Authorization first
Scope must be explicit before collection starts.
Authorized OSINT field guide · 2026-06-22
Safe OSINT workflow
Good OSINT work is as much about restraint and documentation as it is about tools.
- ScopeOwn or written authorization
- PassiveSearch indexes and public records
- CollectUse the narrowest suitable tool
- VerifyRecord source, date and confidence
Passive before active
Use public indexes and documents before touching target infrastructure.
Confidence labels
Label each finding with source, time checked and confidence level.