Write the scope note
Target one owned test domain, the purpose, allowed data sources and stop conditions.
Authorized OSINT field guide · 2026-06-22
SpiderFoot safe first run
Use SpiderFoot as an authorized inventory assistant, not as an unconstrained scanner.
Install locally first
Use the local web UI or Docker before connecting any paid API keys.
Use conservative modules
Begin with passive modules and skip anything that probes infrastructure aggressively.
Review before reporting
Treat findings as leads until a second source or direct owner confirmation supports them.