OSINT tools
Clearfront runs its 30 OSINT tools in a single sweep, and the effort you set decides how many of them run: a quick Faster pass, a Balanced middle ground, or the fullest Deeper map. Each one returns a real result the AI security analyst can verify, drawn from an open-source project, an API, or a public source. Every source below links to where it comes from. Tools marked API key need a free or paid key, binary need an external program installed, and keyless work out of the box.
Identity & accounts
- search_usernameSherlock ↗binary
Reused handles across 3,400+ sites, with confidence tiers.
- search_maigretmaigret ↗binary
Deep profile details from matched accounts across 3,400+ sites.
- search_footprintDuckDuckGo ↗keyless
Public search-engine footprint for a target.
- search_githubGitHub ↗keyless
Public repos, commits, and leaked keys for a user or email.
- search_gravatarGravatar ↗keyless
Avatars and profiles from an email hash.
Email & breaches
- search_emailholehe ↗binary
Which sites an email is registered on.
- search_emailrepEmailRep.io ↗keyless
Reputation, deliverability, and risk flags for an email.
- search_breachHaveIBeenPwned ↗API key
Appearances in known data breaches.
- search_hudsonrockHudson Rock ↗keyless
Exposure in infostealer-malware logs (defensive self-check).
- search_pasteHaveIBeenPwned ↗API key
Leaked data in public paste dumps.
- search_cryptoBlockstream ↗keyless
On-chain balance and activity for a wallet address.
Domains & DNS
- search_domainSublist3r ↗binary
Subdomains of a target domain.
- search_whoispython-whois ↗keyless
Registrant, registrar, and key dates.
- search_dnsdnspython ↗keyless
DNS records and mail-security config.
- search_crtcrt.sh ↗keyless
Subdomains from certificate transparency.
- search_waybackWayback Machine ↗keyless
Historical and deleted pages from the archive.
- search_harvestertheHarvester ↗binary
Emails and hosts for a domain from passive sources.
Network & threat intel
- search_ipipinfo.io ↗keyless
Geolocation, ASN, and host details.
- search_exposureipinfo.io ↗keyless
Reverse DNS, blocklists, and VPN/proxy detection, ranked by risk.
- search_shodanShodan ↗API key
Internet-exposed devices and services.
- search_censysCensys ↗API key
Hosts, certificates, and exposed services.
- search_ip2locationIP2Location.io ↗API key
Precise geolocation and VPN/proxy detection.
- search_abuseipdbAbuseIPDB ↗API key
Abuse reports and blocklist status.
- search_greynoiseGreyNoise ↗API key
Mass-scanner noise vs. targeted actor.
- search_virustotalVirusTotal ↗API key
Malware and reputation verdicts.
Phone & media
- search_phonePhoneInfoga ↗binary
Carrier, country, and line type.
- search_exifExifTool ↗binary
GPS and metadata hidden in photos.
Dorking & fetch
- generate_dorksGoogle ↗keyless
Targeted Google dork queries, generated offline.
- search_dorks_liveBright Data ↗API key
Runs the dorks and returns live hits.
- scrape_urlBright Data ↗API key
Pulls and parses any page for the AI security analyst.