Open-source intelligenceon your digital footprint.
Clearfront is a free, open-source OSINT tool. It scans 3,400+ public data sources and an AI security analyst explains what your exposure means.
git clone https://github.com/scottmartinanderson/clearfront.git


What it is
Give Clearfront an email, username, phone number, domain, or IP. In one sweep it runs 30 collection tools across 3,400+ public data sources, scanning identity, breaches, domains, network, and media, then maps what it finds into a force-directed evidence graph. An AI security analyst compiles the findings into a report that tells you what your exposure means, with the source, confidence, and severity on every line.
Clearfront gives anyone the same intelligence capability a professional or adversary would run against them, and the power to act on it first.
- REPLAsk it to check an email, a username, or a domain; it runs the tools, follows the leads, and writes the report.
- CLIScriptable one-shot lookups for quick checks and automation.
- WebA browser console with the full chat UI and the live evidence graph.
- MCPPlug Clearfront into Claude Code or Claude Desktop as a tool server.
- SkillInstall the agent skill so Claude Code, Cursor, Codex, Copilot and other clients can drive it.
- FasterChecks fewer sources for a quick sweep. Finishes fast and uses less of your API budget.
- BalancedCovers the main sources. A middle ground on time and cost.
- DeeperFollows every lead for the most complete map, but takes longer and uses more of your API budget.
You set the effort in the console or the REPL. Deeper is the default, and every level trades time and API budget, never analyst quality.
Usage
Hand the AI security analyst a target, or call any tool yourself from the shell.
clearfront # start the interactive AI security analystclearfront email jane@example.com # or run one-shot lookupsclearfront username johndoe99clearfront ip 8.8.8.8clearfront web # or open the browser console
Or run it as an MCP server inside Claude Code or Claude Desktop.
{"mcpServers": {"clearfront": {"command": "clearfront-mcp"}}}
Or install the agent skill, which teaches Claude Code, Cursor, Codex, Copilot, VS Code, Gemini, Windsurf, Zed and other skills-compatible clients how to drive it.
npx skills add scottmartinanderson/clearfront
Tools
Every sweep can call on all 30 tools, and the effort you pick decides how many run. Each returns a real result the AI security analyst can verify, grouped here by discipline.
- search_usernameReused handles across 3,400+ sites
- search_maigretDeep profile details from matched accounts
- search_footprintPublic search-engine footprint for a target
- search_githubPublic repos, commits, and leaked keys
- search_gravatarAvatars and profiles from an email hash
- search_emailWhich sites an email is registered on
- search_emailrepReputation, deliverability, and risk flags
- search_breachAppearances in known data breaches
- search_hudsonrockExposure in infostealer-malware logs
- search_pasteLeaked data in public paste dumps
- search_cryptoOn-chain balance and activity for a wallet
- search_domainSubdomains of a target domain
- search_whoisRegistrant, registrar, and key dates
- search_dnsDNS records and mail-security config
- search_crtSubdomains from certificate transparency
- search_waybackHistorical and deleted pages from the archive
- search_harvesterEmails and hosts for a domain
- search_ipGeolocation, ASN, and host details
- search_exposureReverse DNS, blocklists, and VPN/proxy risk
- search_shodanInternet-exposed devices and services
- search_censysHosts, certificates, and exposed services
- search_ip2locationGeolocation and VPN/proxy detection
- search_abuseipdbAbuse reports and blocklist status
- search_greynoiseMass-scanner noise vs. targeted actor
- search_virustotalMalware and reputation verdicts
- search_phoneCarrier, country, and line type
- search_exifGPS and metadata hidden in photos
- generate_dorksTargeted Google dork queries
- search_dorks_liveRuns the dorks and returns live hits
- scrape_urlPulls and parses any page for the AI security analyst
How it works
Clearfront maps your whole digital footprint into a graph you can explore. Every account, breach, and domain becomes a point on a force-directed graph, and every shared email, reused username, or repeated IP becomes a link between them.
The algorithm clusters related data points, so a scattered digital footprint settles into a clear, connected picture where you can see where the real risk sits. Click any node to ask the AI security analyst to dig deeper, and the evidence graph grows with every new connection it finds.
The report
Not a list of links. A structured intelligence report. Calibrated confidence, severity, and source reliability on every finding.
The email j.reyes@example.com very likely belongs to a single individual, Jordan E. Reyes, with a footprint spanning ten familiar platform accounts, two personal domains, one active company, and two dissolved companies. Credentials tied to the subject appear in infostealer logs and three known breaches, and a home address and phone are indexed on four data-broker sites.
Confidence: high, based on seven URL-verified accounts and two live breach-database hits. The company links are moderate confidence, drawn from indexed registry records rather than live results.
Nothing leaves your device
Clearfront runs entirely local, with your own API keys. Your targets, your findings, and everything it collects stay on your device. We never see or store your data.
