Best OSINT Tools in Brazil

Criminal IP's Attack Surface Management (ASM) is an intelligence-driven platform designed to continuously identify, catalog, and oversee all internet-connected assets linked to an organization, including overlooked and shadow resources, enabling teams to understand their actual external exposure from the perspective of potential attackers. This solution integrates automated asset detection with open-source intelligence (OSINT) methods, artificial intelligence enhancements, and sophisticated threat intelligence to reveal exposed hosts, domains, cloud services, IoT devices, and other internet-facing entry points, while also collecting evidence such as screenshots and metadata, and linking findings to known vulnerabilities and attacker techniques. By evaluating exposures through the lens of business relevance and risk, ASM emphasizes vulnerable elements and misconfigurations, providing instantaneous alerts and interactive dashboards that facilitate quicker investigations and remediation efforts. Furthermore, this comprehensive tool empowers organizations to proactively manage their security posture, ensuring that they remain vigilant against emerging threats.

The Threat Landscape is an automated platform designed for security analysts and SOC teams, providing them with reliable and actionable intelligence while eliminating the need for manual triage. This system continuously gathers and analyzes global open-source intelligence (OSINT) and darknet data, efficiently extracting relevant structured information and minimizing irrelevant data before it reaches the analysts. All gathered intelligence is formatted into STIX 2.1, mapped to the MITRE ATT&CK framework, and cross-referenced with various elements such as threat actors, malware families, CVEs, TTPs, and IOCs, enabling teams to focus their efforts on utilizing intelligence rather than generating it. Among its notable features are interactive dashboards, visual representations of STIX threat graphs, sophisticated search and filtering options, monitoring of the darknet for claims related to leak sites and criminal discussions, automated daily and weekly reports, as well as a RESTful API that allows seamless integration with SIEM, SOAR, and TIP platforms. This platform ultimately empowers security teams to respond swiftly and effectively to emerging threats, improving their overall cybersecurity posture.

Baited.io is a powerful AI-driven phishing simulation tool designed to protect businesses from the increasing risk of phishing and social engineering attacks. By leveraging OSINT data, Baited.io crafts highly targeted and realistic phishing emails to train employees on how to spot and avoid malicious threats. This platform simulates attacks from real-world criminal groups and hackers, giving teams the opportunity to practice responding to these attacks in a controlled environment. With its focus on providing hyper-realistic scenarios, Baited.io offers businesses an in-depth analysis of their employees' vulnerabilities, helping improve their security posture. The platform provides comprehensive, actionable insights through detailed reporting that helps businesses target specific weaknesses and proactively address potential threats. Additionally, all data is securely handled, encrypted, and stored in Switzerland, ensuring full privacy and protection.

Gain a deeper understanding of your audience and take action by identifying visitors through their IP addresses, enhancing forms, targeting users on mobile devices, preventing online fraud, analyzing server logs, or executing geo IP-based redirections. Ipregistry stands out as a reliable and comprehensive source for IP geolocation and threat detection, proving advantageous for various sectors including publishers, ad networks, retailers, financial institutions, and e-commerce businesses. With our products, you can generate valuable insights that allow for the non-intrusive personalization of content tailored to users, customers, or leads based on factors like currency, location, time zone, and company or carrier information. Furthermore, these insights can be utilized to run targeted advertising campaigns and manage the distribution of digital media effectively while simultaneously thwarting online fraud by identifying suspicious activities such as requests from hosting nodes, users operating through Tor, public proxies, or those flagged as abusers across more than 220 OSINT threat feeds. This comprehensive approach not only enhances user experience but also fortifies your defenses against potential threats in the digital landscape.

XposedOrNot offers a web-based platform for monitoring and checking data breaches, catering to individuals, domain administrators, and security professionals. By entering an email address, users can discover associated public breaches, including the dates of those breaches and the types of data that were compromised, and they can also browse a searchable database of breach records. Users have the option to receive alerts when their email is found in newly recorded breaches. Additionally, organizations can confirm their control over a domain and track cumulative exposure, monitor for new breaches, and set up email notifications. The service includes detailed exposure analytics, a complimentary REST API with public keyless endpoints and rate limits, as well as official SDKs and integrations with various security and investigative tools like Microsoft Sentinel, Splunk, Wazuh, Maltego, MISP, TheHive/Cortex, and an MCP server. Both the website and the APIs are open source, while separate plans are available for commercial API usage at higher volumes. This comprehensive service aims to enhance data security and awareness for its users.

