Resources

Audit your own digital footprint in about an hour, for free, using the five OSINT passes a security analyst would run on you. Step by step, with the shortcut.

The UK self-audit uses different records than the US one: the electoral register, 192.com, Companies House, the Land Registry. Here is the UK walkthrough.

Face-search engines can find your photos across the web from a single headshot. Here is how they work, what they find, the PimEyes facts, and how to opt out.

Google records what you search, watch, and where you go, and gives you the tools to see, delete, and stop most of it. Here is exactly where to look and what to switch off.

One username often maps to accounts across hundreds of sites. Here is how username enumeration works, what it reveals about you, and how to lock it down.

Your phone number links more of your accounts than you think. Here is what a reverse phone lookup reveals, how to check if your number leaked, and how to cut the exposure.

Doxxing is publishing someone private information to harass them, mostly assembled from public data. Here is how it works, whether it is illegal, and how to defend yourself.

Google has two tools for getting your personal information out of search results, plus one limitation to understand first: removal hides a page, it does not delete it.

Your email is a master key to your online life. Here is what a reverse email lookup surfaces about you, why attackers start there, and how to cut the exposure.

A photo can carry the GPS coordinates of where it was taken. Here is what EXIF metadata reveals, whether platforms strip it, and how to remove it before you share.

You cannot fully erase your digital footprint, but you can shrink it a lot. Here are the six steps that actually work, in the order that gets the most result.

A digital footprint is every trace of you in public data. Here are the two kinds, what yours exposes, and the honest answer to whether you can delete it.

If you ran a company, your home address may be public on Companies House. Here is how to suppress it with form SR01, and what the new identity checks mean.

Data brokers sell your address, age, and relatives to anyone. Here is how to find which ones list you, opt out of the ones that matter, and use new laws that help.

Getting off 192.com takes two steps: remove the listing and opt out of the open electoral register that feeds it. Here is exactly how to do both, free.

A June 2026 dump exposed around 24 billion credential records. Here is what was in it, how to check if your data is included, and the 15-minute response.

A company lost your data, or a checker flagged your email. Here is the response that actually protects you, in order, based on official FTC guidance.

Have I Been Pwned is the standard, but not the only option. Here are the free and open-source breach-check tools, how they work, and where each one fits.

Most account takeovers come down to weak passwords, missing two-factor, and phishing. Here is how to fix all three, based on current NIST and FIDO Alliance guidance.

Your public information fuels the two attacks most likely to hit you: a convincing phishing email and a password guessed from an old breach. Here is how, with the numbers.

Given a single username, an AI OSINT agent can chain tools and assemble a profile in minutes. Here is how it works, what it finds, and how to harden your footprint.

Clearfront is driven by an AI security analyst that picks its own tools. Here is how to prompt it well, pivot through the evidence graph, and read the report.

Clearfront is a free, open-source footprint scanner that runs on your own machine. Here is how to install it and run your first scan, start to finish.

A working list of the free OSINT tools actually worth using in 2026, grouped by what they do, with an honest note on which are truly free and which gate the good parts.

OSINT is finding things out from information that is already public. Here is what it is, how the four stages work, why it is legal, and the free tools to start with.

UK police scan faces in public with live facial recognition, yet no law specifically authorizes it. Here is where it is deployed, the Bridges ruling, and your rights.

Flock cameras are a US surveillance story. In the UK the cameras reading your number plate are the national ANPR network. Here is what it records and your rights.

UK age checks often mean uploading ID or a face scan to a third party. Here is how age verification works, the real privacy risks, and how to spot a safe check.

No, the UK is not banning VPNs and using one is legal. Here is what is actually happening, why the confusion started, and what it means if you use a VPN.

The UK has announced a social media ban for under-16s and new defaults for 16 and 17-year-olds. It is not law yet. Here is what was announced and when.

For a few pounds, anyone can look up who owns a UK property and what they paid. Here is what property records expose, what you can and cannot hide, and how to guard against fraud.

UK erasure rights delete your data at source; Google delisting only hides a page from name searches. Here is how each works and why you need both.

A subject access request forces any UK organization to hand over the personal data it holds on you, free, within one month. Here is how to send one.

From 19 June 2026 you can complain directly to any organization about how it handles your data, and it must acknowledge you within 30 days. Here is how.