SpiderFoot

Open source · OSINT

SpiderFoot runs over 200 modules against a target such as a domain, IP address, email address or name and correlates the results, using a YAML-configurable correlation engine with 37 pre-defined rules. It runs as a self-hosted web application or from the command line, supports Docker, can search the dark web through Tor, and can call tools such as Nmap and DNSTwist.

Key facts

Vendor	SpiderFoot (open source)
Licence	MIT
Repository since	2012
Does	Automated OSINT collection, Attack surface mapping, Correlation rules, Tor search
Reads	Domains, IP addresses, Email addresses, Names
Website	github.com/smicallef/spiderfoot
Source	github.com/smicallef/spiderfoot

Sources

SpiderFoot on GitHub

Checked 30 Sept 2026. Spotted something out of date? Tell us.

Other OSINT tools

Opsis OSINT
Maigret
Sherlock
WhatsMyName
Intelligence X
Maltego
OSINT Industries

Need the product tested as well? See Cyber Resilience Act compliance testing providers.