Pluggable OSINT modules that run during enrichment. Each module contributes signals to the entity graph, where multi-source triangulation increases confidence scores when data points are confirmed across independent sources.
Full DNS record analysis: A/AAAA/CNAME/MX/TXT/NS records. Identifies hosting provider, CDN, email infrastructure, and DNS-level security configuration.
Identifies web technologies, frameworks, CMS platforms, analytics tools, and infrastructure from HTTP headers, HTML patterns, and JavaScript signatures.
Discovers the dominant email pattern for a domain by analyzing discovered emails. Applies learned patterns to predict addresses for contacts without known emails.
Discovers and validates social media presence across 8 platforms. Cross-references profiles to confirm identity and extract additional contact information.
WHOIS creation date analysis provides company age signals. Newer domains may indicate startups or recently rebranded entities; older domains suggest established businesses.
SSL/TLS certificate analysis reveals organizational details, certificate authority trust level, and security posture. EV certificates indicate verified legal entities.
WHOIS record analysis extracts registrant information, organization details, and registration patterns. Privacy-protected domains are flagged but still yield registrar and date data.
All 7 modules feed signals into a SQLite entity graph. When multiple independent modules confirm the same data point (e.g., company name from WHOIS matches SSL certificate organization matches website footer), the confidence score increases through multi-source triangulation. This graph also powers anti-poisoning: data points that contradict the majority consensus are flagged for review rather than blindly accepted.
Everything you need to know about our platform.
Still have questions?
Our team can walk you through the pipeline, pricing, and your use case.