Utilize the unparalleled insights provided by Web Intelligence & Investigation to enhance the protection of your corporate brand and assets. Our innovative investigative module, Pathfinder, offers a clear and efficient pathway for both novice and seasoned security teams, highlighting the next steps related to entities of interest while maintaining a visible record of your chosen investigative journey. Media Sonar combines leading OSINT tools and data sources into an integrated platform, accelerating the process to be 30 times faster than traditional OSINT approaches. This means your team will no longer need to waste time switching between multiple incompatible OSINT tools or manually aggregating data. Our comprehensive Web Intelligence & Investigations platform expands your perspective on your digital attack surface, ultimately aiding in the safeguarding of your brand and assets, while also enhancing your security operations. Furthermore, equip your security team with insights into emerging threats from both the Open and Dark Web, providing a deeper understanding of the potential risks outside your organization. This proactive approach to threat intelligence ensures that your security measures remain robust and responsive amidst an ever-evolving landscape of digital threats.

PatrowlHears enhances your vulnerability management for internal IT resources, which include operating systems, middleware, applications, web content management systems, various libraries, network devices, and IoT systems. A wealth of information on vulnerabilities and associated exploitation notes is made readily available to you. The platform facilitates continuous scanning of websites, public IPs, domains, and their subdomains to identify vulnerabilities and misconfigurations. It also conducts thorough reconnaissance, encompassing asset discovery, comprehensive vulnerability assessments, and remediation verification. The service automates processes such as static code analysis, evaluation of external resources, and web application vulnerability assessments. You can access a robust and regularly updated vulnerability database that is enriched with scoring, exploit information, and threat intelligence. Furthermore, metadata is meticulously gathered and vetted by security professionals utilizing both public OSINT and private sources, ensuring a high level of reliability. This thorough approach not only enhances your security posture but also helps in proactive risk management.

Maltego can be used by many users, including security professionals, forensic investigators and investigative journalists as well as researchers. You can easily gather information from disparate data sources. All information can be automatically linked and combined into one graph. Automately combine disparate data sources using point-and-click logic. Our intuitive graphical user interface allows you to enrich your data. You can detect patterns even in the largest graphs using entity weights. You can annotate your graph and then export it for further use. Maltego defaults to using our public Transform server. We have learned over the years that flexibility is important in choosing the right infrastructure for enterprise users.

Dark Web Monitoring and Attack Surface Management. ImmuniWeb®, Discovery uses OSINT and our award winning AI technology to illuminate a company's Dark Web exposure and attack surface. This non-intrusive, production-safe discovery is ideal for continuous self-assessment as well as vendor risk scoring to prevent supply-chain attacks.

Netlas.io, a network scanner on the Internet, is a search engine. Netlas scans DNS records for billions of domains names, hundreds and millions of HTTP responses, and SSL certificates. This information can be obtained using several tools. This tool allows you to search through the results of internet scans. Netlas scanners are non-intrusive and continuously scan internet-accessible hosts. They save their responses. DNS Search: This stores domain names and their IP addresses as well as other types of DNS records. IP WHOIS: Information on the owner and management a IP address including the IP address range and network provider name. Domain WHOIS: Information on the domain owner, including contact information, details of the registrar, registration dates and expiration dates. Certificates: A database containing SSL certificates from various sources. Netlas is a must-have tool for any cybersecurity professional.

Discover the leading OSINT tool designed for reverse lookups of emails and phone numbers. Utilize our platform to conduct reverse lookups for both emails and phone numbers, revealing associated social media profiles. Understanding the sensitivity of your inquiries, we ensure that none of your searches or outcomes are stored. Our methods strictly adhere to OSINT practices that maintain the anonymity of the target and do not trigger any alerts. You will receive instantaneous results from social networks, streamlining your investigative process and maximizing efficiency. With this tool, you can delve deeper into your research without the worry of compromising your privacy.

