A curated list of data breach intelligence tools, OSINT platforms, dark web monitoring services, and resources for security researchers and IT professionals.
- Breach Lookup & Monitoring
- Dark Web Monitoring
- OSINT Tools
- Threat Intelligence Platforms
- Password Security
- Data Leak Search Engines
- News & Research
- Forums & Communities
- API & Developer Tools
- Training & Resources
- Have I Been Pwned - Check if your email has been compromised in data breaches
- DeHashed - Paid breach search engine with extensive dataset
- IntelligenceX - OSINT search engine including breach data
- LeakCheck - Email breach lookup and monitoring
- BreachDirectory - Free data breach search
- Snusbase - Breach database search
- Ghost Project - Password breach checker
- DarkOwl - Dark web data collection and monitoring
- Flashpoint - Threat intelligence from dark web sources
- Recorded Future - Real-time threat intelligence
- Digital Shadows - Digital risk protection
- Flare - Threat exposure monitoring
- ZeroFox - External cybersecurity platform
- Webhose.io - Dark web data feeds
- SpyCloud - Account takeover prevention
- Maltego - Data mining and link analysis
- Shodan - Search engine for Internet-connected devices
- Censys - Internet-wide scanning and search
- Recon-ng - Web reconnaissance framework
- theHarvester - E-mail, subdomain and people names harvester
- SpiderFoot - Automated OSINT tool
- Hunchly - Web investigation tool
- OSINT Framework - Collection of OSINT tools
- AlienVault OTX - Open threat intelligence community
- MISP - Threat intelligence sharing platform
- ThreatConnect - Threat intelligence operations
- Anomali - Threat intelligence and security operations
- ThreatQuotient - Threat intelligence platform
- RiskIQ - Digital threat management
- 1Password Watchtower - Monitor password breaches
- Bitwarden Breach Report - Password manager with breach alerts
- KeePass - Open-source password manager
- Password Checkup - Google password breach checker
- Pwndb - Leaked credentials search
- WeLeakInfo - Data breach search (mirror sites)
- Dehashed API - Programmatic breach search
- SecurityTrails - Historical DNS and WHOIS data
- BreachNews - Real-time data breach intelligence and reporting
- Krebs on Security - In-depth security news and investigation
- BleepingComputer - Technology news and support
- The Hacker News - Cybersecurity news platform
- Dark Reading - Cybersecurity news and analysis
- SecurityWeek - Enterprise security news
- Threatpost - Security news and insights
- DataBreaches.net - Breach disclosure reporting
- r/cybersecurity - Cybersecurity discussion
- r/OSINT - Open-source intelligence community
- r/netsec - Network security
- BreachForums - Data breach discussion (use caution)
- Hack Forums - Security and programming community
- HIBP API - Have I Been Pwned API
- IntelligenceX API - OSINT data API
- VirusTotal API - File and URL scanning
- AlienVault OTX API - Threat intelligence API
- Shodan API - Internet device search API
- OSINT Handbook - Comprehensive OSINT guide
- Breach Report Writing Guide - SANS Institute resources
- MITRE ATT&CK - Adversarial tactics and techniques
- OWASP - Web application security
- NIST Cybersecurity Framework - Security guidelines
Contributions welcome! Please submit a pull request or open an issue.
