Authorized OSINT field guide · 2026-06-22

Self-hosted OSINT tools

Self-hosting helps with repeatability and data control, but it does not remove the need for authorization.

Use self-hosting for repeatability

SpiderFoot and Recon-ng are good fits when you need repeatable workflows and local records.

Do not self-host everything

Shodan and Censys provide curated internet-wide datasets that are hard to reproduce safely.

Control stored data

Keep collected entities, credentials, screenshots and reports inside the authorized project boundary.