Company OSINT Tools Reference¶
Business Intelligence Databases¶
Startup & Tech Intelligence¶
Crunchbase (crunchbase.com)
- Purpose: Startup and tech company database
- Data Available: Funding, investors, acquisitions, leadership
- Cost: Free (limited), Pro ($29/month), Enterprise (custom)
- Coverage: 3M+ companies globally
PitchBook (pitchbook.com)
- Purpose: PE/VC deal database
- Data Available: Valuations, M&A, fund performance
- Cost: ~$10,000-30,000/year institutional
- Coverage: 3M+ companies, 10K+ investors
AngelList (angel.co)
- Purpose: Startup platform
- Data Available: Startups, funding, investors
- Cost: Free
General Business Intelligence¶
ZoomInfo (zoominfo.com)
- Purpose: B2B intelligence
- Data Available: Companies, contacts, org charts, technographics
- Cost: $15,000+/year enterprise
- Coverage: 100M+ contacts, 14M+ companies
Bloomberg Terminal (bloomberg.com/professional)
- Purpose: Financial data platform
- Cost: ~$20,000-25,000/year
- Coverage: Complete global financial markets
Free Business Registries¶
OpenCorporates (opencorporates.com)
- Purpose: Company data aggregator
- Data Available: Registration, officers, status
- Cost: Free (basic), API (paid)
- Coverage: 200M+ companies, 130+ jurisdictions
SEC EDGAR (sec.gov/edgar)
- Purpose: US public company filings
- Data Available: 10-K, 10-Q, 8-K, proxy statements
- Cost: Free
- API: Available (free)
Domain & DNS Intelligence¶
DomainTools (domaintools.com)
- Purpose: Domain research
- Data Available: WHOIS history, DNS, screenshots
- Cost: $99/month+
- Features: Reverse WHOIS, monitoring
SecurityTrails (securitytrails.com)
- Purpose: DNS intelligence
- Data Available: Historical DNS, subdomains, certificates
- Cost: Free (limited), Explorer ($49/month)
- Coverage: 4B+ DNS records
crt.sh (crt.sh)
- Purpose: Certificate transparency search
- Use Case: Subdomain discovery
- Cost: Free
- Search:
%.company.com
DNSDumpster (dnsdumpster.com)
- Purpose: DNS reconnaissance
- Data Available: Subdomains, MX, network map
- Cost: Free
Network & Infrastructure¶
Shodan (shodan.io)
- Purpose: Internet device search
- Data Available: Ports, services, vulnerabilities
- Cost: Free (limited), Membership ($59/month)
- Search Filters: org:, net:, ssl:, port:
Censys (censys.io)
- Purpose: Internet scanning
- Data Available: Hosts, certificates, services
- Cost: Free (limited), Teams ($99/month)
IPinfo (ipinfo.io)
- Purpose: IP geolocation
- Data Available: Location, ASN, company
- Cost: Free (50k/month), Basic ($49/month)
Technology Profiling¶
BuiltWith (builtwith.com)
- Purpose: Technology detection
- Data Available: Tech stack, hosting, analytics
- Cost: Free (limited), Pro ($295/month)
- Coverage: 670M+ websites
Wappalyzer (wappalyzer.com)
- Purpose: Technology detection
- Data Available: CMS, frameworks, analytics
- Cost: Free (extension), Credits ($49/month)
- Technologies: 3,000+ tracked
Employee & People¶
LinkedIn (linkedin.com)
- Purpose: Employee enumeration
- Data Available: Team, org structure, hiring
- Cost: Free (limited), Sales Navigator ($80/month)
Glassdoor (glassdoor.com)
- Purpose: Employee reviews
- Data Available: Reviews, salaries, culture
- Cost: Free
Hunter.io (hunter.io)
- Purpose: Email finder
- Cost: Free (50/month), Starter ($49/month)
News & Press¶
Google News (news.google.com)
- Purpose: News aggregation
- Cost: Free
PR Newswire (prnewswire.com)
- Purpose: Press release archive
- Cost: Free (search)
Competitive Intelligence¶
SimilarWeb (similarweb.com)
- Purpose: Website traffic analytics
- Data Available: Traffic, sources, competitors
- Cost: Free (limited), Pro ($167/month)
SEMrush (semrush.com)
- Purpose: SEO intelligence
- Data Available: Keywords, backlinks, traffic
- Cost: Pro ($120/month)
Historical & Archive¶
Wayback Machine (archive.org)
- Purpose: Historical snapshots
- Coverage: 670B+ web pages
- Cost: Free
Tool Selection Matrix¶
Basic Company Research¶
- Start: Website, LinkedIn, Crunchbase, OpenCorporates
- Free: SEC EDGAR (if public), Google search
- Tech: BuiltWith, Wappalyzer
Technical Infrastructure¶
- Domain: DomainTools, DNSDumpster, SecurityTrails
- Network: Shodan, Censys, IPinfo
- Tech stack: BuiltWith, Wappalyzer
People Intelligence¶
- Employees: LinkedIn, Hunter.io
- Culture: Glassdoor, Indeed
- Contacts: Hunter.io, company directories
Comprehensive Research¶
- Business: ZoomInfo, PitchBook (if budget)
- Technical: Shodan, SecurityTrails
- Historical: Wayback Machine
- Competitive: SimilarWeb, SEMrush
Remember: Combine multiple tools. No single tool provides complete information. Verify from independent sources.