What Is OSINT? Open Source Intelligence Explained

OSINT — open source intelligence — is intelligence produced from publicly available information. “Open source” here has nothing to do with open-source software. It means the information is available to anyone who looks: websites, public records, news, social media, academic papers, satellite imagery sold commercially, government publications, and more.

What turns public information into intelligence is the process applied to it: a clear question, systematic collection, verification, and analysis that produces a defensible answer.

Who uses OSINT

OSINT started as a government and military discipline, but it is now used widely:

• Journalists and fact-checkers verify footage, locate where images were taken, and trace who is behind accounts or companies.
• Security teams map their organization’s exposed digital footprint and watch for leaked credentials or impersonation.
• Compliance and due diligence teams research counterparties, beneficial owners, and adverse media. See Due Diligence with Public Web Sources.
• Human rights investigators document events using public videos, images, and records.
• Businesses use OSINT methods for competitive and market intelligence.
• Academic researchers study online behavior and information flows.

What counts as an open source

• The open web: company websites, blogs, forums, documentation, and archived versions of pages.
• Public records: company registries, court records, property records, procurement notices, and regulatory filings, depending on the jurisdiction.
• Media: news, broadcast, and press releases.
• Social media: public posts, profiles, and the networks around them.
• Technical data: domain registration (where not redacted), DNS records, certificate transparency logs, and exposed services.
• Geospatial data: maps, street-level imagery, and commercial satellite imagery.
• Grey literature: reports, conference papers, and theses.

The OSINT workflow

Experienced investigators follow a disciplined process. One widely referenced framework is the Berkeley Protocol on Digital Open Source Investigations, published in 2022 by the UC Berkeley Human Rights Center and the UN Office of the High Commissioner for Human Rights. It sets out standards for collecting, preserving, and verifying digital open source information so it can hold up to scrutiny.

In simplified form:

1. Define the question. “Who controls this company?” or “When did this policy change?” A precise question prevents endless browsing.
2. Plan collection. Identify which sources could answer it, and in what order.
3. Collect and preserve. Capture sources with dates, URLs, and copies. Web pages change or disappear — an unsaved page is a lost lead.
4. Verify. Cross-check claims against independent sources. Check dates, locations, and authorship. Treat a single source with caution.
5. Analyze. Connect verified facts and state confidence levels.
6. Report. Present findings with sources, so others can check your work.

Preservation is the step beginners skip most often. A page that said one thing last month may say something different today. That is why OSINT practitioners rely on web archives, saved snapshots, and change histories.

OSINT tool categories

Rather than chase individual tools, which change constantly, think in categories:

Category	What it helps with
Search and advanced search operators	Finding pages, documents, and file types
Web archives and snapshots	Seeing past versions of pages
Change monitoring	Knowing when a page, document, or record changes
Company and public-record databases	Ownership, officers, filings
Domain and infrastructure lookups	Who runs a site, related domains
Image and video verification	Reverse image search, metadata, geolocation
Social media research	Account history and networks
Note-taking and link analysis	Organizing evidence and relationships

“OSINT framework,” “OSINT tools,” and “what is OSINT” remain among the most common OSINT-related searches. The best “framework” is still the process above. Tools only speed up individual steps.

Monitoring: the underrated half of OSINT

Most OSINT guides focus on one-off investigations. Much real-world work, though, is ongoing: watching a company registry entry, a sanctions-related page, a policy document, or an organization’s website for changes. Continuous monitoring turns OSINT from a snapshot into a timeline. It is especially valuable when the moment of change matters — for example, when a document is quietly edited or a page is removed.

Legal and ethical limits

Public does not mean anything goes:

• Data protection laws such as the GDPR can apply to collecting and processing personal data, even when that data is public.
• Terms of service may restrict automated collection on some platforms.
• Deception — fake identities, pretexting, or social engineering — crosses ethical and often legal lines.
• Harm — publishing personal information about private individuals (doxxing) can cause real damage.

Good practice: collect only what you need for a legitimate purpose, keep records of how you obtained it, protect what you store, and get legal advice when personal data is involved.

Where PageWatcher fits

PageWatcher.app supports the monitoring side of OSINT. It watches web pages, PDFs, government portals, and company pages, keeps a history of changes, and uses AI to summarize what changed. It is not a people-search or surveillance tool. It is built for tracking public sources over time, so you see changes when they happen and keep a record of what each page said.