Skip to content

What Is OSINT? Open-Source Intelligence, Without the Mystique

Methodology

OSINT — open-source intelligence — is intelligence produced from publicly available information: records, publications, public profiles, imagery, court and corporate filings, and anything else a member of the public may lawfully consult.

The word "intelligence" is doing the work in that sentence. Collecting public information is research. It becomes intelligence when it has been evaluated, corroborated and turned into something a decision can rest on.

Open source does not mean unrestricted

Publicly accessible is not the same as free to use. Personal data in a public post is still personal data, and processing it needs a lawful basis, a defined purpose and a retention limit. In most investigations the constraint is not technical access — it is whether you should be holding the material at all, and for how long.

Good practice is narrow by design: collect what the question requires, record why it was collected, and remove it when the purpose ends.

The real difficulty: what do you believe?

Beginners assume the challenge is finding information. It is almost always the opposite. A competent search produces far more material than a case can use, and the discipline is in what you reject:

  • Is this the same person? Names collide. A shared name is a lead, not an identification. See the homonym problem.
  • Where did this come from? A claim repeated by ten sites that all copied one blog post is one source, not ten.
  • When was this true? Records age. A directorship that ended in 2019 does not describe today.
  • What would falsify it? The check most investigations skip.

A workable process

  1. Define the question. Subject, scope, and what the answer will be used for.
  2. Collect deliberately. Keep the source as consulted, not just a link.
  3. Evaluate before admitting. Decide what enters the case file, and record why.
  4. Corroborate. One source is an assertion; two independent sources are a finding.
  5. Write it so it can be checked. Claims, uncertainty, and references.
  6. Retain and remove on a schedule. See provenance and retention.

Where tooling helps — and where it does not

Software makes collection faster, keeps material organised, and can propose connections a person would miss. It does not decide what is true. Any platform that presents a confident conclusion without showing what it rests on has moved the risk to you while removing your ability to check it.

That is why the useful measure of an investigative tool is not how much it finds, but how well it separates accepted findings from rejected material.

Frequently asked questions

Is OSINT legal? Consulting public sources generally is; what matters is the legal basis for processing personal data and the purpose you hold it for. Take advice for your jurisdiction.

Is OSINT enough on its own? It often answers the question, and it always shapes which other questions are worth asking.

How is it different from "just googling"? Evaluation, corroboration, provenance and retention. Everything that happens after the search.


Read next: accepted and rejected evidence or what Engramite is.