UK people, business, and address directory built on the electoral roll, directory enquiries, and Companies House data. Detailed records need credits.
selectors / company
▤ I have a company
org, registration no. · 45 tools · 30 free · 42 passive
playbooks starting here
- Company due diligence · 6 steps
can pivot to
filters
/ search · jk move · ↵ open tool · i details
Official French government company directory. SIREN/SIRET lookup, executives, beneficial owners, filings and certifications for every French business.
On-chain analytics platform that deanonymizes wallets with entity labels and offers a visualizer, alerts and portfolio views of known entities.
Recursive internet scanner that chains 100+ modules for subdomain enumeration, web spidering and email harvesting. Has a passive-only preset.
Modern BGP and ASN explorer with live routing data, upstream/downstream graphs, prefix history and DNS data per network.
Internet-wide scan data on hosts, services and certificates, with a powerful query language. Strong for certificate pivoting and finding related infrastructure.
Free Law Project's search of millions of US court opinions, oral arguments and PACER dockets from the RECAP archive. Supports alerts.
Enumerates a company's employees from LinkedIn via search-engine scraping (no LinkedIn login) and generates names and likely email addresses in a given format.
Certificate Transparency log search. Find every TLS certificate issued for a domain, which reveals subdomains, internal hostnames and related organizations.
Startup and private-company intelligence covering funding rounds, investors, acquisitions, key people and employee counts.
Free public database of ship safety information by IMO number. Registered owner, ship manager, flag history, classification society and port-state inspection records.
Interactive map and search of all EU restrictive measures by country regime, with listed persons and entities.
Official US registry lookup by N-number, serial number or owner name. Returns aircraft make/model, registered owner name and address, and the Mode S hex code.
US Federal Election Commission data on individual contributions, PACs, candidates and committee spending. Search donors by name, employer or ZIP.
Global Legal Entity Identifier index. Resolves LEIs to legal entities and shows direct and ultimate parent relationships.
Official title register and plans for properties in England and Wales, showing registered owner, price paid and charges. Small fee per document.
Finds professional email addresses for a company domain, infers the address pattern (e.g. first.last@), and verifies deliverability.
BGP and ASN explorer covering prefixes announced by an ASN, peers, upstreams, IRR records and organization search across registries.
Searchable entities, officers and intermediaries from the Panama Papers, Paradise Papers, Pandora Papers and other offshore leaks.
International directory of people and business phone listings across many countries, with reverse search where local law allows.
Free full-text search engine over hundreds of millions of US court case records, including many state and county courts.
Logs into LinkedIn and scrapes a company's employee list, then writes username lists in common formats (first.last, flast, etc.).
Crowdsourced "who-knows-who" database of power networks linking executives, politicians, lobbyists, donors and organizations.
Graph-based link-analysis platform. Run "transforms" against entities (people, domains, emails, companies) to pull data from dozens of integrated sources.
Official searchable archive of ads running on Facebook, Instagram and Messenger, with page transparency data (admin countries, name changes) and political ad spend.
Nonprofit platform to file, track and share public-records (FOIA) requests, with a searchable archive of released documents.
European company search built on registry publications. Officers, financials, ownership history and network graphs, strongest for DE, AT, CH and neighbors.
OCCRP's searchable archive of leaks, company registries, court records and gazettes used in cross-border investigative journalism.
US Treasury search of the SDN and consolidated sanctions lists, including listed digital currency addresses and vessel identifiers.
Largest open database of companies, with 200M+ entities from 140+ jurisdictions. Search by company name, registration number or officer name.
Consolidated database of sanctioned entities, politically exposed persons (PEPs) and criminal-interest targets, merged from hundreds of official sources.
In-depth attack surface mapping and subdomain discovery. Combines passive sources with optional DNS brute-forcing, permutations and ASN or netblock expansion.
Official US federal court electronic records for district, bankruptcy and appellate cases. Paid per page, with fees waived under $30 per quarter.
French phone directory covering businesses and private listings (PagesBlanches), with reverse number search.
Community database of networks, data centers and internet exchanges. Shows where an ASN physically peers and who operates it.
Search US tax-exempt organizations and read their IRS Form 990 filings, including executive pay, revenue and full-text search of filings.
Metasploit-style modular reconnaissance framework in Python, with a marketplace of modules and a built-in workspace database and reporting.
Full-text search of US SEC filings (10-K, 8-K, S-1, Form 4 insider trades, 13F) since 2001 for all public companies and many funds.
Search engine for internet-connected devices. Query banners, open ports, SSL certs, favicons and vulnerabilities across the IPv4 space.
Collects emails, subdomains, hosts, employee names and IPs for a domain from search engines, PGP servers, certificate logs and APIs.
Official UK company register. Free filings, accounts, officers, persons with significant control (PSC) and charges for every UK company.
Official source for US federal spending. Search contracts, grants and loans by recipient, agency or location.
Guesses and verifies a person's work email from their name and company domain.
WHOIS lookup with cheap historical WHOIS and reverse WHOIS by registrant name, email, company or keyword.
Official Swiss central business name index. Search all companies entered in cantonal commercial registers and their SOGC publications.
0 results. Try loosening the filters or a different term.