Start with scope, not tools
Client-owned domains, public documents, public pages, authorized source repositories, and verified exposure-notification services.
Record URL, timestamp, observed fact, confidence, alternative explanation, remediation owner, and retest requirement.
Remove personal contact data, sanitize documents/metadata, correct listings, use role contact data, harden accounts, then retest.
Where to go
55 bookmarklets across 37 platforms, drag-to-install, searchable and filterable by Active/Passive.
Platforms & extensions →Forensic OSINT evidence capture and its free tools, plus the upstream My OSINT Training catalog and how to check it for updates.
Research reports →Three full transcript-derived reports: OSINT tooling & privacy exposure, fake cell towers, and privacy through OSINT.
Authorized client workflow
Inventory client-owned public assets, exposed documents, published contacts, domains, historical web copies, and client-approved aliases.
Do not convert a lead into an identity claim. Compare independent authoritative sources and client-provided records.
State impact, confidence, evidence, remediation, rollback, owner, and retest. Minimize PII in screenshots and reports.
Receive-only baseline and anomaly triage only. Carrier/regulator validation is required before attribution. No transmission or interception.
Non-negotiable boundaries
- Use exposure-notification services for client-approved addresses/domains; never raw stolen datasets.
- Use official opt-out/removal channels; do not fabricate information in healthcare, financial, government, legal, or emergency systems.
- Client ownership of a physical site does not authorize testing public carrier infrastructure.
- Bookmarklets execute JavaScript in the browser context. Review source and obtain explicit approval before loading them on a client or third-party site.