OSINT Industries stands out as a formidable open-source intelligence platform that significantly enhances the speed and precision of online investigations. Users can conduct reverse searches on various data points, including emails, phone numbers, usernames, names, and crypto wallets, effectively constructing detailed digital profiles by revealing connections to accounts, social media presence, geolocation details, and chronological activity records. Harnessing information from more than 1,000 global sources, the platform offers a comprehensive strategy for data analysis and extraction. Its cutting-edge geospatial capabilities empower investigators to map out the digital movements of subjects internationally, while dynamic timelines present a coherent sequence of online interactions. Prioritizing user privacy, OSINT Industries employs advanced encryption methods and refrains from retaining any search data. Furthermore, its innovative algorithms ensure the elimination of false positives, providing reliable intelligence consistently, making it an indispensable tool for both professionals and enthusiasts in the field of digital investigations. In an age where accurate information is crucial, OSINT Industries sets a new standard for intelligence gathering.

Picarta is an advanced AI application designed to determine the location of any photograph by examining its visual elements. Simply upload your image, and Picarta will provide precise GPS coordinates without requiring any metadata. This tool is ideal for various contexts, including travel photos, aerial drone images, and social media uploads, as it uncovers the exact location of the image from anywhere across the globe. Its versatility makes it invaluable for OSINT, investigative work, journalism, real estate, historical studies, travelers, photographers, and a multitude of other users who benefit from accurate geolocation capabilities for both ground-level and aerial visuals. With Picarta, the quest for location data becomes more efficient and accessible than ever.

OSINTverse is an OSINT investigation ecosystem that combines search, graph analysis, APIs, team workspaces, educational resources, and access to multiple intelligence providers. SearchIn is its UI-first investigation platform, allowing users to begin with identifiers, query integrated sources, compare results, and preserve investigation trails inside cases. GraphIn takes a graph-first approach by allowing investigators to seed an entity, expand relationships through billed transforms, identify relevant connections, and share graph snapshots. Both platforms draw from the same prepaid credit wallet, so users can move between search-based and graph-based investigation workflows without maintaining separate subscriptions. Supported integrations include sources such as OSINT Industries, Predicta Search, LeakRadar, DeHashed, Snusbase, Whoxy, WhoisXML, SecurityTrails, Shodan, Hunter.io, BuiltWith, Facecheck.id, and Picarta.ai. Engineering teams can access the same provider ecosystem through the SearchIn REST API or Python package, with personal and team API keys billed against the appropriate wallet. Team workspaces allow organizations to share credits, investigation history, invoices, and API keys without paying separate seat fees. The OSINTverse Hub adds blogs, webinars, industry updates, and OSINTCon content alongside the investigation products. OSINTverse is intended for investigators and teams that want to consolidate fragmented OSINT tools, provider accounts, billing, and research workflows into one environment.

Identify the geographic location of any IP address to tailor your website’s content, scrutinize logs, enhance forms, target advertisements, comply with GDPR regulations, execute redirections, block specific countries, and much more. Our service delivers a rapid and reliable IP Geolocation API supported by precise data. You can pinpoint your website visitors' locations using IP addresses, down to the city and postal code level. Instantly verify if an IP address appears in over 200 OSINT Threat Feeds. Recognize anonymous users to safeguard your business against fraud and misuse. Obtain the Autonomous System Organization and number associated with any IP address. Assess whether an IP address is linked to an Internet Service Provider, a datacenter/hosting service, or a business entity. We refresh hundreds of data sources approximately every 15 minutes to ensure accuracy. Our tools assist in minimizing fraud in your e-commerce operations. Prevent fraudulent account registrations for your SaaS or application. Manage compliance with GDPR and CCPA regulations effectively. Additionally, you can localize or restrict your website's content according to a user's geographic location while analyzing logs and tracking website traffic trends. This comprehensive approach not only enhances user experience but also fortifies your online security.

DNSdumpster.com serves as a complimentary tool for domain research, allowing users to identify hosts associated with a particular domain. For security assessments, uncovering visible hosts from an attacker's viewpoint is crucial. The swift identification of the attack surface is vital for those engaged in penetration testing or pursuing bug bounties. Moreover, network defenders gain numerous advantages through passive reconnaissance, as it aids in shaping their information security strategies. By grasping network-based OSINT, IT professionals can enhance their ability to operate, evaluate, and manage networks effectively. Integrating our attack surface discovery into your vulnerability assessment can significantly reduce both time and potential frustrations. Unlike traditional methods, we refrain from employing brute force subdomain enumeration, opting instead for open source intelligence resources to extract related domain information. This data is subsequently organized into a practical resource that proves valuable for both attackers and defenders of systems exposed to the internet. In summary, this tool not only streamlines the process but also empowers users to make informed security decisions.

