OpSec Tools for OSINT Investigations
Protect your identity and operational security during OSINT investigations. These OpSec tools cover anonymous browsing, VPNs, virtual environments, digital trace management and counter-surveillance.
36 tools · Version française
- Anonymouth - Document Anonymization (T)also written Anonymouth - Document Anonymization, Anonymouth Document AnonymizationJava-based authorship anonymization tool that analyzes and modifies writing style features to reduce stylometric identification of document authors.free
- Awesome Opt-Out Guide 2026also written Awesome Opt Out Guide 2026Community GitHub repository compiling data broker opt-out procedures, privacy request templates, and removal links for 2026.free
- Browser Leaksalso written BrowserLeaksComprehensive browser privacy and security testing suite covering IP, DNS, WebRTC, canvas fingerprinting, font enumeration, and dozens of other browser data leakage vectors.free
- Browser Statisticsalso written BrowserStatisticsW3Schools browser market share statistics showing usage distribution across browser types and versions to help craft believable user agent strings.free
- BrowserSpy.dkalso written Browser Spy.dk, BrowserSpy dkDanish browser information and fingerprinting test site that reveals detailed browser capabilities including plugins, fonts, screen properties, and other identifiers.free
- CanarytokensFree honeypot token generator by Thinkst. Create invisible tripwires in documents, URLs, emails, and AWS credentials — you get notified the moment someone opens them.free
- Cover Your Tracks (ex-Panopticlick)also written Cover Your Tracks (ex Panopticlick)EFF browser fingerprinting test (now Cover Your Tracks at coveryourtracks.eff.org) that measures how uniquely identifiable your browser is across the web.free
- Credit Freezealso written CreditFreezeIntel Techniques tutorial covering the complete process for freezing credit at all major and specialty bureaus to prevent identity theft and data broker access.free
- DNS leak testTests whether DNS queries are leaking outside a VPN tunnel by checking which DNS servers resolve your lookups, potentially exposing your ISP.free
- DNS Leak TestsAlternative DNS leak testing service that identifies whether DNS requests bypass your VPN tunnel and expose your real ISP’s DNS servers.free
- Email Leak TestsTests whether your email client or webmail service leaks your real IP address in email headers when sending messages.free
- Fake Identity GeneratorGenerates random fake identities including names, addresses, and personal details for use in anonymous account creation and persona testing.free
- Fake Name GeneratorGenerates realistic synthetic identities including names, addresses, SSNs, and biographical details for persona creation during OSINT operations.free
- Fake US IdentitiesGenerates fake US identity data including names, addresses, SSNs, and driver’s license numbers for test and persona creation purposes.free
- Firefox-debloatalso written Firefox debloatCollection of Firefox configuration tweaks and policies to disable telemetry, enhance privacy, and reduce browser fingerprinting surface.free
- Intel Techniques - Hiding from the Internetalso written Intel Techniques Hiding from the InternetMichael Bazzell’s OSINT workbook covering comprehensive personal data removal, digital footprint reduction, and operational security techniques.free
- IP / DNS Leak DetectionComprehensive leak detection tool that tests for IP, DNS, WebRTC, and IPv6 leaks to verify VPN or Tor anonymization is working correctly.free
- IP2Proxyalso written IP2 ProxyDatabase and lookup service that detects whether an IP address belongs to a proxy, VPN, Tor exit node, or hosting provider to assess anonymization visibility.freemium
- IPv6 Leak Testsalso written I Pv6 Leak TestsTests whether IPv6 connectivity is leaking your real IP address outside a VPN tunnel that only routes IPv4 traffic.free
- JonDonymalso written Jon DonymAnonymization verification tool from the JonDonym project that checks IP, browser headers, cookies, and other identifiers for privacy leaks.free
- Just Delete MeDirectory of direct links to account deletion pages for hundreds of online services, rated by deletion difficulty to help with digital footprint removal.free
- LocaBrowser.comalso written Loca Browser.com, LocaBrowserBrowser geolocation testing tool that checks what location data your browser exposes via the HTML5 Geolocation API to websites.free
- MAT2 (T)also written MAT2Metadata Anonymisation Toolkit v2 — command-line tool that strips metadata from documents, images, audio files, and archives before sharing to prevent inadvertent disclosure.free
- NoScript (T)also written NoScript, No ScriptFirefox/Chrome security extension that blocks JavaScript, Java, Flash, and other active content by default to prevent browser fingerprinting and code execution from untrusted sites.free
- OptOut Credit Prescreenalso written Opt Out Credit PrescreenOfficial US consumer opt-out service operated by major credit bureaus to remove yourself from pre-screened credit and insurance offer lists.free
- Privacy Guidesalso written PrivacyGuidesCommunity-maintained guide recommending privacy-respecting software, services, and best practices; covers VPNs, browsers, operating systems, email, and more.free
- Privacy Toolsalso written PrivacyToolsPrivacy-focused tool recommendation site covering encrypted messaging, VPNs, browsers, operating systems, and email providers; now largely redirects to Privacy Guides.free
- Random User GeneratorOpen-source API that generates randomized user profiles including names, photos, addresses, and credentials for development and OSINT persona building.free
- Social Media FingerprintBrowser-based tool that detects which social media platforms you are currently logged into by exploiting cross-origin image loading timing differences.free
- This Person Does Not ExistGenerates photorealistic AI-synthesized human faces using StyleGAN2; each page load produces a unique, non-existent person’s portrait.free
- Trace My IPIP address lookup and geolocation tool that reveals current IP, ISP, location, and additional network metadata visible to websites.free
- User Agent String DecoderParses and decodes user agent strings into human-readable browser, OS, and device information components.free
- UserAgentString.comalso written User Agent String.com, UserAgentStringDatabase of known user agent strings for browsers, bots, and devices; helps identify what browser/OS a user agent string represents or find strings to spoof.free
- What browser am I using.coalso written What browser am I usingSimple browser detection page that identifies your current browser name, version, and operating system.free
- WhatIsMyBrowser.comalso written What Is My Browser.com, WhatIsMyBrowserDetects and reports your current browser, operating system, and plugins as seen by websites; useful for verifying anonymization and user-agent spoofing effectiveness.free
- WhatsMyBrowser.orgalso written Whats My Browser.org, WhatsMyBrowserIdentifies your current browser version and settings, providing a shareable link that displays your full browser fingerprint to others.free
Frequently asked
- What is OpSec in OSINT?
- Operational Security is the practice of minimizing traces left during an investigation: use of dedicated accounts, VPN, virtual machines, and avoiding browser fingerprints.
- How to investigate anonymously?
- Use Tails OS or Whonix for an amnesic system, a VPN or Tor to hide your IP, dedicated accounts for each investigation, and never log into personal accounts during an investigation.