What does OSINT mean?
OSINT stands for Open Source Intelligence. The term originated in military and intelligence contexts, where it referred to the collection and analysis of information from publicly available sources — newspapers, radio broadcasts, public records — as opposed to classified or intercepted material.
In modern usage, OSINT refers to the practice of finding, collecting, and analysing information from publicly accessible online and offline sources. The "open source" in the name has nothing to do with open-source software — it refers to sources that are open to the public.
What sources does OSINT use?
OSINT draws from any information that is publicly accessible without special authorisation. Common sources include:
Get your own privacy report
Want to see what is publicly visible about you?
Get Privacy Report reviews your digital footprint using public-source OSINT techniques. Search visibility, email exposure, username footprint, breach indicators, and a practical action checklist. One-off AUD $69.
Start My Privacy Report — $69- Search engines (Google, Bing, DuckDuckGo)
- Social media platforms and public profiles
- Online directories and people-search websites
- Public records such as electoral rolls, court records, and company registrations
- News archives and media databases
- Domain registration information (WHOIS records)
- Data breach databases
- Forum posts, community sites, and review platforms
- Mapping and satellite imagery services
- Academic publications and government databases
The key distinction is that OSINT uses information that anyone could theoretically access — it does not involve hacking, account access, impersonation, or any unlawful method.
Who uses OSINT?
OSINT is used across a wide range of contexts:
Journalists and investigators
Journalists use OSINT to verify claims, find sources, track the movements of public figures, and investigate organisations. It is a standard part of investigative reporting.
Security professionals
Cybersecurity teams use OSINT to understand what information about their organisation is publicly visible — identifying exposed credentials, leaked documents, or infrastructure details before an attacker does.
Law enforcement
Police and government agencies use OSINT in investigations, often alongside other intelligence methods. In many jurisdictions, OSINT gathered from public sources is admissible in legal proceedings.
Businesses
Companies use OSINT for due diligence on potential partners, background research on job applicants, and monitoring their own public exposure.
Individuals
People use OSINT to understand their own digital footprint — finding out what is publicly visible about them before others do. This is the context in which Get Privacy Report operates.
Important distinction: OSINT is a method, not a purpose. The same techniques can be used for legitimate research or for stalking and harassment. The ethics and legality of OSINT depend entirely on who is gathering the information, why, and what they do with it.
Why OSINT matters for individual privacy
The practical implication of OSINT for individuals is straightforward: if information about you is publicly available, someone with basic internet skills can find it. You do not need to be a target of a sophisticated investigation. Anyone can run a search.
What is surprising to many people is how much can be assembled from scattered public sources. A name, an email address, a username, and a few public profiles can be combined to build a detailed picture of someone's daily life, location, interests, social connections, and professional history.
Understanding your OSINT exposure means understanding what that picture looks like — and deciding whether it reflects what you want to be publicly visible.
What OSINT cannot do
It is equally important to understand the limits of OSINT:
- It cannot access private accounts, direct messages, or locked profiles
- It cannot retrieve deleted content (with some exceptions involving cached pages or archive services)
- It cannot guarantee complete coverage — some information may simply not be indexed or publicly accessible
- It cannot access information protected by login, paywall, or access restriction
- It cannot retrieve information that was never made public in the first place
How Get Privacy Report uses OSINT
Get Privacy Report applies public-source OSINT methods to help individuals understand what is publicly visible about them online. The review covers search engine results, public profiles, username footprints, email exposure indicators, and breach visibility — all from publicly accessible sources, with no account access or unlawful methods.
The result is a plain-English report that explains what was found, what it may mean for your privacy, and what practical steps you can consider.
Get Privacy Report uses public-source OSINT only — no hacking, no private account access, no passwords required. Read how the review works →