GeoInfer is an advanced platform that utilizes artificial intelligence to provide geolocation and geospatial intelligence services, capable of analyzing photographs or images to determine their geographical location on Earth, even in the absence of GPS or EXIF metadata. This innovative technology enhances the ability to pinpoint locations accurately, making it a valuable tool for various applications in geography and data analysis.

Surfface functions as an OSINT (Open Source Intelligence) orchestrator and a people search engine tailored for businesses seeking to uncover the true identities of individuals they encounter online. Users can upload a facial photograph along with optional details such as a name or handle, allowing Surfface to analyze a variety of lawful, publicly accessible sources including social media profiles, posts, and videos. This comprehensive scanning process enables users to piece together the identity of a person behind an account, message, or transaction. Various teams, such as those focused on security, fraud prevention, and trust and safety, utilize Surfface to assess risks associated with social engineering, identify fraudulent accounts, and mitigate potential insider threats. Additionally, human resources and compliance departments leverage this tool to implement an extra layer of open-source verification for high-risk roles, vendors, or partners. Sales professionals and customer service representatives also benefit by gaining a deeper understanding of the actual individuals linked to significant accounts. Distinct from standard reverse image search tools, Surfface excels at identifying faces within social media content, associating them with specific profiles, and providing relevant context that aids in evaluating intent and risk—all while maintaining compliance and focusing primarily on the US market. This innovative approach ensures that businesses can navigate the complexities of online interactions with greater confidence and insight.

Pixalytica employs artificial intelligence for facial recognition and automated web searches to produce KYC and identity verification reports in less than 20 seconds, providing companies with a quick method to authenticate clients, partners, or employees. Additionally, it aggregates information from potential sanction lists, criminal associations, and risk indicators into a concise report, assisting businesses in minimizing fraud, adhering to compliance standards, and fostering trust among stakeholders. This innovative approach not only streamlines the verification process but also enhances the overall security framework of organizations.

CYBORA serves as a comprehensive Cyber Risk Resilience platform that continuously links every identified risk to the active systems and controls that govern it, ensuring that exposure is assessed on an ongoing basis rather than being evaluated just once a year. Each risk is assigned an owner, treatment strategies, appetite thresholds, and is visualized on a 5x5 matrix, with control mapping aligned to standards such as ISO 27001, NIST CSF, SOC 2, PCI DSS, HIPAA, GDPR, CIS v8, DORA, and NIS2. Additionally, the platform evaluates third-party risks using 34 deterministic rules, including those related to DORA Article 28 concentration exposure. Assets and AI models are systematically registered and categorized to comply with the EU AI Act's risk requirements. The detection process feeds directly into the risk register, utilizing OSINT and darknet surveillance, tracking of Indicators of Compromise (IOCs), and managing security operations center (SOC) cases with MITRE ATT&CK framework integration, while also offering SIEM exports to platforms like Splunk, Elastic, and Sentinel. To ensure robust risk management, the system incorporates business impact analyses, continuity planning, and a dynamic crisis workspace, effectively closing the feedback loop. The service is provided from locations in Lithuania, the UK, and the US, allowing for a private tenant setup with the security of dual 256-bit encryption keys, options for self-hosting, and support for over 20 languages. This versatility makes CYBORA an essential tool for organizations aiming to enhance their cybersecurity posture.

DeepState serves as a desktop platform designed for OSINT analysts, investigative journalists, and corporate security teams to conduct investigative analysis. It offers an expansive infinite canvas where users can visualize people, organizations, events, documents, social media posts, locations, and cryptocurrency wallets as interconnected nodes, linked through various rational connections such as funding, control, and contradictions, all while providing timelines, narratives, and comprehensive search capabilities. Accompanying the canvas is an AI assistant equipped with over 70 research tools, including web search, page capture, the Wayback Machine, WHOIS, social media platforms like X, Reddit, Bluesky, YouTube, and LinkedIn, along with resources such as CourtListener, SEC EDGAR, sanctions lists, historical newspapers, blockchain data, and OpenStreetMap. This AI agent autonomously creates and connects nodes, references sources, and allows users to undo any action taken. Additionally, the captured evidence retains its original URL, retrieval timestamp, archived version, and a credibility rating. Users can export their boards into briefing decks and PDFs, ensuring that case data remains secure within a local SQLite file, while also offering compatibility with AI services like Claude, ChatGPT, OpenRouter, OpenCode, or even offline with Ollama. The platform is accessible across multiple operating systems, including Windows, macOS, and Linux, making it a versatile tool for a wide range of investigative needs. With its user-friendly interface and comprehensive features, DeepState revolutionizes the way investigative work is conducted.

