)
  • Coverage: 3M+ companies globally

PitchBook (pitchbook.com)

  • Purpose: PE/VC deal database
  • Data Available: Valuations, M&A, fund performance
  • Cost: ~$10,000-30,000/year institutional
  • Coverage: 3M+ companies, 10K+ investors

AngelList (angel.co)

  • Purpose: Startup platform
  • Data Available: Startups, funding, investors
  • Cost: Free

General Business Intelligence

ZoomInfo (zoominfo.com)

  • Purpose: B2B intelligence
  • Data Available: Companies, contacts, org charts, technographics
  • Cost: $15,000+/year enterprise
  • Coverage: 100M+ contacts, 14M+ companies

Bloomberg Terminal (bloomberg.com/professional)

  • Purpose: Financial data platform
  • Cost: ~$20,000-25,000/year
  • Coverage: Complete global financial markets

Free Business Registries

OpenCorporates (opencorporates.com)

  • Purpose: Company data aggregator
  • Data Available: Registration, officers, status
  • Cost: Free (basic), API (paid)
  • Coverage: 200M+ companies, 130+ jurisdictions

SEC EDGAR (sec.gov/edgar)

  • Purpose: US public company filings
  • Data Available: 10-K, 10-Q, 8-K, proxy statements
  • Cost: Free
  • API: Available (free)

Domain & DNS Intelligence

DomainTools (domaintools.com)

  • Purpose: Domain research
  • Data Available: WHOIS history, DNS, screenshots
  • Cost: $99/month+
  • Features: Reverse WHOIS, monitoring

SecurityTrails (securitytrails.com)

  • Purpose: DNS intelligence
  • Data Available: Historical DNS, subdomains, certificates
  • Cost: Free (limited), Explorer ($49/month)
  • Coverage: 4B+ DNS records

crt.sh (crt.sh)

  • Purpose: Certificate transparency search
  • Use Case: Subdomain discovery
  • Cost: Free
  • Search: %.company.com

DNSDumpster (dnsdumpster.com)

  • Purpose: DNS reconnaissance
  • Data Available: Subdomains, MX, network map
  • Cost: Free

Network & Infrastructure

Shodan (shodan.io)

  • Purpose: Internet device search
  • Data Available: Ports, services, vulnerabilities
  • Cost: Free (limited), Membership ($59/month)
  • Search Filters: org:, net:, ssl:, port:

Censys (censys.io)

  • Purpose: Internet scanning
  • Data Available: Hosts, certificates, services
  • Cost: Free (limited), Teams ($99/month)

IPinfo (ipinfo.io)

  • Purpose: IP geolocation
  • Data Available: Location, ASN, company
  • Cost: Free (50k/month), Basic ($49/month)

Technology Profiling

BuiltWith (builtwith.com)

  • Purpose: Technology detection
  • Data Available: Tech stack, hosting, analytics
  • Cost: Free (limited), Pro ($295/month)
  • Coverage: 670M+ websites

Wappalyzer (wappalyzer.com)

  • Purpose: Technology detection
  • Data Available: CMS, frameworks, analytics
  • Cost: Free (extension), Credits ($49/month)
  • Technologies: 3,000+ tracked

Employee & People

LinkedIn (linkedin.com)

  • Purpose: Employee enumeration
  • Data Available: Team, org structure, hiring
  • Cost: Free (limited), Sales Navigator ($80/month)

Glassdoor (glassdoor.com)

  • Purpose: Employee reviews
  • Data Available: Reviews, salaries, culture
  • Cost: Free

Hunter.io (hunter.io)

  • Purpose: Email finder
  • Cost: Free (50/month), Starter ($49/month)

News & Press

Google News (news.google.com)

  • Purpose: News aggregation
  • Cost: Free

PR Newswire (prnewswire.com)

  • Purpose: Press release archive
  • Cost: Free (search)

Competitive Intelligence

SimilarWeb (similarweb.com)

  • Purpose: Website traffic analytics
  • Data Available: Traffic, sources, competitors
  • Cost: Free (limited), Pro ($167/month)

SEMrush (semrush.com)

  • Purpose: SEO intelligence
  • Data Available: Keywords, backlinks, traffic
  • Cost: Pro ($120/month)

Historical & Archive

Wayback Machine (archive.org)

  • Purpose: Historical snapshots
  • Coverage: 670B+ web pages
  • Cost: Free

Tool Selection Matrix

Basic Company Research

  • Start: Website, LinkedIn, Crunchbase, OpenCorporates
  • Free: SEC EDGAR (if public), Google search
  • Tech: BuiltWith, Wappalyzer

Technical Infrastructure

  • Domain: DomainTools, DNSDumpster, SecurityTrails
  • Network: Shodan, Censys, IPinfo
  • Tech stack: BuiltWith, Wappalyzer

People Intelligence

  • Employees: LinkedIn, Hunter.io
  • Culture: Glassdoor, Indeed
  • Contacts: Hunter.io, company directories

Comprehensive Research

  • Business: ZoomInfo, PitchBook (if budget)
  • Technical: Shodan, SecurityTrails
  • Historical: Wayback Machine
  • Competitive: SimilarWeb, SEMrush

Remember: Combine multiple tools. No single tool provides complete information. Verify from independent sources.