2 min readFree

SpiderFoot

SpiderFoot is a free, open source OSINT automation tool that runs over 200 modules to gather and link data about domains, IPs, emails and other targets.

// at a glance

Is SpiderFoot free?
Free. Yes. SpiderFoot is free to use, with no paid plan.
Category
#OSINT & Research
Website
github.com ↗
SpiderFoot logo

What is SpiderFoot?

SpiderFoot is an open source intelligence (OSINT) automation tool written in Python and released under the MIT licence. You give it a target such as a domain, IP address, subnet, ASN, email address, phone number or username, and its 200+ modules query data sources and feed each other's results, so one finding leads to the next without manual copying between tools.

It runs as a local web interface or from the command line, stores results in SQLite and can export to CSV, JSON or GEXF for graph tools. The project describes both defensive use, finding what you or your organisation expose online, and authorised penetration testing. The commercial SpiderFoot HX edition was acquired by Intel 471, and spiderfoot.net now redirects to Intel 471, so the GitHub repository is the home of the free version, which has been developed since 2012.

Main Features

  • Over 200 modules for DNS, threat intelligence, breach data, social media and more
  • Works on domains, IPs, subnets, ASNs, emails, phone numbers, usernames and names
  • Web based interface or command line
  • YAML correlation engine with 37 predefined rules
  • Export to CSV, JSON and GEXF, with a SQLite back end for custom queries
  • Integrations with services such as Shodan, Have I Been Pwned and GreyNoise via API keys
  • Tor integration for dark web searches and a Dockerfile for container deployment
  • Free and MIT licensed

How to Get Started with SpiderFoot

  1. Make sure Python 3.7 or later is installed, then download the latest release from the SpiderFoot GitHub page.
  2. Install the requirements with pip and start the web interface on your own machine.
  3. Open the interface in your browser, add API keys for any data sources you use, and create a new scan for a target you are authorised to research.
  4. Review the results, correlations and graph, then export what you need.

SpiderFoot Pricing

The open source version of SpiderFoot is free under the MIT licence. Some modules rely on third-party services that need their own API keys, and some of those services charge for higher usage.

Who Should Use It?

  • Security teams mapping their own attack surface
  • Penetration testers doing authorised reconnaissance
  • Threat intelligence analysts enriching indicators
  • OSINT researchers who want to automate repetitive lookups
  • Students learning how OSINT data sources connect

SpiderFoot Alternatives

  • Maltego: a link analysis platform with a free Community Edition and paid data access.
  • OSINT Framework: a free, clickable map of more than a thousand OSINT tools and resources.
  • Shodan: a search engine for Internet-connected devices that SpiderFoot can query through its API.

Frequently Asked Questions

Is SpiderFoot free?

Yes. The open source version of SpiderFoot is free and MIT licensed. Some data sources it connects to need their own API keys, which may have free or paid tiers.

SpiderFoot collects publicly available information, but some modules actively touch the target, for example port scanning. Only scan targets you own or have written permission to assess, and follow local privacy law when researching people.

What happened to spiderfoot.net and SpiderFoot HX?

SpiderFoot was acquired by Intel 471, and spiderfoot.net now redirects to Intel 471's website. The free open source version remains available on GitHub.

Try SpiderFoot