[Cyber Security Terms](/glossary) Open Source Intelligence [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) [Cyber Security Terms](/glossary) # Open Source Intelligence ##### [Catherine Chipeta](/team/catherine-chipeta) updated Oct 18, 2021 ###### Contents ## What is Open Source Intelligence? Open source intelligence (OSINT) is data obtained from publicly available sources which is analyzed and processed for intelligence purposes. OSINT analysts are specialized in using sophisticated methods and tools to explore and pinpoint data to meet their objectives. While OSINT sources are available to anyone, many times they are not broadly known to be publicly available. OSINT can be found both offline and online. Common examples of information used for OSINT include: ### Offline * Diplomatic Documentation * Academic Documentation * Corporate Documentation * Mass Media ### Online * Internet Search/Database * Social Media Platforms * Sharing & Publishing * Blogging, Forums, and Online Communities * Deep web[‍](https://www.upguard.com/blog/dark-web) * [Dark web](https://www.upguard.com/blog/dark-web) ## Open Source Intelligence Uses [Information security](https://www.upguard.com/blog/information-security) teams leverage OSINT for two reasons: ### Discovering an Organization's Public-Facing Internal Assets Using penetration testing (or ethical hacking), OSINT analysts test an organization's cybersecurity. Intelligence accessible through penetration includes: * [Data leaks](https://www.upguard.com/blog/data-leak) * Unpatched software * [Open ports](https://www.upguard.com/blog/open-port) and unsecured devices * Exposed assets, such as IP addresses, networks, device names, and software versions. ### Identifying External Information About An Organization External information, like social media posts and content the dark and deep web can also create many [cyber threats](https://www.upguard.com/blog/cyber-threat). ## The Dangers of OSINT Threat actors can use the same specialized methods that OSINT analysts do, but for malicious purposes. They instead gather intelligence to enact cyber attacks, such as: * Social engineering, e.g., [phishing](https://www.upguard.com/blog/phishing) and [email spoofing](https://www.upguard.com/blog/email-spoofing) * [Creating botnets](https://www.upguard.com/blog/what-is-a-botnet) to launch [Distributed Denial of Service (DDoS) attacks](https://www.upguard.com/blog/what-is-a-ddos-attack) * [Brute force attacks](https://www.upguard.com/blog/brute-force-attack) * [Doxing](https://www.upguard.com/blog/what-is-doxing) * [Malware injections](https://www.upguard.com/blog/malware), e.g., [spyware](https://www.upguard.com/blog/spyware), [ransomware](https://www.upguard.com/blog/ransomware), and other [types of malware](https://www.upguard.com/blog/types-of-malware) ## Key takeaways * Open source intelligence is available from publicly accessible materials - both online and offline. * Information security teams use OSINT to discover public-facing internal assets and to identify external information about an organization. * Cyber criminals can use OSINT tools and techniques to carry out cyber attacks. * * ###### Reviewed by No items found. ###### Author ##### [Catherine Chipeta](/team/catherine-chipeta) ###### Reviewed by ##### [Kaushik Sen](/team/kaushik-sen) ###### Join 27,000+ cybersecurity newsletter subscribers ## Read more about Open Source Intelligence Learn more about Open Source Intelligence and the latest issues in cybersecurity. [UpGuard](/blog/open-source-intelligence) [Open Source Intelligence (OSINT): Top Tools and Techniques](/blog/open-source-intelligence) #### [Open Source Intelligence (OSINT): Top Tools and Techniques](/blog/open-source-intelligence) Open source intelligence (OSINT) is the process of obtaining and analyzing data from publicly available sources. [](/team/catherine-chipeta) [Catherine Chipeta](#) September 11, 2026 [View all blog posts](/blog) ## See UpGuard In Action Book a free, personalized onboarding call with one of our cybersecurity experts. [Contact sales](/demo) [Free demo](/demo) ## More from our blog Learn more about the latest issues in cybersecurity. [UpGuard](/blog/find-out-if-youre-exposed-on-the-dark-web) [Find Out if You're Exposed on the Dark Web](/blog/find-out-if-youre-exposed-on-the-dark-web) #### [Find Out if You're Exposed on the Dark Web](/blog/find-out-if-youre-exposed-on-the-dark-web) Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure. [](/team/lance-turner) [Lance Turner](#) October 14, 2026 [UpGuard](/blog/upguard-named-leader-in-idc-marketscape) [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape) #### [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape) UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why. [](/team/cassy-van-eeden) [Cassy van Eeden](#) October 18, 2026 [UpGuard](/blog/your-first-dark-web-scan-report-explained) [Your First Dark Web Scan Report, Explained](/blog/your-first-dark-web-scan-report-explained) #### [Your First Dark Web Scan Report, Explained](/blog/your-first-dark-web-scan-report-explained) You scanned your domain. What do the results mean? [](/team/lance-turner) [Lance Turner](#) October 11, 2026 [UpGuard](/blog/ai-evidence-analysis-tools-for-tprm) [We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.](/blog/ai-evidence-analysis-tools-for-tprm) #### [We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.](/blog/ai-evidence-analysis-tools-for-tprm) We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four. [](/team/cassy-van-eeden) [Cassy van Eeden](#) September 29, 2026 [UpGuard](/blog/cybersecurity-horror-stories-2026) [12 Cybersecurity Horror Stories of 2026 (No Costume Required)](/blog/cybersecurity-horror-stories-2026) #### [12 Cybersecurity Horror Stories of 2026 (No Costume Required)](/blog/cybersecurity-horror-stories-2026) A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news. [](/team/revashni-moodley) [Revashni Moodley](#) October 14, 2026 [UpGuard](/blog/good-security-rating-your-dark-web-exposure-says-otherwise) [Good Security Rating? Your Dark Web Exposure Says Otherwise](/blog/good-security-rating-your-dark-web-exposure-says-otherwise) #### [Good Security Rating? Your Dark Web Exposure Says Otherwise](/blog/good-security-rating-your-dark-web-exposure-says-otherwise) Scan your domain to see just how exposed you are on the Dark Web. [](/team/lance-turner) [Lance Turner](#) October 11, 2026 [View all blog posts](/blog) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)