Insomnia is an advanced AI-driven penetration testing and offensive security platform developed by CQR Cybersecurity. By targeting a specific system, its AI red team performs a comprehensive range of tasks including reconnaissance, vulnerability assessments, OSINT, CVE verification, exploitation, and privilege escalation, applicable to web applications, APIs, networks, cloud environments, and Active Directory, ultimately generating a professional report in PDF, DOCX, or HTML format that includes CVSS scores and recommended fixes. This all-in-one tool is equipped with over 275 security modules, encompassing SAST and DAST, live key validation for secret detection, dependency and CVE scanning, testing for APIs and GraphQL, wireless auditing, Active Directory assessments using BloodHound, an HTTP interception proxy, and capabilities to build CI/CD pipelines. Additionally, it includes Insomnia OS, a Debian-based operating system tailored for offensive security tasks. For users, there is a free Community Edition available alongside a complimentary SAST engine that supports pip, npm, Docker, Homebrew, and plugins for VS Code and JetBrains. The paid Advanced and Pro subscriptions enhance the experience with complete AI automation, access to a comprehensive database of over 30,000 CVEs, exploitation tools, OSINT capabilities, and mobile analysis functionalities, making it a robust choice for cybersecurity professionals.

RemoteView offers a dynamic global intelligence map that integrates real-time public data regarding conflicts, civil disturbances, internet disruptions, shipping bottlenecks, seismic activities, and various other emergencies into one comprehensive interface. It encompasses crucial maritime routes such as the Red Sea, Suez Canal, Hormuz Strait, Panama Canal, and Malacca Strait, while also featuring dedicated country pages and live situation hubs for a detailed exploration of events categorized by location and subject matter. This platform is designed for use by analysts, journalists, OSINT researchers, and professionals in risk and security who are keeping tabs on public occurrences and evolving conditions across different areas. By positioning these open-source insights within a geographical framework, it assists users in tracking developments that are pertinent to their research, reporting needs, and risk assessment. Additionally, users can access a public demonstration on the website, which also offers various subscription options, including Personal and Pro plans, as well as a seven-day trial period for new users to evaluate the service. The availability of such features ensures that users have the resources they need to stay informed and make educated decisions.

Transform a vast array of complex data from various origins into actionable insights almost instantly, enabling well-informed decision-making. Swiftly uncover concealed relationships and essential trends hidden within a mix of internal, external, and open-source information. Discover the capabilities of i2’s exceptional intelligence analysis software firsthand. By requesting a demo, you can explore how to reveal vital connections and insights more rapidly than ever before. Monitor essential operations within law enforcement, fraud detection, financial crime, military defense, and the national security intelligence sectors using the i2 intelligence analysis platform. Gather and integrate both structured and unstructured data from a multitude of sources, encompassing OSINT and dark web information, to create a comprehensive data reservoir for exploration and discovery. Combine cutting-edge analytics with advanced geospatial, visual, graph, temporal, and social analysis techniques, empowering analysts with enhanced situational awareness and a clearer understanding of complex scenarios. The i2 platform is designed to streamline the process of intelligence gathering, ultimately leading to more strategic outcomes across various fields.

RiskIQ PassiveTotal compiles extensive data from across the internet to gather intelligence that aids in identifying threats and the infrastructure used by attackers, utilizing machine learning to enhance the effectiveness of threat detection and response. This platform provides valuable context about your adversaries, including their tools, systems, and indicators of compromise that may exist beyond your organization's firewall, whether from internal sources or third parties. The speed of investigations is significantly increased, allowing users to rapidly uncover answers through access to over 4,000 OSINT articles and artifacts. With more than a decade of experience in mapping the internet, RiskIQ possesses unparalleled security intelligence that is both extensive and in-depth. It captures a wide array of web data, such as Passive DNS, WHOIS, SSL details, hosts and host pairs, cookies, exposed services, ports, components, and code. By combining curated OSINT with proprietary security insights, users are able to view the digital attack surface comprehensively from multiple perspectives. This empowers organizations to take control of their online presence and effectively counter threats targeting them. Ultimately, RiskIQ PassiveTotal equips businesses with the tools necessary to enhance their cybersecurity posture and proactively mitigate risks.