Data sources
Every finding in this platform names the source it came from. This page lists all of them. The core platform runs entirely on free, public sources, paid providers are optional enrichment, and when one is not configured the investigation continues on everything else and records why that source was skipped.
Free public sources
No API key, no account, no cost. These run on every applicable investigation.
| Provider | Source | Category | Applies to |
|---|---|---|---|
| DNS Records | dns.cloudflare | dns | domain, subdomain, email, url |
| Email Authentication | dns.cloudflare | dns | domain, subdomain, email, url |
| Domain Registration (RDAP) | rdap.org | infrastructure | domain, subdomain, email, url |
| Email Analysis | disposable.list | identity | |
| IP Intelligence | rdap.org | infrastructure | ip, domain, subdomain, url |
| Certificate Transparency | crtsh | certificates | domain, subdomain, email, url, organization |
| Live TLS Certificate | tls.handshake | certificates | domain, subdomain, url, email |
| Web Intelligence | http.probe | web | url, domain, subdomain |
| Username Intelligence | username.probe | profiles | username, email |
| Threat Intelligence | spamhaus.dnsbl | threat | ip, domain, subdomain, url, email |
| GitHub | github.public | repositories | username, email, organization |
| Wayback Machine | wayback | archives | domain, subdomain, url |
Optional paid sources
These require an API key set by the operator. They are never required: an investigation with no keys configured still runs every free module, and the workspace shows the skipped source and the reason rather than silently omitting it.
- Breach Exposure (HIBP)API key requiredhibp
- Google Safe BrowsingAPI key requiredsafebrowsing
Platforms checked for usernames
30 platforms, all of which publish profile pages that can be read without an account.
Platforms deliberately excluded
Checking these would require authenticating, defeating an anti-bot challenge, or otherwise circumventing an access control. They are excluded by policy, and the exclusion is reported in every username investigation so the coverage gap is explicit.
Facebook
Profiles require authentication to view; probing would mean bypassing an access control.
Instagram
Public profile access is gated behind login walls and anti-automation challenges.
LinkedIn
Profile access requires authentication and the terms prohibit automated retrieval.
X / Twitter
Public profile reads now require authentication.
TikTok
Profile pages are served behind an anti-bot challenge.
Snapchat
No public profile surface to observe.