Install
Clone it, install it, set an API key, and run. Free and open source, nothing to sign up for.
git clone https://github.com/scottmartinanderson/clearfront.gitcd clearfrontpip install -e .export ANTHROPIC_API_KEY=sk-ant-...clearfront # interactive REPLclearfront web # browser console
Runs on macOS, Linux, and Windows with Python 3.10 or newer.
Works with Claude, OpenAI, or a fully local model through Ollama. Set the key for whichever you use, or run entirely on Ollama with no key at all.
A few collection tools use external binaries. Install holehe, sherlock, maigret, sublist3r, phoneinfoga, and exiftool to enable them.
Extra API keys (Shodan, HIBP, VirusTotal, and others) are optional and unlock more sources.
Plans
- Open sourceSelf-hosted · free foreverRecommended
Your digital footprint is public. Map every trace of it.
- -30 OSINT tools + AI security analyst
- -Algorithm-linked 3D evidence graph
- -100% local, we never see your data
Install ↓No sign-up required.
- CloudHosted · pre-launch
Your exposure, instantly, in the browser.
- -Hosted, nothing to install
- -Managed keys, or bring your own
- -Your digital footprint exposure at a glance
- ConciergePrivate client · by request
Your situation, handled personally and with discretion.
- -Control what the internet knows and says about you
- -Doxxing and blackmail crisis response
- -Ongoing monitoring and reputation management
License
Clearfront is released under the MIT license. Use it, change it, build on it, and ship it in commercial or closed-source work. No fee, no sign-up, free for any use.
Read the full license.
Legal & ethics
Clearfront is intended for authorized use only: security research, penetration testing, law enforcement, intelligence agencies and investigative journalism. It operates on public data alone and performs no intrusive probing.
Users are solely responsible for compliance with all applicable law, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Computer Fraud and Abuse Act (CFAA).
- Checking your own footprint
- Penetration testing you are cleared to run
- Journalism in the public interest
- Law enforcement acting on a legal basis
- Stalking, harassment, or intimidation
- Doxxing or exposing someone else
- Surveillance without consent or authority
- Fraud or impersonation
Full terms are in the disclaimer.
FAQ
Everything about you that can be found online, and it is far more than most people think. Some of it you published on purpose: profiles, posts, photos. The rest built up on its own through account signups, data breaches, and public records. It stays findable for years after you forget it, and every piece is raw material for someone building a picture of you.
Clearfront scans both kinds of public data in one sweep and shows you the same picture a stranger could assemble.
Far more than the profile you filled in. Most sites confirm whether an email or username is registered, so anyone can test yours across thousands of platforms in minutes. Abandoned accounts keep your photo, bio, and handle exposed for years. And when a service you trusted is breached, your email, password, and everything else you gave it lands in dumps that circulate forever, ready for the next credential-stuffing run against your other accounts.
Clearfront traces your username across 3,400+ sites and checks your email against known breaches and infostealer logs, so you find the exposed accounts before an attacker does.
The same data feeds very different people. Data brokers package it into profiles and sell them. Scammers use the details to social-engineer you, building a phishing email or a phone call convincing enough that you act before you think. A patient stranger can reconstruct your routine, your relationships, and where you are from public pieces alone, the same way an intelligence analyst profiles a target. And anyone with a grudge, from an online argument to an ex, can follow the exact same trail.
Clearfront runs the same public lookups they would, so you see what an attacker sees before they use it.
Because exposure is not about secrets. It is about what small facts add up to. A pet’s name in an old post answers a security question. Check-ins from a fitness app map where you are and when. One password reused from a breached site unlocks ten other accounts. On their own they look harmless, which is why they get ignored, but together they become a blueprint for account takeover, impersonation, or someone finding where you live.
Clearfront rates every finding by severity, so you see which pieces put you at real risk instead of guessing.
Through the things you reuse. A single handle carried across sites links your professional profile to the accounts you thought were anonymous. One email ties old forums, breach records, and domain registrations back to the same person. Intelligence analysts call these pivots, and chaining them into a full identity is routine tradecraft, not magic. It is exactly how people get unmasked, targeted, and tracked.
Clearfront maps those pivots on an evidence graph, so you can see how your accounts connect and break the links before someone else follows them.
Related: What is OSINT? A beginner’s guide
Yes. Data brokers take opt-out requests, old accounts can be closed, and GDPR and CCPA give you deletion rights with many services. Breach data is the exception: once it leaks, assume copies exist forever and rotate the passwords instead. Every day it stays up is another day it can be used against you, and removal starts with knowing exactly what is out there.
Clearfront gives you that list, ranked by severity, so you shut down the worst exposures first.
Ready to remove it? The free guide walks you through scrubbing your footprint off the internet, with Claude submitting the removals for you.
Run a sweep on yourself before someone else does. Start with your main email and the username you reuse most, and read the report.
Clearfront is free, open source, and runs entirely local, so checking your own exposure never adds to it. Setup takes a few minutes.
Related: How to check your digital footprint
Scrub your footprint
Scrub your digital footprint off the internet.
Your personal data is still public. This free guide walks you through the removals step by step, with Claude submitting them for you.
No spam, unsubscribe anytime.