OpenOSINT
OpenOSINT is an AI-powered open-source intelligence agent for security researchers and analysts. It unifies OSINT lookups behind a natural-language agent, CLI, interactive REPL, web UI, and MCP server so that AI clients can execute real tools and compile investigation reports.
At a Glance
- Security researchers and analysts
- Cybersecurity and threat-intelligence teams
- Fraud and trust-and-safety analysts
- Backend developers and engineering teams
- +2 more
AI Tools by OpenOSINT
(1)
OpenOSINT
Open Source OSINT Agent for Security
Discussions
No discussions yet
Be the first to start a discussion about OpenOSINT
Latest News
OpenOSINT v2.35.0 released with stable exposure library API and --public-only network guard.
v2.34.0 released with beta external exposure report functionality.
v2.33.0 introduced passive mode by default, tool-call caps and per-tool noise labels.
OpenOSINT Cloud waitlist launched for planned Free, Pro and Team tiers.
Products & Services
Free, MIT-licensed Python OSINT framework with an AI agent, interactive REPL, direct CLI, browser web UI and MCP server.
Zero-install Apify Actor and MCP tool that finds accounts linked to an email across 100+ services; from $0.015 per run.
Apify Actor and MCP tool that checks one or more usernames across platforms using Sherlock; $0.04 per username.
Apify Actor and MCP tool for domain email-security grading, RDAP data and dork URLs; $0.02 per domain.
Market Position
OpenOSINT positions itself as a self-hostable, MIT-licensed alternative to stitching together individual OSINT utilities or using a closed dashboard. Its differentiators are an AI-driven adaptive workflow, native MCP support, CLI/REPL/web interfaces, passive-by-default controls, and the ability to inspect or extend the underlying Python tool wrappers. Adjacent alternatives include standalone holehe, Sherlock, Sublist3r, PhoneInfoga, Shodan/Censys/VirusTotal workflows, and other OSINT frameworks such as SpiderFoot and the OSINT Framework.
Leadership
Founders
Tommaso Bertocchi
Maintainer and primary creator of OpenOSINT; a computer engineering student and developer who works with Python, JavaScript, TypeScript, React, Node.js, Java and CSS. His public project profile identifies OpenOSINT as his AI-powered OSINT Agent project, and his developer article says he built it to remove the manual switching between OSINT tools.
Executive Team
Tommaso Bertocchi
Maintainer / creator
Computer engineering student and developer; GitHub maintainer under the handle SonoTommy and author of the OpenOSINT project and its technical write-ups.
Founding Story
Tommaso Bertocchi started OpenOSINT because existing OSINT tools each did one job and analysts had to decide the workflow, switch between commands, and copy-paste results. The initial vision was a natural-language agent that would choose the next investigation step based on actual tool output, execute the tools, and return a report rather than a fixed pipeline or fabricated result.
Business Model
Revenue Model
The core framework is free and MIT-licensed. Revenue is generated through pay-per-use Apify Cloud Actors, planned/hosted API access, optional commercial support/vendor agreements, sponsorships and paid OSINT methodology products.
Pricing Tiers
Pay per Apify Actor run.
Pay per username.
Pay per domain.
100 credits; one credit per hosted API tool call.
1,000 credits per month.
5,000 credits per month.
Commercial agreement, license assurance letter and best-effort email support.
Adds priority support, named maintainer contact and basic indemnification clause.
Adds SLA, security/compliance documentation and vendor onboarding support.
Target Markets
- Security researchers and analysts
- Cybersecurity and threat-intelligence teams
- Fraud and trust-and-safety analysts
- Backend developers and engineering teams
- AI-agent developers and MCP users
- Organizations needing vendor contracts, SLAs or priority support
- Authorized security research and investigations
- Email and username reconnaissance
- Domain, DNS, WHOIS/RDAP and subdomain intelligence
- IP geolocation, proxy/VPN/Tor and abuse-reputation enrichment
- Threat-intelligence and fraud-analysis pipelines
- AI-agent and MCP-client tool integration