Before you start
1
Try a preview or create an account
You can run a free preview without signing up. For full searches and saved history, go to Osintly and create an account.
2
Pick a plan
You can first try a limited pseudonym or email preview without an account or subscription. Full saved searches cost credits; choose a plan based on your expected volume. Full details on osint.ly/pricing:
You can upgrade at any time. Credits do not roll over month to month. Individual plans do not include Investigations; older Personal and Team investigations can be exported as ZIP. Learn about Investigations.
3
Complete your profile
Set your username and avatar. Your display name identifies searches you create in an organization workspace.
Your first search
1
Go to the Search page
The Search page is the default landing page when you log in. If you navigated away, click Search in the left sidebar to get back.
2
Select the input type
Pick the type that matches your target:
3
Start the search
Hit Start search for a full search, or Run free preview for a limited pseudonym/email lookup when you have no paid app plan. Full results stream in real time via SSE: module cards appear as each source responds.
4
Read the result page
Each module card shows a data source. Click any card to expand linked records, images, and geographic context.
Module cards
Module cards
Each card represents one data source or provider. The number of cards you see depends on your plan: higher plans unlock more providers, including leak and breach sources.
Images tab
Images tab
Profile pictures and media found during the search are grouped in the Images tab for quick visual cross-referencing.
Leaked Results
Leaked Results
Aggregated data from leak databases. Each row shows the fields exposed: password hash, IP, username, and more. Availability depends on your plan.
Breached Accounts
Breached Accounts
Results from breach-specific providers (Snusbase, Breach VIP, Hudson Rock, LeakCheck, and others). Shows which breach an account appeared in, and when.
Registered Accounts (email only)
Registered Accounts (email only)
Only available on Email searches. Shows services and platforms where this email address has a registered account.
Map view
Map view
Any geolocation signals are plotted on an interactive map.
AI Analyst
AI Analyst
Available on Pro and Ultimate. Open the AI chat to ask questions about the results, generate a timeline, or focus on specific signals. The AI can also run a web search for additional context.
5
Come back to your results anytime
You can leave a full result page and return to it from your history. Free previews are not saved in history and expire after 15 minutes.
Common first searches by use case
Five quick starting points. For complete step-by-step workflows on each scenario, see the Use cases page.Find accounts linked to a username
Find accounts linked to a username
- Select Pseudonym as input type.
- Enter the handle exactly as you found it (case matters on some platforms).
- Review the social profile cards and breach results.
- If you find an email in the results, start a new Email search to expand the profile.
Check if an email appears in breaches
Check if an email appears in breaches
- Select Email Address as input type.
- Paste the target address.
- Breach results appear in cards from providers like Snusbase, LeakCheck, Hudson Rock, and others. Availability depends on your plan.
- Each breach card shows the data fields exposed (password hash, IP, username, etc.).
Breach provider access is gated by plan. Check Pricing to see what each plan includes.
Trace a suspicious IP
Trace a suspicious IP
- Open IP Intelligence.
- Enter the IP (IPv4 or IPv6).
- Check geolocation, hosting provider, ASN, and public threat signals.
Map a domain's infrastructure
Map a domain's infrastructure
- Open Domain Intelligence.
- Enter the root domain.
- Review DNS records, subdomains, WHOIS, and linked IP addresses.
- Cross-reference discovered IPs in IP Intelligence.
Trace a crypto wallet
Trace a crypto wallet
- Select Cryptocurrency as input type.
- Paste the full wallet address.
- Review transaction history, linked addresses, and risk signals.
Next steps
Investigation playbooks
Structured multi-step workflows for real cases.
Set up an organization
Invite members, assign roles, and use shared credits.
Monitoring & Alerts
Create scheduled checks and review alerts in an eligible workspace.