What is OSINT? Open-source intelligence, explained

OSINT stands for open-source intelligence. It means learning something by collecting and piecing together information that’s publicly available: websites, social media, public records, news, forums, photos, maps. Nothing is hacked or stolen. The skill is in knowing where to look and how the pieces fit.

“Open source” here has nothing to do with software. It just means the source is open to anyone.

Where the term comes from

Governments have gathered intelligence from public sources for a long time. During the Second World War, the United States and Britain both ran teams that listened to foreign radio broadcasts and read foreign newspapers to work out what was happening abroad. Intelligence agencies kept doing it, and the name stuck.

What changed is the internet. Today a huge amount of information about ordinary people is a search away, and the same methods those agencies used are open to anyone with a browser and some patience.

Who uses OSINT

Lots of people, for lots of reasons:

• Journalists verify photos, trace who’s behind a company, or confirm where a video was filmed.
• Security teams check what an attacker could learn about their company and staff before an attacker does.
• Researchers and investigators trace scams, fraud and disinformation.
• Recruiters, landlords and businesses look people up before working with them.
• People who want to cause harm use exactly the same methods to find someone’s home, family or phone number. That’s what doxxing is.

The methods are neutral. What matters is who’s using them and why.

What OSINT can find about a person

Starting from one detail, like a name, an email address or a username, someone using OSINT methods might find:

• People-search listings that show a home address, age, phone numbers and relatives.
• Public records such as property ownership, court cases, business filings and, in some places, voter registration.
• Old accounts on forums, shopping sites or social networks that are still tied to an email or username.
• Data breaches that show which services an email was used on, and sometimes a phone number or old password.
• Photos that show a street, a car, a school uniform or a view from a window.
• Search results that link all of the above together.

Any one of these might not say much. Put together, they often do. A username leads to an old profile, the profile mentions a city, and a people-search site lists everyone with that name in that city, with addresses.

Why it matters for you

Most people have never looked at themselves the way a stranger would. They know they have social media accounts, but they don’t know that a site they’ve never heard of lists their home address next to their mobile number, or that a forum account from years ago still shows their real name.

The good news is that a lot of it can be fixed once you know it’s there. Most people-search sites have an opt-out page. Old accounts can be closed or cleaned up. Passwords from a breach can be changed.

That’s the idea behind Oko. We use the same kinds of public sources to show you what a stranger could find, how they’d get from one detail to the next, and which fixes close off the quickest routes first. With a report, you do the opt-outs yourself on each site’s own page, and we link you straight to it. With the removal plan, Oko sends the requests for you on the people-search sites it can automate; sites that need a phone call, ID or a CAPTCHA are still yours to do, with the steps in your report.

OSINT and the law

Looking at public information is generally legal. What someone does with it can be a different matter. Stalking, harassment and threats are against the law in most places, and some places have laws about publishing someone’s personal details to cause them harm. If someone is using public information to target you, see What to do if you’ve been doxxed.